| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | ·d6416617fad0f985b9a3e54a25bd18b0·181960·admin·optional·ssg-applications_0.1.65-1_all.deb | 1 | ·d6416617fad0f985b9a3e54a25bd18b0·181960·admin·optional·ssg-applications_0.1.65-1_all.deb |
| 2 | ·f7bae0738ce4e633a16dbb487c1b30d5·27788·admin·optional·ssg-base_0.1.65-1_all.deb | 2 | ·f7bae0738ce4e633a16dbb487c1b30d5·27788·admin·optional·ssg-base_0.1.65-1_all.deb |
| 3 | ·d25685a1025fbc489f936a51e9fe92c0·3378740·admin·optional·ssg-debderived_0.1.65-1_all.deb | ||
| 4 | ·5c779913026f82fe951154bf9861896b·828612·admin·optional·ssg-debian_0.1.65-1_all.deb | ||
| 5 | · | 3 | ·dea77b39c5e186adcc8f0678e4b52c30·3380276·admin·optional·ssg-debderived_0.1.65-1_all.deb |
| 4 | ·70c3da9449f76a545986e2dcc5b671b2·828508·admin·optional·ssg-debian_0.1.65-1_all.deb | ||
| 5 | ·9ef0b7b63abc4f4b2bb118c4cfb99a5b·40218700·admin·optional·ssg-nondebian_0.1.65-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····278 | 2 | -rw-r--r--···0········0········0·····2788·2022-12-20·09:54:05.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··337 | 3 | -rw-r--r--···0········0········0··3377296·2022-12-20·09:54:05.000000·data.tar.xz |
| Offset 18332, 22 lines modified | Offset 18332, 22 lines modified | ||
| 000479b0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | 000479b0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 000479c0:·6963·745f·7374·7261·7465·6779·0a0a·2d20··ict_strategy..-· | 000479c0:·6963·745f·7374·7261·7465·6779·0a0a·2d20··ict_strategy..-· | ||
| 000479d0:·6e61·6d65·3a20·5365·7420·6172·6368·6974··name:·Set·archit | 000479d0:·6e61·6d65·3a20·5365·7420·6172·6368·6974··name:·Set·archit | ||
| 000479e0:·6563·7475·7265·2066·6f72·2061·7564·6974··ecture·for·audit | 000479e0:·6563·7475·7265·2066·6f72·2061·7564·6974··ecture·for·audit | ||
| 000479f0:·2074·6173·6b73·0a20·2073·6574·5f66·6163···tasks.··set_fac | 000479f0:·2074·6173·6b73·0a20·2073·6574·5f66·6163···tasks.··set_fac | ||
| 00047a00:·743a·0a20·2020·2061·7564·6974·5f61·7263··t:.····audit_arc | 00047a00:·743a·0a20·2020·2061·7564·6974·5f61·7263··t:.····audit_arc | ||
| 00047a10:·683a·2062·3634·0a20·2077·6865·6e3a·0a20··h:·b64.··when:.· | 00047a10:·683a·2062·3634·0a20·2077·6865·6e3a·0a20··h:·b64.··when:.· | ||
| 00047a20:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | |||
| 00047a30:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 00047a40:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | |||
| 00047a50:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 00047a60:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 00047a70:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 00047a80:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 00047a | 00047a20:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 00047a30:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 00047a40:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 00047a50:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 00047a60:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 00047a70:·7461·696e·6572·225d·0a20·202d·2027·2261··tainer"].··-·'"a | |||
| 00047a80:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | |||
| 00047a90:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 00047aa0:·0a20·202d·2061·6e73·6962·6c65·5f61·7263··.··-·ansible_arc | 00047aa0:·0a20·202d·2061·6e73·6962·6c65·5f61·7263··.··-·ansible_arc | ||
| 00047ab0:·6869·7465·6374·7572·6520·3d3d·2022·6161··hitecture·==·"aa | 00047ab0:·6869·7465·6374·7572·6520·3d3d·2022·6161··hitecture·==·"aa | ||
| 00047ac0:·7263·6836·3422·206f·7220·616e·7369·626c··rch64"·or·ansibl | 00047ac0:·7263·6836·3422·206f·7220·616e·7369·626c··rch64"·or·ansibl | ||
| 00047ad0:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | 00047ad0:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | ||
| 00047ae0:·3d20·2270·7063·3634·2220·6f72·2061·6e73··=·"ppc64"·or·ans | 00047ae0:·3d20·2270·7063·3634·2220·6f72·2061·6e73··=·"ppc64"·or·ans | ||
| 00047af0:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | 00047af0:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 00047b00:·650a·2020·2020·3d3d·2022·7070·6336·346c··e.····==·"ppc64l | 00047b00:·650a·2020·2020·3d3d·2022·7070·6336·346c··e.····==·"ppc64l | ||
| Offset 18644, 23 lines modified | Offset 18644, 23 lines modified | ||
| 00048d30:·6d65·5f72·756c·6573·0a20·2020·2020·2063··me_rules.······c | 00048d30:·6d65·5f72·756c·6573·0a20·2020·2020·2063··me_rules.······c | ||
| 00048d40:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | 00048d40:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | ||
| 00048d50:·2020·6d6f·6465·3a20·6f2d·7277·780a·2020····mode:·o-rwx.·· | 00048d50:·2020·6d6f·6465·3a20·6f2d·7277·780a·2020····mode:·o-rwx.·· | ||
| 00048d60:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | 00048d60:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | ||
| 00048d70:·6e74·0a20·2020·2077·6865·6e3a·2073·7973··nt.····when:·sys | 00048d70:·6e74·0a20·2020·2077·6865·6e3a·2073·7973··nt.····when:·sys | ||
| 00048d80:·6361·6c6c·735f·666f·756e·6420·7c20·6c65··calls_found·|·le | 00048d80:·6361·6c6c·735f·666f·756e·6420·7c20·6c65··calls_found·|·le | ||
| 00048d90:·6e67·7468·203d·3d20·300a·2020·7768·656e··ngth·==·0.··when | 00048d90:·6e67·7468·203d·3d20·300a·2020·7768·656e··ngth·==·0.··when | ||
| 00048da0:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | |||
| 00048db0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 00048dc0:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 00048dd0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 00048de0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 00048df0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 00048e00:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 00048 | 00048da0:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | ||
| 00048db0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00048dc0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00048dd0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00048de0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00048df0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 00048e00:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 00048e10:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 00048e20:· | 00048e20:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | ||
| 00048e30:·434a·4953·2d35·2e34·2e31·2e31·0a20·202d··CJIS-5.4.1.1.··- | 00048e30:·434a·4953·2d35·2e34·2e31·2e31·0a20·202d··CJIS-5.4.1.1.··- | ||
| 00048e40:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 00048e40:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 00048e50:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 00048e50:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| 00048e60:·2d35·332d·4143·2d36·2839·290a·2020·2d20··-53-AC-6(9).··-· | 00048e60:·2d35·332d·4143·2d36·2839·290a·2020·2d20··-53-AC-6(9).··-· | ||
| 00048e70:·4e49·5354·2d38·3030·2d35·332d·4155·2d31··NIST-800-53-AU-1 | 00048e70:·4e49·5354·2d38·3030·2d35·332d·4155·2d31··NIST-800-53-AU-1 | ||
| 00048e80:·3228·6329·0a20·202d·204e·4953·542d·3830··2(c).··-·NIST-80 | 00048e80:·3228·6329·0a20·202d·204e·4953·542d·3830··2(c).··-·NIST-80 | ||
| 00048e90:·302d·3533·2d41·552d·3228·6429·0a20·202d··0-53-AU-2(d).··- | 00048e90:·302d·3533·2d41·552d·3228·6429·0a20·202d··0-53-AU-2(d).··- | ||
| Offset 18944, 22 lines modified | Offset 18944, 22 lines modified | ||
| 00049ff0:·756c·6573·0a20·2020·2020·2063·7265·6174··ules.······creat | 00049ff0:·756c·6573·0a20·2020·2020·2063·7265·6174··ules.······creat | ||
| 0004a000:·653a·2074·7275·650a·2020·2020·2020·6d6f··e:·true.······mo | 0004a000:·653a·2074·7275·650a·2020·2020·2020·6d6f··e:·true.······mo | ||
| 0004a010:·6465·3a20·6f2d·7277·780a·2020·2020·2020··de:·o-rwx.······ | 0004a010:·6465·3a20·6f2d·7277·780a·2020·2020·2020··de:·o-rwx.······ | ||
| 0004a020:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | 0004a020:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | ||
| 0004a030:·2020·2077·6865·6e3a·2073·7973·6361·6c6c·····when:·syscall | 0004a030:·2020·2077·6865·6e3a·2073·7973·6361·6c6c·····when:·syscall | ||
| 0004a040:·735f·666f·756e·6420·7c20·6c65·6e67·7468··s_found·|·length | 0004a040:·735f·666f·756e·6420·7c20·6c65·6e67·7468··s_found·|·length | ||
| 0004a050:·203d·3d20·300a·2020·7768·656e·3a0a·2020···==·0.··when:.·· | 0004a050:·203d·3d20·300a·2020·7768·656e·3a0a·2020···==·0.··when:.·· | ||
| 0004a060:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 0004a070:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0004a080:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 0004a090:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0004a0a0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0004a0b0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0004a0c0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0004a0 | 0004a060:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 0004a070:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0004a080:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0004a090:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0004a0a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0004a0b0:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 0004a0c0:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 0004a0d0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0004a0e0:·2020·2d20·6175·6469·745f·6172·6368·203d····-·audit_arch·= | 0004a0e0:·2020·2d20·6175·6469·745f·6172·6368·203d····-·audit_arch·= | ||
| 0004a0f0:·3d20·2262·3634·220a·2020·7461·6773·3a0a··=·"b64".··tags:. | 0004a0f0:·3d20·2262·3634·220a·2020·7461·6773·3a0a··=·"b64".··tags:. | ||
| 0004a100:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | 0004a100:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | ||
| 0004a110:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 0004a110:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0004a120:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 0004a120:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 0004a130:·2d38·3030·2d35·332d·4143·2d36·2839·290a··-800-53-AC-6(9). | 0004a130:·2d38·3030·2d35·332d·4143·2d36·2839·290a··-800-53-AC-6(9). | ||
| 0004a140:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | 0004a140:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| Offset 22393, 23 lines modified | Offset 22393, 23 lines modified | ||
| 00057780:·2063·6f6e·7461·696e·733a·205e·5c73·2a2d···contains:·^\s*- | 00057780:·2063·6f6e·7461·696e·733a·205e·5c73·2a2d···contains:·^\s*- | ||
| 00057790:·775c·732b·2f65·7463·2f73·7564·6f65·7273··w\s+/etc/sudoers | 00057790:·775c·732b·2f65·7463·2f73·7564·6f65·7273··w\s+/etc/sudoers | ||
| 000577a0:·5c73·2b2d·705c·732b·7761·285c·737c·2429··\s+-p\s+wa(\s|$) | 000577a0:·5c73·2b2d·705c·732b·7761·285c·737c·2429··\s+-p\s+wa(\s|$) | ||
| 000577b0:·2b0a·2020·2020·7061·7474·6572·6e73·3a20··+.····patterns:· | 000577b0:·2b0a·2020·2020·7061·7474·6572·6e73·3a20··+.····patterns:· | ||
| 000577c0:·272a·2e72·756c·6573·270a·2020·7265·6769··'*.rules'.··regi | 000577c0:·272a·2e72·756c·6573·270a·2020·7265·6769··'*.rules'.··regi | ||
| 000577d0:·7374·6572·3a20·6669·6e64·5f65·7869·7374··ster:·find_exist | 000577d0:·7374·6572·3a20·6669·6e64·5f65·7869·7374··ster:·find_exist | ||
| 000577e0:·696e·675f·7761·7463·685f·7275·6c65·735f··ing_watch_rules_ | 000577e0:·696e·675f·7761·7463·685f·7275·6c65·735f··ing_watch_rules_ | ||
| 000577f0:·640a·2020·7768·656e·3a0a·2020·2d20· | 000577f0:·640a·2020·7768·656e·3a0a·2020·2d20·616e··d.··when:.··-·an | ||
| 00057800:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | |||
| 00057810:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00057820:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | |||
| 00057830:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00057840:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00057850:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00057860:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000578 | 00057800:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 00057810:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 00057820:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 00057830:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 00057840:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 00057850:·7222·5d0a·2020·2d20·2722·6175·6469·7422··r"].··-·'"audit" | |||
| 00057860:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00057870:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 00057880:·6773·3a0a·2020·2d20·434a·4953·2d35·2e34··gs:.··-·CJIS-5.4 | 00057880:·6773·3a0a·2020·2d20·434a·4953·2d35·2e34··gs:.··-·CJIS-5.4 | ||
| 00057890:·2e31·2e31·0a20·202d·204e·4953·542d·3830··.1.1.··-·NIST-80 | 00057890:·2e31·2e31·0a20·202d·204e·4953·542d·3830··.1.1.··-·NIST-80 | ||
| 000578a0:·302d·3137·312d·332e·312e·370a·2020·2d20··0-171-3.1.7.··-· | 000578a0:·302d·3137·312d·332e·312e·370a·2020·2d20··0-171-3.1.7.··-· | ||
| 000578b0:·4e49·5354·2d38·3030·2d35·332d·4143·2d32··NIST-800-53-AC-2 | 000578b0:·4e49·5354·2d38·3030·2d35·332d·4143·2d32··NIST-800-53-AC-2 | ||
| 000578c0:·2837·2928·6229·0a20·202d·204e·4953·542d··(7)(b).··-·NIST- | 000578c0:·2837·2928·6229·0a20·202d·204e·4953·542d··(7)(b).··-·NIST- | ||
| 000578d0:·3830·302d·3533·2d41·432d·3628·3929·0a20··800-53-AC-6(9).· | 000578d0:·3830·302d·3533·2d41·432d·3628·3929·0a20··800-53-AC-6(9).· | ||
| 000578e0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 000578e0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| Offset 22437, 23 lines modified | Offset 22437, 23 lines modified | ||
| 00057a40:·6574·632f·6175·6469·742f·7275·6c65·732e··etc/audit/rules. | 00057a40:·6574·632f·6175·6469·742f·7275·6c65·732e··etc/audit/rules. | ||
| 00057a50:·640a·2020·2020·636f·6e74·6169·6e73·3a20··d.····contains:· | 00057a50:·640a·2020·2020·636f·6e74·6169·6e73·3a20··d.····contains:· | ||
| 00057a60:·5e2e·2a28·3f3a·2d46·206b·6579·3d7c·2d6b··^.*(?:-F·key=|-k | 00057a60:·5e2e·2a28·3f3a·2d46·206b·6579·3d7c·2d6b··^.*(?:-F·key=|-k | ||
| 00057a70:·5c73·2b29·6163·7469·6f6e·7324·0a20·2020··\s+)actions$.··· | 00057a70:·5c73·2b29·6163·7469·6f6e·7324·0a20·2020··\s+)actions$.··· | ||
| 00057a80:·2070·6174·7465·726e·733a·2027·2a2e·7275···patterns:·'*.ru | 00057a80:·2070·6174·7465·726e·733a·2027·2a2e·7275···patterns:·'*.ru | ||
| Max diff block lines reached; 30698/39798 bytes (77.13%) of diff not shown. | |||
| Offset 369, 16 lines modified | Offset 369, 16 lines modified | ||
| 369 | ··-·no_reboot_needed | 369 | ··-·no_reboot_needed |
| 370 | ··-·restrict_strategy | 370 | ··-·restrict_strategy |
| 371 | -·name:·Set·architecture·for·audit·tasks | 371 | -·name:·Set·architecture·for·audit·tasks |
| 372 | ··set_fact: | 372 | ··set_fact: |
| 373 | ····audit_arch:·b64 | 373 | ····audit_arch:·b64 |
| 374 | ··when: | 374 | ··when: |
| 375 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 376 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 375 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 376 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 377 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 377 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 378 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 378 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 379 | ··tags: | 379 | ··tags: |
| 380 | ··-·CJIS-5.4.1.1 | 380 | ··-·CJIS-5.4.1.1 |
| 381 | ··-·NIST-800-171-3.1.7 | 381 | ··-·NIST-800-171-3.1.7 |
| 382 | ··-·NIST-800-53-AC-6(9) | 382 | ··-·NIST-800-53-AC-6(9) |
| 383 | ··-·NIST-800-53-AU-12(c) | 383 | ··-·NIST-800-53-AU-12(c) |
| Offset 513, 16 lines modified | Offset 513, 16 lines modified | ||
| 513 | ······path:·'{{·audit_file·}}' | 513 | ······path:·'{{·audit_file·}}' |
| 514 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules | 514 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules |
| 515 | ······create:·true | 515 | ······create:·true |
| 516 | ······mode:·o-rwx | 516 | ······mode:·o-rwx |
| 517 | ······state:·present | 517 | ······state:·present |
| 518 | ····when:·syscalls_found·|·length·==·0 | 518 | ····when:·syscalls_found·|·length·==·0 |
| 519 | ··when: | 519 | ··when: |
| 520 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 521 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 520 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 521 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 522 | ··tags: | 522 | ··tags: |
| 523 | ··-·CJIS-5.4.1.1 | 523 | ··-·CJIS-5.4.1.1 |
| 524 | ··-·NIST-800-171-3.1.7 | 524 | ··-·NIST-800-171-3.1.7 |
| 525 | ··-·NIST-800-53-AC-6(9) | 525 | ··-·NIST-800-53-AC-6(9) |
| 526 | ··-·NIST-800-53-AU-12(c) | 526 | ··-·NIST-800-53-AU-12(c) |
| 527 | ··-·NIST-800-53-AU-2(d) | 527 | ··-·NIST-800-53-AU-2(d) |
| 528 | ··-·NIST-800-53-CM-6(a) | 528 | ··-·NIST-800-53-CM-6(a) |
| Offset 654, 16 lines modified | Offset 654, 16 lines modified | ||
| 654 | ······path:·'{{·audit_file·}}' | 654 | ······path:·'{{·audit_file·}}' |
| 655 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules | 655 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules |
| 656 | ······create:·true | 656 | ······create:·true |
| 657 | ······mode:·o-rwx | 657 | ······mode:·o-rwx |
| 658 | ······state:·present | 658 | ······state:·present |
| 659 | ····when:·syscalls_found·|·length·==·0 | 659 | ····when:·syscalls_found·|·length·==·0 |
| 660 | ··when: | 660 | ··when: |
| 661 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 662 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 661 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 662 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 663 | ··-·audit_arch·==·"b64" | 663 | ··-·audit_arch·==·"b64" |
| 664 | ··tags: | 664 | ··tags: |
| 665 | ··-·CJIS-5.4.1.1 | 665 | ··-·CJIS-5.4.1.1 |
| 666 | ··-·NIST-800-171-3.1.7 | 666 | ··-·NIST-800-171-3.1.7 |
| 667 | ··-·NIST-800-53-AC-6(9) | 667 | ··-·NIST-800-53-AC-6(9) |
| 668 | ··-·NIST-800-53-AU-12(c) | 668 | ··-·NIST-800-53-AU-12(c) |
| 669 | ··-·NIST-800-53-AU-2(d) | 669 | ··-·NIST-800-53-AU-2(d) |
| Offset 831, 16 lines modified | Offset 831, 16 lines modified | ||
| 831 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 831 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 832 | ··find: | 832 | ··find: |
| 833 | ····paths:·/etc/audit/rules.d | 833 | ····paths:·/etc/audit/rules.d |
| 834 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 834 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 835 | ····patterns:·'*.rules' | 835 | ····patterns:·'*.rules' |
| 836 | ··register:·find_existing_watch_rules_d | 836 | ··register:·find_existing_watch_rules_d |
| 837 | ··when: | 837 | ··when: |
| 838 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 839 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 838 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 839 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 840 | ··tags: | 840 | ··tags: |
| 841 | ··-·CJIS-5.4.1.1 | 841 | ··-·CJIS-5.4.1.1 |
| 842 | ··-·NIST-800-171-3.1.7 | 842 | ··-·NIST-800-171-3.1.7 |
| 843 | ··-·NIST-800-53-AC-2(7)(b) | 843 | ··-·NIST-800-53-AC-2(7)(b) |
| 844 | ··-·NIST-800-53-AC-6(9) | 844 | ··-·NIST-800-53-AC-6(9) |
| 845 | ··-·NIST-800-53-AU-12(c) | 845 | ··-·NIST-800-53-AU-12(c) |
| 846 | ··-·NIST-800-53-AU-2(d) | 846 | ··-·NIST-800-53-AU-2(d) |
| Offset 857, 16 lines modified | Offset 857, 16 lines modified | ||
| 857 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 857 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 858 | ··find: | 858 | ··find: |
| 859 | ····paths:·/etc/audit/rules.d | 859 | ····paths:·/etc/audit/rules.d |
| 860 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 860 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 861 | ····patterns:·'*.rules' | 861 | ····patterns:·'*.rules' |
| 862 | ··register:·find_watch_key | 862 | ··register:·find_watch_key |
| 863 | ··when: | 863 | ··when: |
| 864 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 865 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 864 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 865 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 866 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 866 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 867 | ····==·0 | 867 | ····==·0 |
| 868 | ··tags: | 868 | ··tags: |
| 869 | ··-·CJIS-5.4.1.1 | 869 | ··-·CJIS-5.4.1.1 |
| 870 | ··-·NIST-800-171-3.1.7 | 870 | ··-·NIST-800-171-3.1.7 |
| 871 | ··-·NIST-800-53-AC-2(7)(b) | 871 | ··-·NIST-800-53-AC-2(7)(b) |
| 872 | ··-·NIST-800-53-AC-6(9) | 872 | ··-·NIST-800-53-AC-6(9) |
| Offset 883, 16 lines modified | Offset 883, 16 lines modified | ||
| 883 | ··-·restrict_strategy | 883 | ··-·restrict_strategy |
| 884 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 884 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 885 | ··set_fact: | 885 | ··set_fact: |
| 886 | ····all_files: | 886 | ····all_files: |
| 887 | ····-·/etc/audit/rules.d/actions.rules | 887 | ····-·/etc/audit/rules.d/actions.rules |
| 888 | ··when: | 888 | ··when: |
| 889 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 890 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 889 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 890 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 891 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and | 891 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and |
| 892 | find_existing_watch_rules_d.matched | 892 | find_existing_watch_rules_d.matched |
| 893 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 893 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 894 | ··tags: | 894 | ··tags: |
| 895 | ··-·CJIS-5.4.1.1 | 895 | ··-·CJIS-5.4.1.1 |
| 896 | ··-·NIST-800-171-3.1.7 | 896 | ··-·NIST-800-171-3.1.7 |
| 897 | ··-·NIST-800-53-AC-2(7)(b) | 897 | ··-·NIST-800-53-AC-2(7)(b) |
| Offset 910, 16 lines modified | Offset 910, 16 lines modified | ||
| 910 | ··-·restrict_strategy | 910 | ··-·restrict_strategy |
| 911 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 911 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 912 | ··set_fact: | 912 | ··set_fact: |
| 913 | ····all_files: | 913 | ····all_files: |
| 914 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 914 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 915 | ··when: | 915 | ··when: |
| 916 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 917 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 916 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 917 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 918 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and | 918 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and |
| 919 | find_existing_watch_rules_d.matched | 919 | find_existing_watch_rules_d.matched |
| 920 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 920 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 921 | ··tags: | 921 | ··tags: |
| 922 | ··-·CJIS-5.4.1.1 | 922 | ··-·CJIS-5.4.1.1 |
| 923 | ··-·NIST-800-171-3.1.7 | 923 | ··-·NIST-800-171-3.1.7 |
| 924 | ··-·NIST-800-53-AC-2(7)(b) | 924 | ··-·NIST-800-53-AC-2(7)(b) |
| Offset 939, 16 lines modified | Offset 939, 16 lines modified | ||
| 939 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 939 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 6978/11357 bytes (61.44%) of diff not shown. | |||
| Offset 38517, 22 lines modified | Offset 38517, 22 lines modified | ||
| 00096740:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 00096740:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 00096750:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 00096750:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 00096760:·7562·2f67·7275·622e·6366·670a·2020·7374··ub/grub.cfg.··st | 00096760:·7562·2f67·7275·622e·6366·670a·2020·7374··ub/grub.cfg.··st | ||
| 00096770:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | 00096770:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | ||
| 00096780:·6f6f·742f·6772·7562·2f67·7275·622e·6366··oot/grub/grub.cf | 00096780:·6f6f·742f·6772·7562·2f67·7275·622e·6366··oot/grub/grub.cf | ||
| 00096790:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 00096790:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 000967a0:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 000967a0:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 000967b0:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000967c0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 000967d0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000967e0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000967f0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 00096800:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 00096810:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00096 | 000967b0:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 000967c0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 000967d0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 000967e0:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000967f0:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 00096800:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 00096810:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 00096820:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 00096830:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 00096830:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 00096840:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 00096840:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 00096850:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 00096850:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 00096860:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 00096860:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 00096870:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 00096870:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 00096880:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | 00096880:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 00096890:·4a49·532d·352e·352e·322e·320a·2020·2d20··JIS-5.5.2.2.··-· | 00096890:·4a49·532d·352e·352e·322e·320a·2020·2d20··JIS-5.5.2.2.··-· | ||
| Offset 38552, 22 lines modified | Offset 38552, 22 lines modified | ||
| 00096970:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | 00096970:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | ||
| 00096980:·6e73·7572·6520·6f77·6e65·7220·3020·6f6e··nsure·owner·0·on | 00096980:·6e73·7572·6520·6f77·6e65·7220·3020·6f6e··nsure·owner·0·on | ||
| 00096990:·202f·626f·6f74·2f67·7275·622f·6772·7562···/boot/grub/grub | 00096990:·202f·626f·6f74·2f67·7275·622f·6772·7562···/boot/grub/grub | ||
| 000969a0:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 000969a0:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 000969b0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 000969b0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 000969c0:·622f·6772·7562·2e63·6667·0a20·2020·206f··b/grub.cfg.····o | 000969c0:·622f·6772·7562·2e63·6667·0a20·2020·206f··b/grub.cfg.····o | ||
| 000969d0:·776e·6572·3a20·2730·270a·2020·7768·656e··wner:·'0'.··when | 000969d0:·776e·6572·3a20·2730·270a·2020·7768·656e··wner:·'0'.··when | ||
| 000969e0:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000969f0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 00096a00:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 00096a10:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 00096a20:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 00096a30:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 00096a40:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00096 | 000969e0:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 000969f0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 00096a00:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 00096a10:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 00096a20:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 00096a30:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 00096a40:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 00096a50:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 00096a60:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 00096a60:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 00096a70:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 00096a70:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 00096a80:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 00096a80:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 00096a90:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 00096a90:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 00096aa0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 00096aa0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 00096ab0:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | 00096ab0:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | ||
| 00096ac0:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | 00096ac0:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | ||
| Offset 38617, 24 lines modified | Offset 38617, 24 lines modified | ||
| 00096d80:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | 00096d80:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 00096d90:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | 00096d90:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | ||
| 00096da0:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | 00096da0:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | ||
| 00096db0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | 00096db0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 00096dc0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 00096dc0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 00096dd0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 00096dd0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 00096de0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 00096de0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 00096df0:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 00096 | 00096df0:·666f·726d·730a·6966·2064·706b·672d·7175··forms.if·dpkg-qu | ||
| 00096e00:·6572·7920·2d2d·7368·6f77·202d·2d73·686f··ery·--show·--sho | |||
| 00096e10:·7766·6f72·6d61·743d·2724·7b64·623a·5374··wformat='${db:St | |||
| 00096e20:·6174·7573·2d53·7461·7475·737d·5c6e·2720··atus-Status}\n'· | |||
| 00096e30:·2767·7275·6232·2d63·6f6d·6d6f·6e27·2032··'grub2-common'·2 | |||
| 00096e40:·2667·743b·2f64·6576·2f6e·756c·6c20·7c20··>/dev/null·|· | |||
| 00096e50:·6772·6570·202d·7120·696e·7374·616c·6c65··grep·-q·installe | |||
| 00096e | 00096e60:·6420·2661·6d70·3b26·616d·703b·205b·2021··d·&&·[·! | ||
| 00096e70:·202d·6620·2f73·7973·2f66·6972·6d77·6172···-f·/sys/firmwar | |||
| 00096e80:·652f·6566·6920·5d20·2661·6d70·3b26·616d··e/efi·]·&&am | |||
| 00096e20:·706b·672d·7175·6572·7920·2d2d·7368·6f77··pkg-query·--show | |||
| 00096e30:·202d·2d73·686f·7766·6f72·6d61·743d·2724···--showformat='$ | |||
| 00096e40:·7b64·623a·5374·6174·7573·2d53·7461·7475··{db:Status-Statu | |||
| 00096e50:·737d·5c6e·2720·2767·7275·6232·2d63·6f6d··s}\n'·'grub2-com | |||
| 00096e60:·6d6f·6e27·2032·2667·743b·2f64·6576·2f6e··mon'·2>/dev/n | |||
| 00096e70:·756c·6c20·7c20·6772·6570·202d·7120·696e··ull·|·grep·-q·in | |||
| 00096e80:·7374·616c·6c65·6420·2661·6d70·3b26·616d··stalled·&&am | |||
| 00096e90:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | 00096e90:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | ||
| 00096ea0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | 00096ea0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | ||
| 00096eb0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | 00096eb0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | ||
| 00096ec0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | 00096ec0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | ||
| 00096ed0:·3b20·7d3b·2074·6865·6e0a·0a63·686f·776e··;·};·then..chown | 00096ed0:·3b20·7d3b·2074·6865·6e0a·0a63·686f·776e··;·};·then..chown | ||
| 00096ee0:·2030·202f·626f·6f74·2f67·7275·622f·6772···0·/boot/grub/gr | 00096ee0:·2030·202f·626f·6f74·2f67·7275·622f·6772···0·/boot/grub/gr | ||
| 00096ef0:·7562·2e63·6667·0a0a·656c·7365·0a20·2020··ub.cfg..else.··· | 00096ef0:·7562·2e63·6667·0a0a·656c·7365·0a20·2020··ub.cfg..else.··· | ||
| Offset 39085, 22 lines modified | Offset 39085, 22 lines modified | ||
| 00098ac0:·0a2d·206e·616d·653a·2054·6573·7420·666f··.-·name:·Test·fo | 00098ac0:·0a2d·206e·616d·653a·2054·6573·7420·666f··.-·name:·Test·fo | ||
| 00098ad0:·7220·6578·6973·7465·6e63·6520·2f62·6f6f··r·existence·/boo | 00098ad0:·7220·6578·6973·7465·6e63·6520·2f62·6f6f··r·existence·/boo | ||
| 00098ae0:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | 00098ae0:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | ||
| 00098af0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 00098af0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 00098b00:·3a20·2f62·6f6f·742f·6772·7562·2f67·7275··:·/boot/grub/gru | 00098b00:·3a20·2f62·6f6f·742f·6772·7562·2f67·7275··:·/boot/grub/gru | ||
| 00098b10:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 00098b10:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 00098b20:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 00098b20:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 00098b30:·7768·656e·3a0a·2020·2d20·2722· | 00098b30:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 00098b40:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 00098b50:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 00098b60:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 00098b70:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 00098b80:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 00098b90:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00098b | 00098b40:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 00098b50:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00098b60:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 00098b70:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00098b80:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00098b90:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 00098ba0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 00098bb0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 00098bb0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 00098bc0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 00098bc0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 00098bd0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 00098bd0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 00098be0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 00098be0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 00098bf0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 00098bf0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 00098c00:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 00098c00:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 00098c10:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 00098c10:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| Offset 39121, 21 lines modified | Offset 39121, 21 lines modified | ||
| 00098d00:·732c·6f2d·7877·7274·206f·6e20·2f62·6f6f··s,o-xwrt·on·/boo | 00098d00:·732c·6f2d·7877·7274·206f·6e20·2f62·6f6f··s,o-xwrt·on·/boo | ||
| 00098d10:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | 00098d10:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | ||
| 00098d20:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | 00098d20:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | ||
| 00098d30:·3a20·2f62·6f6f·742f·6772·7562·2f67·7275··:·/boot/grub/gru | 00098d30:·3a20·2f62·6f6f·742f·6772·7562·2f67·7275··:·/boot/grub/gru | ||
| 00098d40:·622e·6366·670a·2020·2020·6d6f·6465·3a20··b.cfg.····mode:· | 00098d40:·622e·6366·670a·2020·2020·6d6f·6465·3a20··b.cfg.····mode:· | ||
| Max diff block lines reached; 3890/12990 bytes (29.95%) of diff not shown. | |||
| Offset 3223, 16 lines modified | Offset 3223, 16 lines modified | ||
| 3223 | ··-·no_reboot_needed | 3223 | ··-·no_reboot_needed |
| 3224 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3224 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3225 | ··stat: | 3225 | ··stat: |
| 3226 | ····path:·/boot/grub/grub.cfg | 3226 | ····path:·/boot/grub/grub.cfg |
| 3227 | ··register:·file_exists | 3227 | ··register:·file_exists |
| 3228 | ··when: | 3228 | ··when: |
| 3229 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3230 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3229 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3230 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3231 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3231 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3232 | ··tags: | 3232 | ··tags: |
| 3233 | ··-·CJIS-5.5.2.2 | 3233 | ··-·CJIS-5.5.2.2 |
| 3234 | ··-·NIST-800-171-3.4.5 | 3234 | ··-·NIST-800-171-3.4.5 |
| 3235 | ··-·NIST-800-53-AC-6(1) | 3235 | ··-·NIST-800-53-AC-6(1) |
| 3236 | ··-·NIST-800-53-CM-6(a) | 3236 | ··-·NIST-800-53-CM-6(a) |
| 3237 | ··-·PCI-DSS-Req-7.1 | 3237 | ··-·PCI-DSS-Req-7.1 |
| Offset 3244, 16 lines modified | Offset 3244, 16 lines modified | ||
| 3244 | ··-·no_reboot_needed | 3244 | ··-·no_reboot_needed |
| 3245 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 3245 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 3246 | ··file: | 3246 | ··file: |
| 3247 | ····path:·/boot/grub/grub.cfg | 3247 | ····path:·/boot/grub/grub.cfg |
| 3248 | ····owner:·'0' | 3248 | ····owner:·'0' |
| 3249 | ··when: | 3249 | ··when: |
| 3250 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3251 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3250 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3251 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3253 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3253 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3254 | ··tags: | 3254 | ··tags: |
| 3255 | ··-·CJIS-5.5.2.2 | 3255 | ··-·CJIS-5.5.2.2 |
| 3256 | ··-·NIST-800-171-3.4.5 | 3256 | ··-·NIST-800-171-3.4.5 |
| 3257 | ··-·NIST-800-53-AC-6(1) | 3257 | ··-·NIST-800-53-AC-6(1) |
| 3258 | ··-·NIST-800-53-CM-6(a) | 3258 | ··-·NIST-800-53-CM-6(a) |
| Offset 3265, 16 lines modified | Offset 3265, 16 lines modified | ||
| 3265 | ··-·medium_severity | 3265 | ··-·medium_severity |
| 3266 | ··-·no_reboot_needed | 3266 | ··-·no_reboot_needed |
| 3267 | Remediation_Shell_script_⇲ | 3267 | Remediation_Shell_script_⇲ |
| 3268 | Complexity:·low | 3268 | Complexity:·low |
| 3269 | Disruption:·low | 3269 | Disruption:·low |
| 3270 | Strategy:···configure | 3270 | Strategy:···configure |
| 3271 | #·Remediation·is·applicable·only·in·certain·platforms | 3271 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3272 | if· | 3272 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·[·! |
| 3273 | 3273 | -f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3274 | chown·0·/boot/grub/grub.cfg | 3274 | chown·0·/boot/grub/grub.cfg |
| 3275 | else | 3275 | else |
| 3276 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3276 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3277 | fi | 3277 | fi |
| 3278 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** | 3278 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** |
| Offset 3310, 16 lines modified | Offset 3310, 16 lines modified | ||
| 3310 | ··-·no_reboot_needed | 3310 | ··-·no_reboot_needed |
| 3311 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3311 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3312 | ··stat: | 3312 | ··stat: |
| 3313 | ····path:·/boot/grub/grub.cfg | 3313 | ····path:·/boot/grub/grub.cfg |
| 3314 | ··register:·file_exists | 3314 | ··register:·file_exists |
| 3315 | ··when: | 3315 | ··when: |
| 3316 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3317 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3316 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3317 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3318 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3318 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3319 | ··tags: | 3319 | ··tags: |
| 3320 | ··-·NIST-800-171-3.4.5 | 3320 | ··-·NIST-800-171-3.4.5 |
| 3321 | ··-·NIST-800-53-AC-6(1) | 3321 | ··-·NIST-800-53-AC-6(1) |
| 3322 | ··-·NIST-800-53-CM-6(a) | 3322 | ··-·NIST-800-53-CM-6(a) |
| 3323 | ··-·configure_strategy | 3323 | ··-·configure_strategy |
| 3324 | ··-·file_permissions_grub2_cfg | 3324 | ··-·file_permissions_grub2_cfg |
| Offset 3329, 16 lines modified | Offset 3329, 16 lines modified | ||
| 3329 | ··-·no_reboot_needed | 3329 | ··-·no_reboot_needed |
| 3330 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 3330 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 3331 | ··file: | 3331 | ··file: |
| 3332 | ····path:·/boot/grub/grub.cfg | 3332 | ····path:·/boot/grub/grub.cfg |
| 3333 | ····mode:·u-xs,g-xwrs,o-xwrt | 3333 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 3334 | ··when: | 3334 | ··when: |
| 3335 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3336 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3335 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3336 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3337 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3337 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3338 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3338 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3339 | ··tags: | 3339 | ··tags: |
| 3340 | ··-·NIST-800-171-3.4.5 | 3340 | ··-·NIST-800-171-3.4.5 |
| 3341 | ··-·NIST-800-53-AC-6(1) | 3341 | ··-·NIST-800-53-AC-6(1) |
| 3342 | ··-·NIST-800-53-CM-6(a) | 3342 | ··-·NIST-800-53-CM-6(a) |
| 3343 | ··-·configure_strategy | 3343 | ··-·configure_strategy |
| Offset 3348, 16 lines modified | Offset 3348, 16 lines modified | ||
| 3348 | ··-·medium_severity | 3348 | ··-·medium_severity |
| 3349 | ··-·no_reboot_needed | 3349 | ··-·no_reboot_needed |
| 3350 | Remediation_Shell_script_⇲ | 3350 | Remediation_Shell_script_⇲ |
| 3351 | Complexity:·low | 3351 | Complexity:·low |
| 3352 | Disruption:·low | 3352 | Disruption:·low |
| 3353 | Strategy:···configure | 3353 | Strategy:···configure |
| 3354 | #·Remediation·is·applicable·only·in·certain·platforms | 3354 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3355 | if· | 3355 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&& |
| 3356 | 3356 | [·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3357 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 3357 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 3358 | else | 3358 | else |
| 3359 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3359 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3360 | fi | 3360 | fi |
| 3361 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 3361 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 40080, 22 lines modified | Offset 40080, 22 lines modified | ||
| 0009c8f0:·6564·0a0a·2d20·6e61·6d65·3a20·5465·7374··ed..-·name:·Test | 0009c8f0:·6564·0a0a·2d20·6e61·6d65·3a20·5465·7374··ed..-·name:·Test | ||
| 0009c900:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | 0009c900:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | ||
| 0009c910:·626f·6f74·2f67·7275·622f·6772·7562·2e63··boot/grub/grub.c | 0009c910:·626f·6f74·2f67·7275·622f·6772·7562·2e63··boot/grub/grub.c | ||
| 0009c920:·6667·0a20·2073·7461·743a·0a20·2020·2070··fg.··stat:.····p | 0009c920:·6667·0a20·2073·7461·743a·0a20·2020·2070··fg.··stat:.····p | ||
| 0009c930:·6174·683a·202f·626f·6f74·2f67·7275·622f··ath:·/boot/grub/ | 0009c930:·6174·683a·202f·626f·6f74·2f67·7275·622f··ath:·/boot/grub/ | ||
| 0009c940:·6772·7562·2e63·6667·0a20·2072·6567·6973··grub.cfg.··regis | 0009c940:·6772·7562·2e63·6667·0a20·2072·6567·6973··grub.cfg.··regis | ||
| 0009c950:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | 0009c950:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | ||
| 0009c960:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 0009c960:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 0009c970:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 0009c980:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 0009c990:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 0009c9a0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 0009c9b0:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | |||
| 0009c9c0:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 0009c9 | 0009c970:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 0009c980:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0009c990:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | |||
| 0009c9a0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 0009c9b0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 0009c9c0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 0009c9d0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 0009c9e0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | 0009c9e0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 0009c9f0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | 0009c9f0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | ||
| 0009ca00:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | 0009ca00:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | ||
| 0009ca10:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | 0009ca10:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | ||
| 0009ca20:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | 0009ca20:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | ||
| 0009ca30:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | 0009ca30:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | ||
| 0009ca40:·3a0a·2020·2d20·434a·4953·2d35·2e35·2e32··:.··-·CJIS-5.5.2 | 0009ca40:·3a0a·2020·2d20·434a·4953·2d35·2e35·2e32··:.··-·CJIS-5.5.2 | ||
| Offset 40115, 22 lines modified | Offset 40115, 22 lines modified | ||
| 0009cb20:·6562·6f6f·745f·6e65·6564·6564·0a0a·2d20··eboot_needed..-· | 0009cb20:·6562·6f6f·745f·6e65·6564·6564·0a0a·2d20··eboot_needed..-· | ||
| 0009cb30:·6e61·6d65·3a20·456e·7375·7265·206f·776e··name:·Ensure·own | 0009cb30:·6e61·6d65·3a20·456e·7375·7265·206f·776e··name:·Ensure·own | ||
| 0009cb40:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | 0009cb40:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | ||
| 0009cb50:·7562·2f67·7275·622e·6366·670a·2020·6669··ub/grub.cfg.··fi | 0009cb50:·7562·2f67·7275·622e·6366·670a·2020·6669··ub/grub.cfg.··fi | ||
| 0009cb60:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | 0009cb60:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | ||
| 0009cb70:·6f6f·742f·6772·7562·2f67·7275·622e·6366··oot/grub/grub.cf | 0009cb70:·6f6f·742f·6772·7562·2f67·7275·622e·6366··oot/grub/grub.cf | ||
| 0009cb80:·670a·2020·2020·6f77·6e65·723a·2027·3027··g.····owner:·'0' | 0009cb80:·670a·2020·2020·6f77·6e65·723a·2027·3027··g.····owner:·'0' | ||
| 0009cb90:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 0009cb90:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 0009cba0:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 0009cbb0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 0009cbc0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 0009cbd0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 0009cbe0:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | |||
| 0009cbf0:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 0009c | 0009cba0:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 0009cbb0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0009cbc0:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | |||
| 0009cbd0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 0009cbe0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 0009cbf0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 0009cc00:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 0009cc10:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | 0009cc10:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 0009cc20:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | 0009cc20:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | ||
| 0009cc30:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | 0009cc30:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | ||
| 0009cc40:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | 0009cc40:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | ||
| 0009cc50:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | 0009cc50:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | ||
| 0009cc60:·6e74·6169·6e65·7222·5d0a·2020·2d20·6669··ntainer"].··-·fi | 0009cc60:·6e74·6169·6e65·7222·5d0a·2020·2d20·6669··ntainer"].··-·fi | ||
| 0009cc70:·6c65·5f65·7869·7374·732e·7374·6174·2069··le_exists.stat·i | 0009cc70:·6c65·5f65·7869·7374·732e·7374·6174·2069··le_exists.stat·i | ||
| Offset 40181, 23 lines modified | Offset 40181, 23 lines modified | ||
| 0009cf40:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | 0009cf40:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0009cf50:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | 0009cf50:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | ||
| 0009cf60:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | 0009cf60:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0009cf70:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 0009cf70:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0009cf80:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 0009cf80:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0009cf90:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 0009cf90:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0009cfa0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 0009cfa0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0009cfb0:·6470·6b67·2d71·7565·7279·202d·2d73·686f··dpkg-query·--sho | |||
| 0009cfc0:·7720·2d2d·7368·6f77·666f·726d·6174·3d27··w·--showformat=' | |||
| 0009cfd0:·247b·6462·3a53·7461·7475·732d·5374·6174··${db:Status-Stat | |||
| 0009cfe0:·7573·7d5c·6e27·2027·6772·7562·322d·636f··us}\n'·'grub2-co | |||
| 0009cff0:·6d6d·6f6e·2720·3226·6774·3b2f·6465·762f··mmon'·2>/dev/ | |||
| 0009d000:·6e75·6c6c·207c·2067·7265·7020·2d71·2069··null·|·grep·-q·i | |||
| 0009d010:·6e73·7461·6c6c·6564·2026·616d·703b·2661··nstalled·&&a | |||
| 0009 | 0009d020:·6d70·3b20·5b20·2120·2d66·202f·7379·732f··mp;·[·!·-f·/sys/ | ||
| 0009d030:·6669·726d·7761·7265·2f65·6669·205d·2026··firmware/efi·]·& | |||
| 0009cfc0:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 0009cfd0:·2661·6d70·3b20·6470·6b67·2d71·7565·7279··&·dpkg-query | |||
| 0009cfe0:·202d·2d73·686f·7720·2d2d·7368·6f77·666f···--show·--showfo | |||
| 0009cff0:·726d·6174·3d27·247b·6462·3a53·7461·7475··rmat='${db:Statu | |||
| 0009d000:·732d·5374·6174·7573·7d5c·6e27·2027·6772··s-Status}\n'·'gr | |||
| 0009d010:·7562·322d·636f·6d6d·6f6e·2720·3226·6774··ub2-common'·2> | |||
| 0009d020:·3b2f·6465·762f·6e75·6c6c·207c·2067·7265··;/dev/null·|·gre | |||
| 0009d030:·7020·2d71·2069·6e73·7461·6c6c·6564·2026··p·-q·installed·& | |||
| 0009d040:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | 0009d040:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | ||
| 0009d050:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | 0009d050:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | ||
| 0009d060:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 0009d060:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 0009d070:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | 0009d070:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 0009d080:·6572·656e·7620·5d3b·207d·3b20·7468·656e··erenv·];·};·then | 0009d080:·6572·656e·7620·5d3b·207d·3b20·7468·656e··erenv·];·};·then | ||
| 0009d090:·0a0a·6368·6f77·6e20·3020·2f62·6f6f·742f··..chown·0·/boot/ | 0009d090:·0a0a·6368·6f77·6e20·3020·2f62·6f6f·742f··..chown·0·/boot/ | ||
| 0009d0a0:·6772·7562·2f67·7275·622e·6366·670a·0a65··grub/grub.cfg..e | 0009d0a0:·6772·7562·2f67·7275·622e·6366·670a·0a65··grub/grub.cfg..e | ||
| Offset 40649, 22 lines modified | Offset 40649, 22 lines modified | ||
| 0009ec80:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | 0009ec80:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | ||
| 0009ec90:·6365·202f·626f·6f74·2f67·7275·622f·6772··ce·/boot/grub/gr | 0009ec90:·6365·202f·626f·6f74·2f67·7275·622f·6772··ce·/boot/grub/gr | ||
| 0009eca0:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | 0009eca0:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | ||
| 0009ecb0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 0009ecb0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 0009ecc0:·7275·622f·6772·7562·2e63·6667·0a20·2072··rub/grub.cfg.··r | 0009ecc0:·7275·622f·6772·7562·2e63·6667·0a20·2072··rub/grub.cfg.··r | ||
| 0009ecd0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 0009ecd0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 0009ece0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 0009ece0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 0009ecf0:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 0009ed00:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 0009ed10:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 0009ed20:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 0009ed30:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 0009ed40:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 0009e | 0009ecf0:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | ||
| 0009ed00:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0009ed10:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 0009ed20:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 0009ed30:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 0009ed40:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 0009ed50:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 0009ed60:· | 0009ed60:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 0009ed70:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 0009ed70:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 0009ed80:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 0009ed80:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 0009ed90:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 0009ed90:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 0009eda0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 0009eda0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 0009edb0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 0009edb0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 0009edc0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | 0009edc0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | ||
| 0009edd0:·3030·2d31·3731·2d33·2e34·2e35·0a20·202d··00-171-3.4.5.··- | 0009edd0:·3030·2d31·3731·2d33·2e34·2e35·0a20·202d··00-171-3.4.5.··- | ||
| Offset 40684, 22 lines modified | Offset 40684, 22 lines modified | ||
| 0009eeb0:·732c·672d·7877·7273·2c6f·2d78·7772·7420··s,g-xwrs,o-xwrt· | 0009eeb0:·732c·672d·7877·7273·2c6f·2d78·7772·7420··s,g-xwrs,o-xwrt· | ||
| 0009eec0:·6f6e·202f·626f·6f74·2f67·7275·622f·6772··on·/boot/grub/gr | 0009eec0:·6f6e·202f·626f·6f74·2f67·7275·622f·6772··on·/boot/grub/gr | ||
| 0009eed0:·7562·2e63·6667·0a20·2066·696c·653a·0a20··ub.cfg.··file:.· | 0009eed0:·7562·2e63·6667·0a20·2066·696c·653a·0a20··ub.cfg.··file:.· | ||
| 0009eee0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 0009eee0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 0009eef0:·7275·622f·6772·7562·2e63·6667·0a20·2020··rub/grub.cfg.··· | 0009eef0:·7275·622f·6772·7562·2e63·6667·0a20·2020··rub/grub.cfg.··· | ||
| 0009ef00:·206d·6f64·653a·2075·2d78·732c·672d·7877···mode:·u-xs,g-xw | 0009ef00:·206d·6f64·653a·2075·2d78·732c·672d·7877···mode:·u-xs,g-xw | ||
| 0009ef10:·7273·2c6f·2d78·7772·740a·2020·7768·656e··rs,o-xwrt.··when | 0009ef10:·7273·2c6f·2d78·7772·740a·2020·7768·656e··rs,o-xwrt.··when | ||
| 0009ef20:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| Max diff block lines reached; 2786/12990 bytes (21.45%) of diff not shown. | |||
| Offset 3459, 16 lines modified | Offset 3459, 16 lines modified | ||
| 3459 | ··-·no_reboot_needed | 3459 | ··-·no_reboot_needed |
| 3460 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3460 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3461 | ··stat: | 3461 | ··stat: |
| 3462 | ····path:·/boot/grub/grub.cfg | 3462 | ····path:·/boot/grub/grub.cfg |
| 3463 | ··register:·file_exists | 3463 | ··register:·file_exists |
| 3464 | ··when: | 3464 | ··when: |
| 3465 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3466 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3465 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3466 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3467 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3467 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3468 | ··tags: | 3468 | ··tags: |
| 3469 | ··-·CJIS-5.5.2.2 | 3469 | ··-·CJIS-5.5.2.2 |
| 3470 | ··-·NIST-800-171-3.4.5 | 3470 | ··-·NIST-800-171-3.4.5 |
| 3471 | ··-·NIST-800-53-AC-6(1) | 3471 | ··-·NIST-800-53-AC-6(1) |
| 3472 | ··-·NIST-800-53-CM-6(a) | 3472 | ··-·NIST-800-53-CM-6(a) |
| 3473 | ··-·PCI-DSS-Req-7.1 | 3473 | ··-·PCI-DSS-Req-7.1 |
| Offset 3480, 16 lines modified | Offset 3480, 16 lines modified | ||
| 3480 | ··-·no_reboot_needed | 3480 | ··-·no_reboot_needed |
| 3481 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 3481 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 3482 | ··file: | 3482 | ··file: |
| 3483 | ····path:·/boot/grub/grub.cfg | 3483 | ····path:·/boot/grub/grub.cfg |
| 3484 | ····owner:·'0' | 3484 | ····owner:·'0' |
| 3485 | ··when: | 3485 | ··when: |
| 3486 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3487 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3486 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3487 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3488 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3488 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3489 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3489 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3490 | ··tags: | 3490 | ··tags: |
| 3491 | ··-·CJIS-5.5.2.2 | 3491 | ··-·CJIS-5.5.2.2 |
| 3492 | ··-·NIST-800-171-3.4.5 | 3492 | ··-·NIST-800-171-3.4.5 |
| 3493 | ··-·NIST-800-53-AC-6(1) | 3493 | ··-·NIST-800-53-AC-6(1) |
| 3494 | ··-·NIST-800-53-CM-6(a) | 3494 | ··-·NIST-800-53-CM-6(a) |
| Offset 3501, 16 lines modified | Offset 3501, 16 lines modified | ||
| 3501 | ··-·medium_severity | 3501 | ··-·medium_severity |
| 3502 | ··-·no_reboot_needed | 3502 | ··-·no_reboot_needed |
| 3503 | Remediation_Shell_script_⇲ | 3503 | Remediation_Shell_script_⇲ |
| 3504 | Complexity:·low | 3504 | Complexity:·low |
| 3505 | Disruption:·low | 3505 | Disruption:·low |
| 3506 | Strategy:···configure | 3506 | Strategy:···configure |
| 3507 | #·Remediation·is·applicable·only·in·certain·platforms | 3507 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3508 | if· | 3508 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·[·! |
| 3509 | 3509 | -f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3510 | chown·0·/boot/grub/grub.cfg | 3510 | chown·0·/boot/grub/grub.cfg |
| 3511 | else | 3511 | else |
| 3512 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3512 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3513 | fi | 3513 | fi |
| 3514 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** | 3514 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** |
| Offset 3546, 16 lines modified | Offset 3546, 16 lines modified | ||
| 3546 | ··-·no_reboot_needed | 3546 | ··-·no_reboot_needed |
| 3547 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3547 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3548 | ··stat: | 3548 | ··stat: |
| 3549 | ····path:·/boot/grub/grub.cfg | 3549 | ····path:·/boot/grub/grub.cfg |
| 3550 | ··register:·file_exists | 3550 | ··register:·file_exists |
| 3551 | ··when: | 3551 | ··when: |
| 3552 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3553 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3552 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3553 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3554 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3554 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3555 | ··tags: | 3555 | ··tags: |
| 3556 | ··-·NIST-800-171-3.4.5 | 3556 | ··-·NIST-800-171-3.4.5 |
| 3557 | ··-·NIST-800-53-AC-6(1) | 3557 | ··-·NIST-800-53-AC-6(1) |
| 3558 | ··-·NIST-800-53-CM-6(a) | 3558 | ··-·NIST-800-53-CM-6(a) |
| 3559 | ··-·configure_strategy | 3559 | ··-·configure_strategy |
| 3560 | ··-·file_permissions_grub2_cfg | 3560 | ··-·file_permissions_grub2_cfg |
| Offset 3565, 16 lines modified | Offset 3565, 16 lines modified | ||
| 3565 | ··-·no_reboot_needed | 3565 | ··-·no_reboot_needed |
| 3566 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 3566 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 3567 | ··file: | 3567 | ··file: |
| 3568 | ····path:·/boot/grub/grub.cfg | 3568 | ····path:·/boot/grub/grub.cfg |
| 3569 | ····mode:·u-xs,g-xwrs,o-xwrt | 3569 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 3570 | ··when: | 3570 | ··when: |
| 3571 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3572 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3571 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3572 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3573 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3573 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3574 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3574 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3575 | ··tags: | 3575 | ··tags: |
| 3576 | ··-·NIST-800-171-3.4.5 | 3576 | ··-·NIST-800-171-3.4.5 |
| 3577 | ··-·NIST-800-53-AC-6(1) | 3577 | ··-·NIST-800-53-AC-6(1) |
| 3578 | ··-·NIST-800-53-CM-6(a) | 3578 | ··-·NIST-800-53-CM-6(a) |
| 3579 | ··-·configure_strategy | 3579 | ··-·configure_strategy |
| Offset 3584, 16 lines modified | Offset 3584, 16 lines modified | ||
| 3584 | ··-·medium_severity | 3584 | ··-·medium_severity |
| 3585 | ··-·no_reboot_needed | 3585 | ··-·no_reboot_needed |
| 3586 | Remediation_Shell_script_⇲ | 3586 | Remediation_Shell_script_⇲ |
| 3587 | Complexity:·low | 3587 | Complexity:·low |
| 3588 | Disruption:·low | 3588 | Disruption:·low |
| 3589 | Strategy:···configure | 3589 | Strategy:···configure |
| 3590 | #·Remediation·is·applicable·only·in·certain·platforms | 3590 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3591 | if· | 3591 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&& |
| 3592 | 3592 | [·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3593 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 3593 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 3594 | else | 3594 | else |
| 3595 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3595 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3596 | fi | 3596 | fi |
| 3597 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 3597 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 41162, 22 lines modified | Offset 41162, 22 lines modified | ||
| 000a0c90:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | 000a0c90:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 000a0ca0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | 000a0ca0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | ||
| 000a0cb0:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | 000a0cb0:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | ||
| 000a0cc0:·6f72·2061·7564·6974·2063·686d·6f64·2074··or·audit·chmod·t | 000a0cc0:·6f72·2061·7564·6974·2063·686d·6f64·2074··or·audit·chmod·t | ||
| 000a0cd0:·6173·6b73·0a20·2073·6574·5f66·6163·743a··asks.··set_fact: | 000a0cd0:·6173·6b73·0a20·2073·6574·5f66·6163·743a··asks.··set_fact: | ||
| 000a0ce0:·0a20·2020·2061·7564·6974·5f61·7263·683a··.····audit_arch: | 000a0ce0:·0a20·2020·2061·7564·6974·5f61·7263·683a··.····audit_arch: | ||
| 000a0cf0:·2062·3634·0a20·2077·6865·6e3a·0a20·202d···b64.··when:.··- | 000a0cf0:·2062·3634·0a20·2077·6865·6e3a·0a20·202d···b64.··when:.··- | ||
| 000a0d00:·2027·2261·7564·6974·6422·2069·6e20·616e···'"auditd"·in·an | |||
| 000a0d10:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000a0d20:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 000a0d30:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 000a0d40:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 000a0d50:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 000a0d60:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 000a0d | 000a0d00:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 000a0d10:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000a0d20:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000a0d30:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000a0d40:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000a0d50:·696e·6572·225d·0a20·202d·2027·2261·7564··iner"].··-·'"aud | |||
| 000a0d60:·6974·6422·2069·6e20·616e·7369·626c·655f··itd"·in·ansible_ | |||
| 000a0d70:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000a0d80:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | 000a0d80:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | ||
| 000a0d90:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | 000a0d90:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | ||
| 000a0da0:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | 000a0da0:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | ||
| 000a0db0:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | 000a0db0:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | ||
| 000a0dc0:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | 000a0dc0:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | ||
| 000a0dd0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 000a0dd0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 000a0de0:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | 000a0de0:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | ||
| Offset 41485, 23 lines modified | Offset 41485, 23 lines modified | ||
| 000a20c0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 000a20c0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 000a20d0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 000a20d0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 000a20e0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 000a20e0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 000a20f0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 000a20f0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 000a2100:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 000a2100:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 000a2110:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 000a2110:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 000a2120:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 000a2120:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 000a2130:·0a20·202d·2027·2261·7564·6974·6422·2069··.··-·'"auditd"·i | |||
| 000a2140:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000a2150:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 000a2160:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000a2170:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000a2180:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000a2190:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000a21 | 000a2130:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 000a2140:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000a2150:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000a2160:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000a2170:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000a2180:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 000a2190:·2261·7564·6974·6422·2069·6e20·616e·7369··"auditd"·in·ansi | |||
| 000a21a0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 000a21b0:· | 000a21b0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | ||
| 000a21c0:·434a·4953·2d35·2e34·2e31·2e31·0a20·202d··CJIS-5.4.1.1.··- | 000a21c0:·434a·4953·2d35·2e34·2e31·2e31·0a20·202d··CJIS-5.4.1.1.··- | ||
| 000a21d0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | 000a21d0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | ||
| 000a21e0:·3230·2d30·3130·3135·320a·2020·2d20·4e49··20-010152.··-·NI | 000a21e0:·3230·2d30·3130·3135·320a·2020·2d20·4e49··20-010152.··-·NI | ||
| 000a21f0:·5354·2d38·3030·2d31·3731·2d33·2e31·2e37··ST-800-171-3.1.7 | 000a21f0:·5354·2d38·3030·2d31·3731·2d33·2e31·2e37··ST-800-171-3.1.7 | ||
| 000a2200:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | 000a2200:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 000a2210:·2d41·552d·3132·2863·290a·2020·2d20·4e49··-AU-12(c).··-·NI | 000a2210:·2d41·552d·3132·2863·290a·2020·2d20·4e49··-AU-12(c).··-·NI | ||
| 000a2220:·5354·2d38·3030·2d35·332d·4155·2d32·2864··ST-800-53-AU-2(d | 000a2220:·5354·2d38·3030·2d35·332d·4155·2d32·2864··ST-800-53-AU-2(d | ||
| Offset 41797, 22 lines modified | Offset 41797, 22 lines modified | ||
| 000a3440:·6f64·0a20·2020·2020·2063·7265·6174·653a··od.······create: | 000a3440:·6f64·0a20·2020·2020·2063·7265·6174·653a··od.······create: | ||
| 000a3450:·2074·7275·650a·2020·2020·2020·6d6f·6465···true.······mode | 000a3450:·2074·7275·650a·2020·2020·2020·6d6f·6465···true.······mode | ||
| 000a3460:·3a20·6f2d·7277·780a·2020·2020·2020·7374··:·o-rwx.······st | 000a3460:·3a20·6f2d·7277·780a·2020·2020·2020·7374··:·o-rwx.······st | ||
| 000a3470:·6174·653a·2070·7265·7365·6e74·0a20·2020··ate:·present.··· | 000a3470:·6174·653a·2070·7265·7365·6e74·0a20·2020··ate:·present.··· | ||
| 000a3480:·2077·6865·6e3a·2073·7973·6361·6c6c·735f···when:·syscalls_ | 000a3480:·2077·6865·6e3a·2073·7973·6361·6c6c·735f···when:·syscalls_ | ||
| 000a3490:·666f·756e·6420·7c20·6c65·6e67·7468·203d··found·|·length·= | 000a3490:·666f·756e·6420·7c20·6c65·6e67·7468·203d··found·|·length·= | ||
| 000a34a0:·3d20·300a·2020·7768·656e·3a0a·2020·2d20··=·0.··when:.··-· | 000a34a0:·3d20·300a·2020·7768·656e·3a0a·2020·2d20··=·0.··when:.··-· | ||
| 000a34b0:·2722·6175·6469·7464·2220·696e·2061·6e73··'"auditd"·in·ans | |||
| 000a34c0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 000a34d0:·6765·7327·0a20·202d·2061·6e73·6962·6c65··ges'.··-·ansible | |||
| 000a34e0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000a34f0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000a3500:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000a3510:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000a3 | 000a34b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 000a34c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000a34d0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000a34e0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000a34f0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 000a3500:·6e65·7222·5d0a·2020·2d20·2722·6175·6469··ner"].··-·'"audi | |||
| 000a3510:·7464·2220·696e·2061·6e73·6962·6c65·5f66··td"·in·ansible_f | |||
| 000a3520:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 000a3530:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | 000a3530:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | ||
| 000a3540:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | 000a3540:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | ||
| 000a3550:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | 000a3550:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | ||
| 000a3560:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | 000a3560:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | ||
| 000a3570:·5455·2d32·302d·3031·3031·3532·0a20·202d··TU-20-010152.··- | 000a3570:·5455·2d32·302d·3031·3031·3532·0a20·202d··TU-20-010152.··- | ||
| 000a3580:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 000a3580:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 000a3590:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 000a3590:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| Offset 41846, 26 lines modified | Offset 41846, 26 lines modified | ||
| 000a3750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 000a3750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 000a3760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 000a3760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 000a3770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 000a3770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 000a3780:·646d·3132·3637·3922·3e3c·7072·653e·3c63··dm12679"><pre><c | 000a3780:·646d·3132·3637·3922·3e3c·7072·653e·3c63··dm12679"><pre><c | ||
| 000a3790:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 000a3790:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 000a37a0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 000a37a0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 000a37b0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 000a37b0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 000a37c0:·706c·6174·666f·726d·730a·6966·20 | 000a37c0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | ||
| 000a37d0:·672d·7175·6572·7920·2d2d·7368·6f77·202d··g-query·--show·- | |||
| 000a37e0:·2d73·686f·7766·6f72·6d61·743d·2724·7b64··-showformat='${d | |||
| 000a37f0:·623a·5374·6174·7573·2d53·7461·7475·737d··b:Status-Status} | |||
| 000a3800:·5c6e·2720·2761·7564·6974·6427·2032·2667··\n'·'auditd'·2&g | |||
| 000a3810:·743b·2f64·6576·2f6e·756c·6c20·7c20·6772··t;/dev/null·|·gr | |||
| 000a3820:·6570·202d·7120·696e·7374·616c·6c65·6420··ep·-q·installed· | |||
| 000a3830:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 000a3 | 000a37d0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 000a3 | 000a37e0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 000a3 | 000a37f0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 000a3800:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | |||
| 000a3810:·6d70·3b20·6470·6b67·2d71·7565·7279·202d··mp;·dpkg-query·- | |||
| 000a3820:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | |||
| 000a3830:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | |||
| 000a3840:·5374·6174·7573·7d5c·6e27·2027·6175·6469··Status}\n'·'audi | |||
| 000a3850:·7464·2720·3226·6774·3b2f·6465·762f·6e75··td'·2>/dev/nu | |||
| 000a3860:·6c6c·207c·2067·7265·7020·2d71·2069·6e73··ll·|·grep·-q·ins | |||
| 000a3870:·7 | 000a3870:·7461·6c6c·6564·3b20·7468·656e·0a0a·2320··talled;·then..#· | ||
| 000a3880:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | 000a3880:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | ||
| 000a3890:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | 000a3890:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | ||
| 000a38a0:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | 000a38a0:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | ||
| 000a38b0:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | 000a38b0:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | ||
| 000a38c0:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | 000a38c0:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | ||
| 000a38d0:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | 000a38d0:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | ||
| 000a38e0:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | 000a38e0:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | ||
| Offset 43663, 22 lines modified | Offset 43663, 22 lines modified | ||
| 000aa8e0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | 000aa8e0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 000aa8f0:·6567·790a·0a2d·206e·616d·653a·2053·6574··egy..-·name:·Set | 000aa8f0:·6567·790a·0a2d·206e·616d·653a·2053·6574··egy..-·name:·Set | ||
| Max diff block lines reached; 553257/562564 bytes (98.35%) of diff not shown. | |||
| Offset 3414, 16 lines modified | Offset 3414, 16 lines modified | ||
| 3414 | ··-·reboot_required | 3414 | ··-·reboot_required |
| 3415 | ··-·restrict_strategy | 3415 | ··-·restrict_strategy |
| 3416 | -·name:·Set·architecture·for·audit·chmod·tasks | 3416 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 3417 | ··set_fact: | 3417 | ··set_fact: |
| 3418 | ····audit_arch:·b64 | 3418 | ····audit_arch:·b64 |
| 3419 | ··when: | 3419 | ··when: |
| 3420 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3421 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3420 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3421 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3422 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 3422 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 3423 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 3423 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 3424 | ··tags: | 3424 | ··tags: |
| 3425 | ··-·CJIS-5.4.1.1 | 3425 | ··-·CJIS-5.4.1.1 |
| 3426 | ··-·DISA-STIG-UBTU-20-010152 | 3426 | ··-·DISA-STIG-UBTU-20-010152 |
| 3427 | ··-·NIST-800-171-3.1.7 | 3427 | ··-·NIST-800-171-3.1.7 |
| 3428 | ··-·NIST-800-53-AU-12(c) | 3428 | ··-·NIST-800-53-AU-12(c) |
| Offset 3560, 16 lines modified | Offset 3560, 16 lines modified | ||
| 3560 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3560 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3561 | ········-F·auid!=unset·-F·key=perm_mod | 3561 | ········-F·auid!=unset·-F·key=perm_mod |
| 3562 | ······create:·true | 3562 | ······create:·true |
| 3563 | ······mode:·o-rwx | 3563 | ······mode:·o-rwx |
| 3564 | ······state:·present | 3564 | ······state:·present |
| 3565 | ····when:·syscalls_found·|·length·==·0 | 3565 | ····when:·syscalls_found·|·length·==·0 |
| 3566 | ··when: | 3566 | ··when: |
| 3567 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3568 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3567 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3568 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3569 | ··tags: | 3569 | ··tags: |
| 3570 | ··-·CJIS-5.4.1.1 | 3570 | ··-·CJIS-5.4.1.1 |
| 3571 | ··-·DISA-STIG-UBTU-20-010152 | 3571 | ··-·DISA-STIG-UBTU-20-010152 |
| 3572 | ··-·NIST-800-171-3.1.7 | 3572 | ··-·NIST-800-171-3.1.7 |
| 3573 | ··-·NIST-800-53-AU-12(c) | 3573 | ··-·NIST-800-53-AU-12(c) |
| 3574 | ··-·NIST-800-53-AU-2(d) | 3574 | ··-·NIST-800-53-AU-2(d) |
| 3575 | ··-·NIST-800-53-CM-6(a) | 3575 | ··-·NIST-800-53-CM-6(a) |
| Offset 3704, 16 lines modified | Offset 3704, 16 lines modified | ||
| 3704 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3704 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3705 | ········-F·auid!=unset·-F·key=perm_mod | 3705 | ········-F·auid!=unset·-F·key=perm_mod |
| 3706 | ······create:·true | 3706 | ······create:·true |
| 3707 | ······mode:·o-rwx | 3707 | ······mode:·o-rwx |
| 3708 | ······state:·present | 3708 | ······state:·present |
| 3709 | ····when:·syscalls_found·|·length·==·0 | 3709 | ····when:·syscalls_found·|·length·==·0 |
| 3710 | ··when: | 3710 | ··when: |
| 3711 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3712 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3711 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3712 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3713 | ··-·audit_arch·==·"b64" | 3713 | ··-·audit_arch·==·"b64" |
| 3714 | ··tags: | 3714 | ··tags: |
| 3715 | ··-·CJIS-5.4.1.1 | 3715 | ··-·CJIS-5.4.1.1 |
| 3716 | ··-·DISA-STIG-UBTU-20-010152 | 3716 | ··-·DISA-STIG-UBTU-20-010152 |
| 3717 | ··-·NIST-800-171-3.1.7 | 3717 | ··-·NIST-800-171-3.1.7 |
| 3718 | ··-·NIST-800-53-AU-12(c) | 3718 | ··-·NIST-800-53-AU-12(c) |
| 3719 | ··-·NIST-800-53-AU-2(d) | 3719 | ··-·NIST-800-53-AU-2(d) |
| Offset 3723, 16 lines modified | Offset 3723, 16 lines modified | ||
| 3723 | ··-·low_complexity | 3723 | ··-·low_complexity |
| 3724 | ··-·low_disruption | 3724 | ··-·low_disruption |
| 3725 | ··-·medium_severity | 3725 | ··-·medium_severity |
| 3726 | ··-·reboot_required | 3726 | ··-·reboot_required |
| 3727 | ··-·restrict_strategy | 3727 | ··-·restrict_strategy |
| 3728 | Remediation_Shell_script_⇲ | 3728 | Remediation_Shell_script_⇲ |
| 3729 | #·Remediation·is·applicable·only·in·certain·platforms | 3729 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3730 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed·&&·[·!·- | ||
| 3731 | f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 3730 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status- |
| 3731 | Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed;·then | ||
| 3732 | #·First·perform·the·remediation·of·the·syscall·rule | 3732 | #·First·perform·the·remediation·of·the·syscall·rule |
| 3733 | #·Retrieve·hardware·architecture·of·the·underlying·system | 3733 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 3734 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 3734 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 3735 | for·ARCH·in·"${RULE_ARCHS[@]}" | 3735 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 3736 | do | 3736 | do |
| Offset 4124, 16 lines modified | Offset 4124, 16 lines modified | ||
| 4124 | ··-·reboot_required | 4124 | ··-·reboot_required |
| 4125 | ··-·restrict_strategy | 4125 | ··-·restrict_strategy |
| 4126 | -·name:·Set·architecture·for·audit·chown·tasks | 4126 | -·name:·Set·architecture·for·audit·chown·tasks |
| 4127 | ··set_fact: | 4127 | ··set_fact: |
| 4128 | ····audit_arch:·b64 | 4128 | ····audit_arch:·b64 |
| 4129 | ··when: | 4129 | ··when: |
| 4130 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4131 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4130 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4131 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4132 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4132 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4133 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4133 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4134 | ··tags: | 4134 | ··tags: |
| 4135 | ··-·CJIS-5.4.1.1 | 4135 | ··-·CJIS-5.4.1.1 |
| 4136 | ··-·DISA-STIG-UBTU-20-010148 | 4136 | ··-·DISA-STIG-UBTU-20-010148 |
| 4137 | ··-·NIST-800-171-3.1.7 | 4137 | ··-·NIST-800-171-3.1.7 |
| 4138 | ··-·NIST-800-53-AU-12(c) | 4138 | ··-·NIST-800-53-AU-12(c) |
| Offset 4272, 16 lines modified | Offset 4272, 16 lines modified | ||
| 4272 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4272 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4273 | ········-F·auid!=unset·-F·key=perm_mod | 4273 | ········-F·auid!=unset·-F·key=perm_mod |
| 4274 | ······create:·true | 4274 | ······create:·true |
| 4275 | ······mode:·o-rwx | 4275 | ······mode:·o-rwx |
| 4276 | ······state:·present | 4276 | ······state:·present |
| 4277 | ····when:·syscalls_found·|·length·==·0 | 4277 | ····when:·syscalls_found·|·length·==·0 |
| 4278 | ··when: | 4278 | ··when: |
| 4279 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4280 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4279 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4280 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4281 | ··tags: | 4281 | ··tags: |
| 4282 | ··-·CJIS-5.4.1.1 | 4282 | ··-·CJIS-5.4.1.1 |
| 4283 | ··-·DISA-STIG-UBTU-20-010148 | 4283 | ··-·DISA-STIG-UBTU-20-010148 |
| 4284 | ··-·NIST-800-171-3.1.7 | 4284 | ··-·NIST-800-171-3.1.7 |
| 4285 | ··-·NIST-800-53-AU-12(c) | 4285 | ··-·NIST-800-53-AU-12(c) |
| 4286 | ··-·NIST-800-53-AU-2(d) | 4286 | ··-·NIST-800-53-AU-2(d) |
| 4287 | ··-·NIST-800-53-CM-6(a) | 4287 | ··-·NIST-800-53-CM-6(a) |
| Offset 4418, 16 lines modified | Offset 4418, 16 lines modified | ||
| 4418 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4418 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4419 | ········-F·auid!=unset·-F·key=perm_mod | 4419 | ········-F·auid!=unset·-F·key=perm_mod |
| 4420 | ······create:·true | 4420 | ······create:·true |
| 4421 | ······mode:·o-rwx | 4421 | ······mode:·o-rwx |
| 4422 | ······state:·present | 4422 | ······state:·present |
| 4423 | ····when:·syscalls_found·|·length·==·0 | 4423 | ····when:·syscalls_found·|·length·==·0 |
| 4424 | ··when: | 4424 | ··when: |
| 4425 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4426 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4425 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4426 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4427 | ··-·audit_arch·==·"b64" | 4427 | ··-·audit_arch·==·"b64" |
| 4428 | ··tags: | 4428 | ··tags: |
| 4429 | ··-·CJIS-5.4.1.1 | 4429 | ··-·CJIS-5.4.1.1 |
| 4430 | ··-·DISA-STIG-UBTU-20-010148 | 4430 | ··-·DISA-STIG-UBTU-20-010148 |
| 4431 | ··-·NIST-800-171-3.1.7 | 4431 | ··-·NIST-800-171-3.1.7 |
| 4432 | ··-·NIST-800-53-AU-12(c) | 4432 | ··-·NIST-800-53-AU-12(c) |
| 4433 | ··-·NIST-800-53-AU-2(d) | 4433 | ··-·NIST-800-53-AU-2(d) |
| Offset 4437, 16 lines modified | Offset 4437, 16 lines modified | ||
| 4437 | ··-·low_complexity | 4437 | ··-·low_complexity |
| Max diff block lines reached; 157987/162445 bytes (97.26%) of diff not shown. | |||
| Offset 42730, 23 lines modified | Offset 42730, 23 lines modified | ||
| 000a6e90:·7569·7265·640a·2020·2d20·7265·7374·7269··uired.··-·restri | 000a6e90:·7569·7265·640a·2020·2d20·7265·7374·7269··uired.··-·restri | ||
| 000a6ea0:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | 000a6ea0:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | ||
| 000a6eb0:·616d·653a·2053·6574·2061·7263·6869·7465··ame:·Set·archite | 000a6eb0:·616d·653a·2053·6574·2061·7263·6869·7465··ame:·Set·archite | ||
| 000a6ec0:·6374·7572·6520·666f·7220·6175·6469·7420··cture·for·audit· | 000a6ec0:·6374·7572·6520·666f·7220·6175·6469·7420··cture·for·audit· | ||
| 000a6ed0:·6368·6d6f·6420·7461·736b·730a·2020·7365··chmod·tasks.··se | 000a6ed0:·6368·6d6f·6420·7461·736b·730a·2020·7365··chmod·tasks.··se | ||
| 000a6ee0:·745f·6661·6374·3a0a·2020·2020·6175·6469··t_fact:.····audi | 000a6ee0:·745f·6661·6374·3a0a·2020·2020·6175·6469··t_fact:.····audi | ||
| 000a6ef0:·745f·6172·6368·3a20·6236·340a·2020·7768··t_arch:·b64.··wh | 000a6ef0:·745f·6172·6368·3a20·6236·340a·2020·7768··t_arch:·b64.··wh | ||
| 000a6f00:·656e·3a0a·2020·2d20·2722·6175·6469·7464··en:.··-·'"auditd | |||
| 000a6f10:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 000a6f20:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000a6f30:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000a6f40:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000a6f50:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000a6f60:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000a6f | 000a6f00:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | ||
| 000a6f10:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000a6f20:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 000a6f30:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 000a6f40:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 000a6f50:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 000a6f60:·2d20·2722·6175·6469·7464·2220·696e·2061··-·'"auditd"·in·a | |||
| 000a6f70:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 000a6f80:·6 | 000a6f80:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | ||
| 000a6f90:·6c65·5f61·7263·6869·7465·6374·7572·6520··le_architecture· | 000a6f90:·6c65·5f61·7263·6869·7465·6374·7572·6520··le_architecture· | ||
| 000a6fa0:·3d3d·2022·6161·7263·6836·3422·206f·7220··==·"aarch64"·or· | 000a6fa0:·3d3d·2022·6161·7263·6836·3422·206f·7220··==·"aarch64"·or· | ||
| 000a6fb0:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | 000a6fb0:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | ||
| 000a6fc0:·7475·7265·203d·3d20·2270·7063·3634·2220··ture·==·"ppc64"· | 000a6fc0:·7475·7265·203d·3d20·2270·7063·3634·2220··ture·==·"ppc64"· | ||
| 000a6fd0:·6f72·2061·6e73·6962·6c65·5f61·7263·6869··or·ansible_archi | 000a6fd0:·6f72·2061·6e73·6962·6c65·5f61·7263·6869··or·ansible_archi | ||
| 000a6fe0:·7465·6374·7572·650a·2020·2020·3d3d·2022··tecture.····==·" | 000a6fe0:·7465·6374·7572·650a·2020·2020·3d3d·2022··tecture.····==·" | ||
| 000a6ff0:·7070·6336·346c·6522·206f·7220·616e·7369··ppc64le"·or·ansi | 000a6ff0:·7070·6336·346c·6522·206f·7220·616e·7369··ppc64le"·or·ansi | ||
| Offset 43053, 23 lines modified | Offset 43053, 23 lines modified | ||
| 000a82c0:·4620·6b65·793d·7065·726d·5f6d·6f64·0a20··F·key=perm_mod.· | 000a82c0:·4620·6b65·793d·7065·726d·5f6d·6f64·0a20··F·key=perm_mod.· | ||
| 000a82d0:·2020·2020·2063·7265·6174·653a·2074·7275·······create:·tru | 000a82d0:·2020·2020·2063·7265·6174·653a·2074·7275·······create:·tru | ||
| 000a82e0:·650a·2020·2020·2020·6d6f·6465·3a20·6f2d··e.······mode:·o- | 000a82e0:·650a·2020·2020·2020·6d6f·6465·3a20·6f2d··e.······mode:·o- | ||
| 000a82f0:·7277·780a·2020·2020·2020·7374·6174·653a··rwx.······state: | 000a82f0:·7277·780a·2020·2020·2020·7374·6174·653a··rwx.······state: | ||
| 000a8300:·2070·7265·7365·6e74·0a20·2020·2077·6865···present.····whe | 000a8300:·2070·7265·7365·6e74·0a20·2020·2077·6865···present.····whe | ||
| 000a8310:·6e3a·2073·7973·6361·6c6c·735f·666f·756e··n:·syscalls_foun | 000a8310:·6e3a·2073·7973·6361·6c6c·735f·666f·756e··n:·syscalls_foun | ||
| 000a8320:·6420·7c20·6c65·6e67·7468·203d·3d20·300a··d·|·length·==·0. | 000a8320:·6420·7c20·6c65·6e67·7468·203d·3d20·300a··d·|·length·==·0. | ||
| 000a8330:·2020·7768·656e·3a0a·2020·2d20· | 000a8330:·2020·7768·656e·3a0a·2020·2d20·616e·7369····when:.··-·ansi | ||
| 000a8340:·6469·7464·2220·696e·2061·6e73·6962·6c65··ditd"·in·ansible | |||
| 000a8350:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 000a8360:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 000a8370:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000a8380:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000a8390:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000a83a0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000a83 | 000a8340:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 000a8350:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000a8360:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000a8370:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000a8380:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 000a8390:·5d0a·2020·2d20·2722·6175·6469·7464·2220··].··-·'"auditd"· | |||
| 000a83a0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 000a83b0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 000a83c0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 000a83c0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 000a83d0:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | 000a83d0:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | ||
| 000a83e0:·472d·5542·5455·2d32·302d·3031·3031·3532··G-UBTU-20-010152 | 000a83e0:·472d·5542·5455·2d32·302d·3031·3031·3532··G-UBTU-20-010152 | ||
| 000a83f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 000a83f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 000a8400:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 000a8400:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 000a8410:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | 000a8410:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | ||
| 000a8420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | 000a8420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| Offset 43365, 23 lines modified | Offset 43365, 23 lines modified | ||
| 000a9640:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | 000a9640:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | ||
| 000a9650:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 000a9650:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 000a9660:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | 000a9660:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | ||
| 000a9670:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 000a9670:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 000a9680:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | 000a9680:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | ||
| 000a9690:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | 000a9690:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | ||
| 000a96a0:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | 000a96a0:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | ||
| 000a96b0:·6e3a·0a20·202d·2027·2261·7564·6974·6422··n:.··-·'"auditd" | |||
| 000a96c0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000a96d0:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 000a96e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000a96f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000a9700:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000a9710:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000a9 | 000a96b0:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | ||
| 000a96c0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 000a96d0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 000a96e0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 000a96f0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 000a9700:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 000a9710:·2027·2261·7564·6974·6422·2069·6e20·616e···'"auditd"·in·an | |||
| 000a9720:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000a9730:·6 | 000a9730:·6167·6573·270a·2020·2d20·6175·6469·745f··ages'.··-·audit_ | ||
| 000a9740:·6172·6368·203d·3d20·2262·3634·220a·2020··arch·==·"b64".·· | 000a9740:·6172·6368·203d·3d20·2262·3634·220a·2020··arch·==·"b64".·· | ||
| 000a9750:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | 000a9750:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 000a9760:·2e34·2e31·2e31·0a20·202d·2044·4953·412d··.4.1.1.··-·DISA- | 000a9760:·2e34·2e31·2e31·0a20·202d·2044·4953·412d··.4.1.1.··-·DISA- | ||
| 000a9770:·5354·4947·2d55·4254·552d·3230·2d30·3130··STIG-UBTU-20-010 | 000a9770:·5354·4947·2d55·4254·552d·3230·2d30·3130··STIG-UBTU-20-010 | ||
| 000a9780:·3135·320a·2020·2d20·4e49·5354·2d38·3030··152.··-·NIST-800 | 000a9780:·3135·320a·2020·2d20·4e49·5354·2d38·3030··152.··-·NIST-800 | ||
| 000a9790:·2d31·3731·2d33·2e31·2e37·0a20·202d·204e··-171-3.1.7.··-·N | 000a9790:·2d31·3731·2d33·2e31·2e37·0a20·202d·204e··-171-3.1.7.··-·N | ||
| 000a97a0:·4953·542d·3830·302d·3533·2d41·552d·3132··IST-800-53-AU-12 | 000a97a0:·4953·542d·3830·302d·3533·2d41·552d·3132··IST-800-53-AU-12 | ||
| Offset 43415, 25 lines modified | Offset 43415, 25 lines modified | ||
| 000a9960:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | 000a9960:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 000a9970:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | 000a9970:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 000a9980:·2220·6964·3d22·6964·6d31·3236·3739·223e··"·id="idm12679"> | 000a9980:·2220·6964·3d22·6964·6d31·3236·3739·223e··"·id="idm12679"> | ||
| 000a9990:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 000a9990:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 000a99a0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 000a99a0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 000a99b0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 000a99b0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 000a99c0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 000a99c0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 000a99d0:·0a69·6620·6470·6b67·2d71·7565·7279·202d··.if·dpkg-query·- | |||
| 000a99e0:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | |||
| 000a99f0:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | |||
| 000a9a00:·5374·6174·7573·7d5c·6e27·2027·6175·6469··Status}\n'·'audi | |||
| 000a9a10:·7464·2720·3226·6774·3b2f·6465·762f·6e75··td'·2>/dev/nu | |||
| 000a9a20:·6c6c·207c·2067·7265·7020·2d71·2069·6e73··ll·|·grep·-q·ins | |||
| 000a9a30:·7461·6c6c·6564·2026·616d·703b·2661·6d70··talled·&& | |||
| 000a9 | 000a99d0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | ||
| 000a9 | 000a99e0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 000a9 | 000a99f0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 000a9a | 000a9a00:·2e63·6f6e·7461·696e·6572·656e·7620·5d20··.containerenv·]· | ||
| 000a9a10:·2661·6d70·3b26·616d·703b·2064·706b·672d··&&·dpkg- | |||
| 000a9a20:·7175·6572·7920·2d2d·7368·6f77·202d·2d73··query·--show·--s | |||
| 000a9a30:·686f·7766·6f72·6d61·743d·2724·7b64·623a··howformat='${db: | |||
| 000a9a40:·5374·6174·7573·2d53·7461·7475·737d·5c6e··Status-Status}\n | |||
| 000a9a50:·2720·2761·7564·6974·6427·2032·2667·743b··'·'auditd'·2> | |||
| 000a9a60:·2f64·6576·2f6e·756c·6c20·7c20·6772·6570··/dev/null·|·grep | |||
| 000a9a70:·202d·7120·696e·7374·616c·6c65·643b·2074···-q·installed;·t | |||
| 000a9a80:·6865·6e0a·0a23·2046·6972·7374·2070·6572··hen..#·First·per | 000a9a80:·6865·6e0a·0a23·2046·6972·7374·2070·6572··hen..#·First·per | ||
| 000a9a90:·666f·726d·2074·6865·2072·656d·6564·6961··form·the·remedia | 000a9a90:·666f·726d·2074·6865·2072·656d·6564·6961··form·the·remedia | ||
| 000a9aa0:·7469·6f6e·206f·6620·7468·6520·7379·7363··tion·of·the·sysc | 000a9aa0:·7469·6f6e·206f·6620·7468·6520·7379·7363··tion·of·the·sysc | ||
| 000a9ab0:·616c·6c20·7275·6c65·0a23·2052·6574·7269··all·rule.#·Retri | 000a9ab0:·616c·6c20·7275·6c65·0a23·2052·6574·7269··all·rule.#·Retri | ||
| 000a9ac0:·6576·6520·6861·7264·7761·7265·2061·7263··eve·hardware·arc | 000a9ac0:·6576·6520·6861·7264·7761·7265·2061·7263··eve·hardware·arc | ||
| 000a9ad0:·6869·7465·6374·7572·6520·6f66·2074·6865··hitecture·of·the | 000a9ad0:·6869·7465·6374·7572·6520·6f66·2074·6865··hitecture·of·the | ||
| 000a9ae0:·2075·6e64·6572·6c79·696e·6720·7379·7374···underlying·syst | 000a9ae0:·2075·6e64·6572·6c79·696e·6720·7379·7374···underlying·syst | ||
| Offset 45231, 23 lines modified | Offset 45231, 23 lines modified | ||
| 000b0ae0:·6972·6564·0a20·202d·2072·6573·7472·6963··ired.··-·restric | 000b0ae0:·6972·6564·0a20·202d·2072·6573·7472·6963··ired.··-·restric | ||
| Max diff block lines reached; 551670/561046 bytes (98.33%) of diff not shown. | |||
| Offset 3651, 16 lines modified | Offset 3651, 16 lines modified | ||
| 3651 | ··-·reboot_required | 3651 | ··-·reboot_required |
| 3652 | ··-·restrict_strategy | 3652 | ··-·restrict_strategy |
| 3653 | -·name:·Set·architecture·for·audit·chmod·tasks | 3653 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 3654 | ··set_fact: | 3654 | ··set_fact: |
| 3655 | ····audit_arch:·b64 | 3655 | ····audit_arch:·b64 |
| 3656 | ··when: | 3656 | ··when: |
| 3657 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3658 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3657 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3658 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3659 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 3659 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 3660 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 3660 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 3661 | ··tags: | 3661 | ··tags: |
| 3662 | ··-·CJIS-5.4.1.1 | 3662 | ··-·CJIS-5.4.1.1 |
| 3663 | ··-·DISA-STIG-UBTU-20-010152 | 3663 | ··-·DISA-STIG-UBTU-20-010152 |
| 3664 | ··-·NIST-800-171-3.1.7 | 3664 | ··-·NIST-800-171-3.1.7 |
| 3665 | ··-·NIST-800-53-AU-12(c) | 3665 | ··-·NIST-800-53-AU-12(c) |
| Offset 3797, 16 lines modified | Offset 3797, 16 lines modified | ||
| 3797 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3797 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3798 | ········-F·auid!=unset·-F·key=perm_mod | 3798 | ········-F·auid!=unset·-F·key=perm_mod |
| 3799 | ······create:·true | 3799 | ······create:·true |
| 3800 | ······mode:·o-rwx | 3800 | ······mode:·o-rwx |
| 3801 | ······state:·present | 3801 | ······state:·present |
| 3802 | ····when:·syscalls_found·|·length·==·0 | 3802 | ····when:·syscalls_found·|·length·==·0 |
| 3803 | ··when: | 3803 | ··when: |
| 3804 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3805 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3804 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3805 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3806 | ··tags: | 3806 | ··tags: |
| 3807 | ··-·CJIS-5.4.1.1 | 3807 | ··-·CJIS-5.4.1.1 |
| 3808 | ··-·DISA-STIG-UBTU-20-010152 | 3808 | ··-·DISA-STIG-UBTU-20-010152 |
| 3809 | ··-·NIST-800-171-3.1.7 | 3809 | ··-·NIST-800-171-3.1.7 |
| 3810 | ··-·NIST-800-53-AU-12(c) | 3810 | ··-·NIST-800-53-AU-12(c) |
| 3811 | ··-·NIST-800-53-AU-2(d) | 3811 | ··-·NIST-800-53-AU-2(d) |
| 3812 | ··-·NIST-800-53-CM-6(a) | 3812 | ··-·NIST-800-53-CM-6(a) |
| Offset 3941, 16 lines modified | Offset 3941, 16 lines modified | ||
| 3941 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3941 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3942 | ········-F·auid!=unset·-F·key=perm_mod | 3942 | ········-F·auid!=unset·-F·key=perm_mod |
| 3943 | ······create:·true | 3943 | ······create:·true |
| 3944 | ······mode:·o-rwx | 3944 | ······mode:·o-rwx |
| 3945 | ······state:·present | 3945 | ······state:·present |
| 3946 | ····when:·syscalls_found·|·length·==·0 | 3946 | ····when:·syscalls_found·|·length·==·0 |
| 3947 | ··when: | 3947 | ··when: |
| 3948 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3949 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3948 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3949 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3950 | ··-·audit_arch·==·"b64" | 3950 | ··-·audit_arch·==·"b64" |
| 3951 | ··tags: | 3951 | ··tags: |
| 3952 | ··-·CJIS-5.4.1.1 | 3952 | ··-·CJIS-5.4.1.1 |
| 3953 | ··-·DISA-STIG-UBTU-20-010152 | 3953 | ··-·DISA-STIG-UBTU-20-010152 |
| 3954 | ··-·NIST-800-171-3.1.7 | 3954 | ··-·NIST-800-171-3.1.7 |
| 3955 | ··-·NIST-800-53-AU-12(c) | 3955 | ··-·NIST-800-53-AU-12(c) |
| 3956 | ··-·NIST-800-53-AU-2(d) | 3956 | ··-·NIST-800-53-AU-2(d) |
| Offset 3960, 16 lines modified | Offset 3960, 16 lines modified | ||
| 3960 | ··-·low_complexity | 3960 | ··-·low_complexity |
| 3961 | ··-·low_disruption | 3961 | ··-·low_disruption |
| 3962 | ··-·medium_severity | 3962 | ··-·medium_severity |
| 3963 | ··-·reboot_required | 3963 | ··-·reboot_required |
| 3964 | ··-·restrict_strategy | 3964 | ··-·restrict_strategy |
| 3965 | Remediation_Shell_script_⇲ | 3965 | Remediation_Shell_script_⇲ |
| 3966 | #·Remediation·is·applicable·only·in·certain·platforms | 3966 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3967 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed·&&·[·!·- | ||
| 3968 | f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 3967 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status- |
| 3968 | Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed;·then | ||
| 3969 | #·First·perform·the·remediation·of·the·syscall·rule | 3969 | #·First·perform·the·remediation·of·the·syscall·rule |
| 3970 | #·Retrieve·hardware·architecture·of·the·underlying·system | 3970 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 3971 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 3971 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 3972 | for·ARCH·in·"${RULE_ARCHS[@]}" | 3972 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 3973 | do | 3973 | do |
| Offset 4361, 16 lines modified | Offset 4361, 16 lines modified | ||
| 4361 | ··-·reboot_required | 4361 | ··-·reboot_required |
| 4362 | ··-·restrict_strategy | 4362 | ··-·restrict_strategy |
| 4363 | -·name:·Set·architecture·for·audit·chown·tasks | 4363 | -·name:·Set·architecture·for·audit·chown·tasks |
| 4364 | ··set_fact: | 4364 | ··set_fact: |
| 4365 | ····audit_arch:·b64 | 4365 | ····audit_arch:·b64 |
| 4366 | ··when: | 4366 | ··when: |
| 4367 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4368 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4367 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4368 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4369 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4369 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4370 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4370 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4371 | ··tags: | 4371 | ··tags: |
| 4372 | ··-·CJIS-5.4.1.1 | 4372 | ··-·CJIS-5.4.1.1 |
| 4373 | ··-·DISA-STIG-UBTU-20-010148 | 4373 | ··-·DISA-STIG-UBTU-20-010148 |
| 4374 | ··-·NIST-800-171-3.1.7 | 4374 | ··-·NIST-800-171-3.1.7 |
| 4375 | ··-·NIST-800-53-AU-12(c) | 4375 | ··-·NIST-800-53-AU-12(c) |
| Offset 4509, 16 lines modified | Offset 4509, 16 lines modified | ||
| 4509 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4509 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4510 | ········-F·auid!=unset·-F·key=perm_mod | 4510 | ········-F·auid!=unset·-F·key=perm_mod |
| 4511 | ······create:·true | 4511 | ······create:·true |
| 4512 | ······mode:·o-rwx | 4512 | ······mode:·o-rwx |
| 4513 | ······state:·present | 4513 | ······state:·present |
| 4514 | ····when:·syscalls_found·|·length·==·0 | 4514 | ····when:·syscalls_found·|·length·==·0 |
| 4515 | ··when: | 4515 | ··when: |
| 4516 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4517 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4516 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4517 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4518 | ··tags: | 4518 | ··tags: |
| 4519 | ··-·CJIS-5.4.1.1 | 4519 | ··-·CJIS-5.4.1.1 |
| 4520 | ··-·DISA-STIG-UBTU-20-010148 | 4520 | ··-·DISA-STIG-UBTU-20-010148 |
| 4521 | ··-·NIST-800-171-3.1.7 | 4521 | ··-·NIST-800-171-3.1.7 |
| 4522 | ··-·NIST-800-53-AU-12(c) | 4522 | ··-·NIST-800-53-AU-12(c) |
| 4523 | ··-·NIST-800-53-AU-2(d) | 4523 | ··-·NIST-800-53-AU-2(d) |
| 4524 | ··-·NIST-800-53-CM-6(a) | 4524 | ··-·NIST-800-53-CM-6(a) |
| Offset 4655, 16 lines modified | Offset 4655, 16 lines modified | ||
| 4655 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4655 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4656 | ········-F·auid!=unset·-F·key=perm_mod | 4656 | ········-F·auid!=unset·-F·key=perm_mod |
| 4657 | ······create:·true | 4657 | ······create:·true |
| 4658 | ······mode:·o-rwx | 4658 | ······mode:·o-rwx |
| 4659 | ······state:·present | 4659 | ······state:·present |
| 4660 | ····when:·syscalls_found·|·length·==·0 | 4660 | ····when:·syscalls_found·|·length·==·0 |
| 4661 | ··when: | 4661 | ··when: |
| 4662 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4663 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4662 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4663 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4664 | ··-·audit_arch·==·"b64" | 4664 | ··-·audit_arch·==·"b64" |
| 4665 | ··tags: | 4665 | ··tags: |
| 4666 | ··-·CJIS-5.4.1.1 | 4666 | ··-·CJIS-5.4.1.1 |
| 4667 | ··-·DISA-STIG-UBTU-20-010148 | 4667 | ··-·DISA-STIG-UBTU-20-010148 |
| 4668 | ··-·NIST-800-171-3.1.7 | 4668 | ··-·NIST-800-171-3.1.7 |
| 4669 | ··-·NIST-800-53-AU-12(c) | 4669 | ··-·NIST-800-53-AU-12(c) |
| 4670 | ··-·NIST-800-53-AU-2(d) | 4670 | ··-·NIST-800-53-AU-2(d) |
| Offset 4674, 16 lines modified | Offset 4674, 16 lines modified | ||
| 4674 | ··-·low_complexity | 4674 | ··-·low_complexity |
| Max diff block lines reached; 157987/162445 bytes (97.26%) of diff not shown. | |||
| Offset 43035, 23 lines modified | Offset 43035, 23 lines modified | ||
| 000a81a0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | 000a81a0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 000a81b0:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | 000a81b0:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | ||
| 000a81c0:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | 000a81c0:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | ||
| 000a81d0:·6520·666f·7220·6175·6469·7420·6368·6d6f··e·for·audit·chmo | 000a81d0:·6520·666f·7220·6175·6469·7420·6368·6d6f··e·for·audit·chmo | ||
| 000a81e0:·6420·7461·736b·730a·2020·7365·745f·6661··d·tasks.··set_fa | 000a81e0:·6420·7461·736b·730a·2020·7365·745f·6661··d·tasks.··set_fa | ||
| 000a81f0:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | 000a81f0:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | ||
| 000a8200:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | 000a8200:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | ||
| 000a8210:·2020·2d20·2722·6175·6469·7464·2220·696e····-·'"auditd"·in | |||
| 000a8220:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000a8230:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 000a8240:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000a8250:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 000a8260:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 000a8270:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 000a82 | 000a8210:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 000a8220:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000a8230:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000a8240:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 000a8250:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 000a8260:·6e74·6169·6e65·7222·5d0a·2020·2d20·2722··ntainer"].··-·'" | |||
| 000a8270:·6175·6469·7464·2220·696e·2061·6e73·6962··auditd"·in·ansib | |||
| 000a8280:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 000a8290:· | 000a8290:·7327·0a20·202d·2061·6e73·6962·6c65·5f61··s'.··-·ansible_a | ||
| 000a82a0:·7263·6869·7465·6374·7572·6520·3d3d·2022··rchitecture·==·" | 000a82a0:·7263·6869·7465·6374·7572·6520·3d3d·2022··rchitecture·==·" | ||
| 000a82b0:·6161·7263·6836·3422·206f·7220·616e·7369··aarch64"·or·ansi | 000a82b0:·6161·7263·6836·3422·206f·7220·616e·7369··aarch64"·or·ansi | ||
| 000a82c0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 000a82c0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 000a82d0:·203d·3d20·2270·7063·3634·2220·6f72·2061···==·"ppc64"·or·a | 000a82d0:·203d·3d20·2270·7063·3634·2220·6f72·2061···==·"ppc64"·or·a | ||
| 000a82e0:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | 000a82e0:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | ||
| 000a82f0:·7572·650a·2020·2020·3d3d·2022·7070·6336··ure.····==·"ppc6 | 000a82f0:·7572·650a·2020·2020·3d3d·2022·7070·6336··ure.····==·"ppc6 | ||
| 000a8300:·346c·6522·206f·7220·616e·7369·626c·655f··4le"·or·ansible_ | 000a8300:·346c·6522·206f·7220·616e·7369·626c·655f··4le"·or·ansible_ | ||
| Offset 43358, 23 lines modified | Offset 43358, 23 lines modified | ||
| 000a95d0:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | 000a95d0:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | ||
| 000a95e0:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | 000a95e0:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | ||
| 000a95f0:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | 000a95f0:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | ||
| 000a9600:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | 000a9600:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | ||
| 000a9610:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | 000a9610:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | ||
| 000a9620:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | 000a9620:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | ||
| 000a9630:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | 000a9630:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | ||
| 000a9640:·656e·3a0a·2020·2d20·2722·6175·6469·7464··en:.··-·'"auditd | |||
| 000a9650:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 000a9660:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000a9670:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000a9680:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000a9690:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000a96a0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000a96 | 000a9640:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | ||
| 000a9650:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000a9660:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 000a9670:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 000a9680:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 000a9690:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 000a96a0:·2d20·2722·6175·6469·7464·2220·696e·2061··-·'"auditd"·in·a | |||
| 000a96b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 000a96c0:·6 | 000a96c0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | ||
| 000a96d0:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | 000a96d0:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | ||
| 000a96e0:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | 000a96e0:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | ||
| 000a96f0:·5455·2d32·302d·3031·3031·3532·0a20·202d··TU-20-010152.··- | 000a96f0:·5455·2d32·302d·3031·3031·3532·0a20·202d··TU-20-010152.··- | ||
| 000a9700:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 000a9700:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 000a9710:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 000a9710:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| 000a9720:·2d35·332d·4155·2d31·3228·6329·0a20·202d··-53-AU-12(c).··- | 000a9720:·2d35·332d·4155·2d31·3228·6329·0a20·202d··-53-AU-12(c).··- | ||
| 000a9730:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | 000a9730:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| Offset 43670, 23 lines modified | Offset 43670, 23 lines modified | ||
| 000aa950:·6d5f·6d6f·640a·2020·2020·2020·6372·6561··m_mod.······crea | 000aa950:·6d5f·6d6f·640a·2020·2020·2020·6372·6561··m_mod.······crea | ||
| 000aa960:·7465·3a20·7472·7565·0a20·2020·2020·206d··te:·true.······m | 000aa960:·7465·3a20·7472·7565·0a20·2020·2020·206d··te:·true.······m | ||
| 000aa970:·6f64·653a·206f·2d72·7778·0a20·2020·2020··ode:·o-rwx.····· | 000aa970:·6f64·653a·206f·2d72·7778·0a20·2020·2020··ode:·o-rwx.····· | ||
| 000aa980:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | 000aa980:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | ||
| 000aa990:·2020·2020·7768·656e·3a20·7379·7363·616c······when:·syscal | 000aa990:·2020·2020·7768·656e·3a20·7379·7363·616c······when:·syscal | ||
| 000aa9a0:·6c73·5f66·6f75·6e64·207c·206c·656e·6774··ls_found·|·lengt | 000aa9a0:·6c73·5f66·6f75·6e64·207c·206c·656e·6774··ls_found·|·lengt | ||
| 000aa9b0:·6820·3d3d·2030·0a20·2077·6865·6e3a·0a20··h·==·0.··when:.· | 000aa9b0:·6820·3d3d·2030·0a20·2077·6865·6e3a·0a20··h·==·0.··when:.· | ||
| 000aa9c0:·202d·2027·2261·7564·6974·6422·2069·6e20···-·'"auditd"·in· | |||
| 000aa9d0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 000aa9e0:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 000aa9f0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000aaa00:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000aaa10:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000aaa20:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000aa | 000aa9c0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 000aa9d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000aa9e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000aa9f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000aaa00:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000aaa10:·7461·696e·6572·225d·0a20·202d·2027·2261··tainer"].··-·'"a | |||
| 000aaa20:·7564·6974·6422·2069·6e20·616e·7369·626c··uditd"·in·ansibl | |||
| 000aaa30:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 000aaa40:· | 000aaa40:·270a·2020·2d20·6175·6469·745f·6172·6368··'.··-·audit_arch | ||
| 000aaa50:·203d·3d20·2262·3634·220a·2020·7461·6773···==·"b64".··tags | 000aaa50:·203d·3d20·2262·3634·220a·2020·7461·6773···==·"b64".··tags | ||
| 000aaa60:·3a0a·2020·2d20·434a·4953·2d35·2e34·2e31··:.··-·CJIS-5.4.1 | 000aaa60:·3a0a·2020·2d20·434a·4953·2d35·2e34·2e31··:.··-·CJIS-5.4.1 | ||
| 000aaa70:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | 000aaa70:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | ||
| 000aaa80:·2d55·4254·552d·3230·2d30·3130·3135·320a··-UBTU-20-010152. | 000aaa80:·2d55·4254·552d·3230·2d30·3130·3135·320a··-UBTU-20-010152. | ||
| 000aaa90:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | 000aaa90:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 000aaaa0:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | 000aaaa0:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | ||
| 000aaab0:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | 000aaab0:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | ||
| Offset 43720, 25 lines modified | Offset 43720, 25 lines modified | ||
| 000aac70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 000aac70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 000aac80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 000aac80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 000aac90:·3d22·6964·6d31·3236·3739·223e·3c70·7265··="idm12679"><pre | 000aac90:·3d22·6964·6d31·3236·3739·223e·3c70·7265··="idm12679"><pre | ||
| 000aaca0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 000aaca0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 000aacb0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 000aacb0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 000aacc0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 000aacc0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 000aacd0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 000aacd0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 000aace0:·6470·6b67·2d71·7565·7279·202d·2d73·686f··dpkg-query·--sho | |||
| 000aacf0:·7720·2d2d·7368·6f77·666f·726d·6174·3d27··w·--showformat=' | |||
| 000aad00:·247b·6462·3a53·7461·7475·732d·5374·6174··${db:Status-Stat | |||
| 000aad10:·7573·7d5c·6e27·2027·6175·6469·7464·2720··us}\n'·'auditd'· | |||
| 000aad20:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | |||
| 000aad30:·2067·7265·7020·2d71·2069·6e73·7461·6c6c···grep·-q·install | |||
| 000aad40:·6564·2026·616d·703b·2661·6d70·3b20·5b20··ed·&&·[· | |||
| 000aa | 000aace0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 000aa | 000aacf0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 000aad | 000aad00:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 000aad | 000aad10:·7461·696e·6572·656e·7620·5d20·2661·6d70··tainerenv·]·& | ||
| 000aad20:·3b26·616d·703b·2064·706b·672d·7175·6572··;&·dpkg-quer | |||
| 000aad30:·7920·2d2d·7368·6f77·202d·2d73·686f·7766··y·--show·--showf | |||
| 000aad40:·6f72·6d61·743d·2724·7b64·623a·5374·6174··ormat='${db:Stat | |||
| 000aad50:·7573·2d53·7461·7475·737d·5c6e·2720·2761··us-Status}\n'·'a | |||
| 000aad60:·7564·6974·6427·2032·2667·743b·2f64·6576··uditd'·2>/dev | |||
| 000aad70:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | |||
| 000aad80:·696e·7374·616c·6c65·643b·2074·6865·6e0a··installed;·then. | |||
| 000aad90:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | 000aad90:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | ||
| 000aada0:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | 000aada0:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | ||
| 000aadb0:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | 000aadb0:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | ||
| 000aadc0:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | 000aadc0:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | ||
| 000aadd0:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | 000aadd0:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | ||
| 000aade0:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | 000aade0:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | ||
| 000aadf0:·6572·6c79·696e·6720·7379·7374·656d·0a5b··erlying·system.[ | 000aadf0:·6572·6c79·696e·6720·7379·7374·656d·0a5b··erlying·system.[ | ||
| Offset 45536, 23 lines modified | Offset 45536, 23 lines modified | ||
| 000b1df0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | 000b1df0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| Max diff block lines reached; 566388/575764 bytes (98.37%) of diff not shown. | |||
| Offset 3784, 16 lines modified | Offset 3784, 16 lines modified | ||
| 3784 | ··-·reboot_required | 3784 | ··-·reboot_required |
| 3785 | ··-·restrict_strategy | 3785 | ··-·restrict_strategy |
| 3786 | -·name:·Set·architecture·for·audit·chmod·tasks | 3786 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 3787 | ··set_fact: | 3787 | ··set_fact: |
| 3788 | ····audit_arch:·b64 | 3788 | ····audit_arch:·b64 |
| 3789 | ··when: | 3789 | ··when: |
| 3790 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3791 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3790 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3791 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3792 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 3792 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 3793 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 3793 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 3794 | ··tags: | 3794 | ··tags: |
| 3795 | ··-·CJIS-5.4.1.1 | 3795 | ··-·CJIS-5.4.1.1 |
| 3796 | ··-·DISA-STIG-UBTU-20-010152 | 3796 | ··-·DISA-STIG-UBTU-20-010152 |
| 3797 | ··-·NIST-800-171-3.1.7 | 3797 | ··-·NIST-800-171-3.1.7 |
| 3798 | ··-·NIST-800-53-AU-12(c) | 3798 | ··-·NIST-800-53-AU-12(c) |
| Offset 3930, 16 lines modified | Offset 3930, 16 lines modified | ||
| 3930 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3930 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3931 | ········-F·auid!=unset·-F·key=perm_mod | 3931 | ········-F·auid!=unset·-F·key=perm_mod |
| 3932 | ······create:·true | 3932 | ······create:·true |
| 3933 | ······mode:·o-rwx | 3933 | ······mode:·o-rwx |
| 3934 | ······state:·present | 3934 | ······state:·present |
| 3935 | ····when:·syscalls_found·|·length·==·0 | 3935 | ····when:·syscalls_found·|·length·==·0 |
| 3936 | ··when: | 3936 | ··when: |
| 3937 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3938 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 3939 | ··tags: | 3939 | ··tags: |
| 3940 | ··-·CJIS-5.4.1.1 | 3940 | ··-·CJIS-5.4.1.1 |
| 3941 | ··-·DISA-STIG-UBTU-20-010152 | 3941 | ··-·DISA-STIG-UBTU-20-010152 |
| 3942 | ··-·NIST-800-171-3.1.7 | 3942 | ··-·NIST-800-171-3.1.7 |
| 3943 | ··-·NIST-800-53-AU-12(c) | 3943 | ··-·NIST-800-53-AU-12(c) |
| 3944 | ··-·NIST-800-53-AU-2(d) | 3944 | ··-·NIST-800-53-AU-2(d) |
| 3945 | ··-·NIST-800-53-CM-6(a) | 3945 | ··-·NIST-800-53-CM-6(a) |
| Offset 4074, 16 lines modified | Offset 4074, 16 lines modified | ||
| 4074 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4074 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4075 | ········-F·auid!=unset·-F·key=perm_mod | 4075 | ········-F·auid!=unset·-F·key=perm_mod |
| 4076 | ······create:·true | 4076 | ······create:·true |
| 4077 | ······mode:·o-rwx | 4077 | ······mode:·o-rwx |
| 4078 | ······state:·present | 4078 | ······state:·present |
| 4079 | ····when:·syscalls_found·|·length·==·0 | 4079 | ····when:·syscalls_found·|·length·==·0 |
| 4080 | ··when: | 4080 | ··when: |
| 4081 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4082 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4081 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4082 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4083 | ··-·audit_arch·==·"b64" | 4083 | ··-·audit_arch·==·"b64" |
| 4084 | ··tags: | 4084 | ··tags: |
| 4085 | ··-·CJIS-5.4.1.1 | 4085 | ··-·CJIS-5.4.1.1 |
| 4086 | ··-·DISA-STIG-UBTU-20-010152 | 4086 | ··-·DISA-STIG-UBTU-20-010152 |
| 4087 | ··-·NIST-800-171-3.1.7 | 4087 | ··-·NIST-800-171-3.1.7 |
| 4088 | ··-·NIST-800-53-AU-12(c) | 4088 | ··-·NIST-800-53-AU-12(c) |
| 4089 | ··-·NIST-800-53-AU-2(d) | 4089 | ··-·NIST-800-53-AU-2(d) |
| Offset 4093, 16 lines modified | Offset 4093, 16 lines modified | ||
| 4093 | ··-·low_complexity | 4093 | ··-·low_complexity |
| 4094 | ··-·low_disruption | 4094 | ··-·low_disruption |
| 4095 | ··-·medium_severity | 4095 | ··-·medium_severity |
| 4096 | ··-·reboot_required | 4096 | ··-·reboot_required |
| 4097 | ··-·restrict_strategy | 4097 | ··-·restrict_strategy |
| 4098 | Remediation_Shell_script_⇲ | 4098 | Remediation_Shell_script_⇲ |
| 4099 | #·Remediation·is·applicable·only·in·certain·platforms | 4099 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4100 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed·&&·[·!·- | ||
| 4101 | f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 4100 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status- |
| 4101 | Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed;·then | ||
| 4102 | #·First·perform·the·remediation·of·the·syscall·rule | 4102 | #·First·perform·the·remediation·of·the·syscall·rule |
| 4103 | #·Retrieve·hardware·architecture·of·the·underlying·system | 4103 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 4104 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 4104 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 4105 | for·ARCH·in·"${RULE_ARCHS[@]}" | 4105 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 4106 | do | 4106 | do |
| Offset 4494, 16 lines modified | Offset 4494, 16 lines modified | ||
| 4494 | ··-·reboot_required | 4494 | ··-·reboot_required |
| 4495 | ··-·restrict_strategy | 4495 | ··-·restrict_strategy |
| 4496 | -·name:·Set·architecture·for·audit·chown·tasks | 4496 | -·name:·Set·architecture·for·audit·chown·tasks |
| 4497 | ··set_fact: | 4497 | ··set_fact: |
| 4498 | ····audit_arch:·b64 | 4498 | ····audit_arch:·b64 |
| 4499 | ··when: | 4499 | ··when: |
| 4500 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4501 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4500 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4501 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4502 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4502 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4503 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4503 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4504 | ··tags: | 4504 | ··tags: |
| 4505 | ··-·CJIS-5.4.1.1 | 4505 | ··-·CJIS-5.4.1.1 |
| 4506 | ··-·DISA-STIG-UBTU-20-010148 | 4506 | ··-·DISA-STIG-UBTU-20-010148 |
| 4507 | ··-·NIST-800-171-3.1.7 | 4507 | ··-·NIST-800-171-3.1.7 |
| 4508 | ··-·NIST-800-53-AU-12(c) | 4508 | ··-·NIST-800-53-AU-12(c) |
| Offset 4642, 16 lines modified | Offset 4642, 16 lines modified | ||
| 4642 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4642 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4643 | ········-F·auid!=unset·-F·key=perm_mod | 4643 | ········-F·auid!=unset·-F·key=perm_mod |
| 4644 | ······create:·true | 4644 | ······create:·true |
| 4645 | ······mode:·o-rwx | 4645 | ······mode:·o-rwx |
| 4646 | ······state:·present | 4646 | ······state:·present |
| 4647 | ····when:·syscalls_found·|·length·==·0 | 4647 | ····when:·syscalls_found·|·length·==·0 |
| 4648 | ··when: | 4648 | ··when: |
| 4649 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4650 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4649 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4650 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4651 | ··tags: | 4651 | ··tags: |
| 4652 | ··-·CJIS-5.4.1.1 | 4652 | ··-·CJIS-5.4.1.1 |
| 4653 | ··-·DISA-STIG-UBTU-20-010148 | 4653 | ··-·DISA-STIG-UBTU-20-010148 |
| 4654 | ··-·NIST-800-171-3.1.7 | 4654 | ··-·NIST-800-171-3.1.7 |
| 4655 | ··-·NIST-800-53-AU-12(c) | 4655 | ··-·NIST-800-53-AU-12(c) |
| 4656 | ··-·NIST-800-53-AU-2(d) | 4656 | ··-·NIST-800-53-AU-2(d) |
| 4657 | ··-·NIST-800-53-CM-6(a) | 4657 | ··-·NIST-800-53-CM-6(a) |
| Offset 4788, 16 lines modified | Offset 4788, 16 lines modified | ||
| 4788 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4788 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4789 | ········-F·auid!=unset·-F·key=perm_mod | 4789 | ········-F·auid!=unset·-F·key=perm_mod |
| 4790 | ······create:·true | 4790 | ······create:·true |
| 4791 | ······mode:·o-rwx | 4791 | ······mode:·o-rwx |
| 4792 | ······state:·present | 4792 | ······state:·present |
| 4793 | ····when:·syscalls_found·|·length·==·0 | 4793 | ····when:·syscalls_found·|·length·==·0 |
| 4794 | ··when: | 4794 | ··when: |
| 4795 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4796 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4795 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4796 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 4797 | ··-·audit_arch·==·"b64" | 4797 | ··-·audit_arch·==·"b64" |
| 4798 | ··tags: | 4798 | ··tags: |
| 4799 | ··-·CJIS-5.4.1.1 | 4799 | ··-·CJIS-5.4.1.1 |
| 4800 | ··-·DISA-STIG-UBTU-20-010148 | 4800 | ··-·DISA-STIG-UBTU-20-010148 |
| 4801 | ··-·NIST-800-171-3.1.7 | 4801 | ··-·NIST-800-171-3.1.7 |
| 4802 | ··-·NIST-800-53-AU-12(c) | 4802 | ··-·NIST-800-53-AU-12(c) |
| 4803 | ··-·NIST-800-53-AU-2(d) | 4803 | ··-·NIST-800-53-AU-2(d) |
| Offset 4807, 16 lines modified | Offset 4807, 16 lines modified | ||
| 4807 | ··-·low_complexity | 4807 | ··-·low_complexity |
| Max diff block lines reached; 166194/170652 bytes (97.39%) of diff not shown. | |||
| Offset 38096, 21 lines modified | Offset 38096, 21 lines modified | ||
| 00094cf0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 00094cf0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 00094d00:·2f62·6f6f·742f·6772·7562·2f67·7275·622e··/boot/grub/grub. | 00094d00:·2f62·6f6f·742f·6772·7562·2f67·7275·622e··/boot/grub/grub. | ||
| 00094d10:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | 00094d10:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | ||
| 00094d20:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 00094d20:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 00094d30:·2f67·7275·622e·6366·670a·2020·7265·6769··/grub.cfg.··regi | 00094d30:·2f67·7275·622e·6366·670a·2020·7265·6769··/grub.cfg.··regi | ||
| 00094d40:·7374·6572·3a20·6669·6c65·5f65·7869·7374··ster:·file_exist | 00094d40:·7374·6572·3a20·6669·6c65·5f65·7869·7374··ster:·file_exist | ||
| 00094d50:·730a·2020·7768·656e·3a0a·2020·2d20·2722··s.··when:.··-·'" | 00094d50:·730a·2020·7768·656e·3a0a·2020·2d20·2722··s.··when:.··-·'" | ||
| 00094d60:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 00094d70:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00094d80:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 00094d90:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 00094da0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 00094db0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 00094d | 00094d60:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | ||
| 00094d70:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 00094d80:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 00094d90:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 00094da0:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | |||
| 00094db0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 00094dc0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 00094dd0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 00094dd0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 00094de0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 00094de0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 00094df0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 00094df0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 00094e00:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 00094e00:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 00094e10:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 00094e10:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 00094e20:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | 00094e20:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | ||
| 00094e30:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | 00094e30:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | ||
| Offset 38131, 21 lines modified | Offset 38131, 21 lines modified | ||
| 00094f20:·206e·616d·653a·2045·6e73·7572·6520·6f77···name:·Ensure·ow | 00094f20:·206e·616d·653a·2045·6e73·7572·6520·6f77···name:·Ensure·ow | ||
| 00094f30:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | 00094f30:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | ||
| 00094f40:·7275·622f·6772·7562·2e63·6667·0a20·2066··rub/grub.cfg.··f | 00094f40:·7275·622f·6772·7562·2e63·6667·0a20·2066··rub/grub.cfg.··f | ||
| 00094f50:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | 00094f50:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | ||
| 00094f60:·626f·6f74·2f67·7275·622f·6772·7562·2e63··boot/grub/grub.c | 00094f60:·626f·6f74·2f67·7275·622f·6772·7562·2e63··boot/grub/grub.c | ||
| 00094f70:·6667·0a20·2020·206f·776e·6572·3a20·2730··fg.····owner:·'0 | 00094f70:·6667·0a20·2020·206f·776e·6572·3a20·2730··fg.····owner:·'0 | ||
| 00094f80:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 00094f80:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 00094f90:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 00094fa0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00094fb0:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 00094fc0:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 00094fd0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 00094fe0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 00094f | 00094f90:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | ||
| 00094fa0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 00094fb0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 00094fc0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 00094fd0:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | |||
| 00094fe0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 00094ff0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 00095000:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 00095000:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 00095010:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 00095010:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 00095020:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 00095020:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 00095030:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 00095030:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 00095040:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 00095040:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 00095050:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 00095050:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 00095060:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 00095060:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Offset 38196, 23 lines modified | Offset 38196, 23 lines modified | ||
| 00095330:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | 00095330:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 00095340:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | 00095340:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | ||
| 00095350:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | 00095350:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 00095360:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 00095360:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 00095370:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 00095370:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 00095380:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 00095380:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 00095390:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 00095390:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 000953a0:·2064·706b·672d·7175·6572·7920·2d2d·7368···dpkg-query·--sh | |||
| 000953b0:·6f77·202d·2d73·686f·7766·6f72·6d61·743d··ow·--showformat= | |||
| 000953c0:·2724·7b64·623a·5374·6174·7573·2d53·7461··'${db:Status-Sta | |||
| 000953d0:·7475·737d·5c6e·2720·2767·7275·6232·2d63··tus}\n'·'grub2-c | |||
| 000953e0:·6f6d·6d6f·6e27·2032·2667·743b·2f64·6576··ommon'·2>/dev | |||
| 000953f0:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | |||
| 00095400:·696e·7374·616c·6c65·6420·2661·6d70·3b26··installed·&& | |||
| 00095 | 000953a0:·205b·2021·202d·6620·2f73·7973·2f66·6972···[·!·-f·/sys/fir | ||
| 00095 | 000953b0:·6d77·6172·652f·6566·6920·5d20·2661·6d70··mware/efi·]·& | ||
| 000953c0:·3b26·616d·703b·2064·706b·672d·7175·6572··;&·dpkg-quer | |||
| 000953d0:·7920·2d2d·7368·6f77·202d·2d73·686f·7766··y·--show·--showf | |||
| 000953e0:·6f72·6d61·743d·2724·7b64·623a·5374·6174··ormat='${db:Stat | |||
| 000953f0:·7573·2d53·7461·7475·737d·5c6e·2720·2767··us-Status}\n'·'g | |||
| 00095400:·7275·6232·2d63·6f6d·6d6f·6e27·2032·2667··rub2-common'·2&g | |||
| 00095410:·743b·2f64·6576·2f6e·756c·6c20·7c20·6772··t;/dev/null·|·gr | |||
| 00095420:·6570·202d·7120·696e·7374·616c·6c65·6420··ep·-q·installed· | |||
| 00095430:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | 00095430:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | ||
| 00095440:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | 00095440:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 00095450:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | 00095450:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 00095460:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | 00095460:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 00095470:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | 00095470:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | ||
| 00095480:·6e0a·0a63·686f·776e·2030·202f·626f·6f74··n..chown·0·/boot | 00095480:·6e0a·0a63·686f·776e·2030·202f·626f·6f74··n..chown·0·/boot | ||
| 00095490:·2f67·7275·622f·6772·7562·2e63·6667·0a0a··/grub/grub.cfg.. | 00095490:·2f67·7275·622f·6772·7562·2e63·6667·0a0a··/grub/grub.cfg.. | ||
| Offset 38664, 22 lines modified | Offset 38664, 22 lines modified | ||
| 00097070:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 00097070:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 00097080:·6e63·6520·2f62·6f6f·742f·6772·7562·2f67··nce·/boot/grub/g | 00097080:·6e63·6520·2f62·6f6f·742f·6772·7562·2f67··nce·/boot/grub/g | ||
| 00097090:·7275·622e·6366·670a·2020·7374·6174·3a0a··rub.cfg.··stat:. | 00097090:·7275·622e·6366·670a·2020·7374·6174·3a0a··rub.cfg.··stat:. | ||
| 000970a0:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | 000970a0:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | ||
| 000970b0:·6772·7562·2f67·7275·622e·6366·670a·2020··grub/grub.cfg.·· | 000970b0:·6772·7562·2f67·7275·622e·6366·670a·2020··grub/grub.cfg.·· | ||
| 000970c0:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 000970c0:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 000970d0:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 000970d0:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 000970e0:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 000970f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00097100:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 00097110:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 00097120:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 00097130:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 00097 | 000970e0:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | ||
| 000970f0:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 00097100:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 00097110:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 00097120:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 00097130:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | |||
| 00097140:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00097150:·6 | 00097150:·6765·7327·0a20·202d·2061·6e73·6962·6c65··ges'.··-·ansible | ||
| 00097160:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 00097160:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 00097170:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 00097170:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 00097180:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 00097180:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 00097190:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 00097190:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 000971a0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 000971a0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 000971b0:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | 000971b0:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | ||
| 000971c0:·3830·302d·3137·312d·332e·342e·350a·2020··800-171-3.4.5.·· | 000971c0:·3830·302d·3137·312d·332e·342e·350a·2020··800-171-3.4.5.·· | ||
| Offset 38699, 22 lines modified | Offset 38699, 22 lines modified | ||
| 000972a0:·7873·2c67·2d78·7772·732c·6f2d·7877·7274··xs,g-xwrs,o-xwrt | 000972a0:·7873·2c67·2d78·7772·732c·6f2d·7877·7274··xs,g-xwrs,o-xwrt | ||
| 000972b0:·206f·6e20·2f62·6f6f·742f·6772·7562·2f67···on·/boot/grub/g | 000972b0:·206f·6e20·2f62·6f6f·742f·6772·7562·2f67···on·/boot/grub/g | ||
| 000972c0:·7275·622e·6366·670a·2020·6669·6c65·3a0a··rub.cfg.··file:. | 000972c0:·7275·622e·6366·670a·2020·6669·6c65·3a0a··rub.cfg.··file:. | ||
| 000972d0:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | 000972d0:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | ||
| 000972e0:·6772·7562·2f67·7275·622e·6366·670a·2020··grub/grub.cfg.·· | 000972e0:·6772·7562·2f67·7275·622e·6366·670a·2020··grub/grub.cfg.·· | ||
| 000972f0:·2020·6d6f·6465·3a20·752d·7873·2c67·2d78····mode:·u-xs,g-x | 000972f0:·2020·6d6f·6465·3a20·752d·7873·2c67·2d78····mode:·u-xs,g-x | ||
| 00097300:·7772·732c·6f2d·7877·7274·0a20·2077·6865··wrs,o-xwrt.··whe | 00097300:·7772·732c·6f2d·7877·7274·0a20·2077·6865··wrs,o-xwrt.··whe | ||
| 00097310:·6e3a·0a20·202d·2027·22 | 00097310:·6e3a·0a20·202d·2027·222f·626f·6f74·2f65··n:.··-·'"/boot/e | ||
| 00097320:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | |||
| 00097330:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00097340:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| Max diff block lines reached; 2786/12714 bytes (21.91%) of diff not shown. | |||
| Offset 3153, 16 lines modified | Offset 3153, 16 lines modified | ||
| 3153 | ··-·no_reboot_needed | 3153 | ··-·no_reboot_needed |
| 3154 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3154 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3155 | ··stat: | 3155 | ··stat: |
| 3156 | ····path:·/boot/grub/grub.cfg | 3156 | ····path:·/boot/grub/grub.cfg |
| 3157 | ··register:·file_exists | 3157 | ··register:·file_exists |
| 3158 | ··when: | 3158 | ··when: |
| 3159 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3160 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3159 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3160 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3161 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3161 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3162 | ··tags: | 3162 | ··tags: |
| 3163 | ··-·CJIS-5.5.2.2 | 3163 | ··-·CJIS-5.5.2.2 |
| 3164 | ··-·NIST-800-171-3.4.5 | 3164 | ··-·NIST-800-171-3.4.5 |
| 3165 | ··-·NIST-800-53-AC-6(1) | 3165 | ··-·NIST-800-53-AC-6(1) |
| 3166 | ··-·NIST-800-53-CM-6(a) | 3166 | ··-·NIST-800-53-CM-6(a) |
| 3167 | ··-·PCI-DSS-Req-7.1 | 3167 | ··-·PCI-DSS-Req-7.1 |
| Offset 3174, 16 lines modified | Offset 3174, 16 lines modified | ||
| 3174 | ··-·no_reboot_needed | 3174 | ··-·no_reboot_needed |
| 3175 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 3175 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 3176 | ··file: | 3176 | ··file: |
| 3177 | ····path:·/boot/grub/grub.cfg | 3177 | ····path:·/boot/grub/grub.cfg |
| 3178 | ····owner:·'0' | 3178 | ····owner:·'0' |
| 3179 | ··when: | 3179 | ··when: |
| 3180 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3181 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3180 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3181 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3182 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3182 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3183 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3183 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3184 | ··tags: | 3184 | ··tags: |
| 3185 | ··-·CJIS-5.5.2.2 | 3185 | ··-·CJIS-5.5.2.2 |
| 3186 | ··-·NIST-800-171-3.4.5 | 3186 | ··-·NIST-800-171-3.4.5 |
| 3187 | ··-·NIST-800-53-AC-6(1) | 3187 | ··-·NIST-800-53-AC-6(1) |
| 3188 | ··-·NIST-800-53-CM-6(a) | 3188 | ··-·NIST-800-53-CM-6(a) |
| Offset 3195, 16 lines modified | Offset 3195, 16 lines modified | ||
| 3195 | ··-·medium_severity | 3195 | ··-·medium_severity |
| 3196 | ··-·no_reboot_needed | 3196 | ··-·no_reboot_needed |
| 3197 | Remediation_Shell_script_⇲ | 3197 | Remediation_Shell_script_⇲ |
| 3198 | Complexity:·low | 3198 | Complexity:·low |
| 3199 | Disruption:·low | 3199 | Disruption:·low |
| 3200 | Strategy:···configure | 3200 | Strategy:···configure |
| 3201 | #·Remediation·is·applicable·only·in·certain·platforms | 3201 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3202 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ | 3202 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ |
| 3203 | 3203 | null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3204 | chown·0·/boot/grub/grub.cfg | 3204 | chown·0·/boot/grub/grub.cfg |
| 3205 | else | 3205 | else |
| 3206 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3206 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3207 | fi | 3207 | fi |
| 3208 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** | 3208 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** |
| Offset 3240, 16 lines modified | Offset 3240, 16 lines modified | ||
| 3240 | ··-·no_reboot_needed | 3240 | ··-·no_reboot_needed |
| 3241 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3241 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3242 | ··stat: | 3242 | ··stat: |
| 3243 | ····path:·/boot/grub/grub.cfg | 3243 | ····path:·/boot/grub/grub.cfg |
| 3244 | ··register:·file_exists | 3244 | ··register:·file_exists |
| 3245 | ··when: | 3245 | ··when: |
| 3246 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3247 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3246 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3247 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3248 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3248 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3249 | ··tags: | 3249 | ··tags: |
| 3250 | ··-·NIST-800-171-3.4.5 | 3250 | ··-·NIST-800-171-3.4.5 |
| 3251 | ··-·NIST-800-53-AC-6(1) | 3251 | ··-·NIST-800-53-AC-6(1) |
| 3252 | ··-·NIST-800-53-CM-6(a) | 3252 | ··-·NIST-800-53-CM-6(a) |
| 3253 | ··-·configure_strategy | 3253 | ··-·configure_strategy |
| 3254 | ··-·file_permissions_grub2_cfg | 3254 | ··-·file_permissions_grub2_cfg |
| Offset 3259, 16 lines modified | Offset 3259, 16 lines modified | ||
| 3259 | ··-·no_reboot_needed | 3259 | ··-·no_reboot_needed |
| 3260 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 3260 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 3261 | ··file: | 3261 | ··file: |
| 3262 | ····path:·/boot/grub/grub.cfg | 3262 | ····path:·/boot/grub/grub.cfg |
| 3263 | ····mode:·u-xs,g-xwrs,o-xwrt | 3263 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 3264 | ··when: | 3264 | ··when: |
| 3265 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3266 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3265 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3266 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3267 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3267 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3268 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3268 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3269 | ··tags: | 3269 | ··tags: |
| 3270 | ··-·NIST-800-171-3.4.5 | 3270 | ··-·NIST-800-171-3.4.5 |
| 3271 | ··-·NIST-800-53-AC-6(1) | 3271 | ··-·NIST-800-53-AC-6(1) |
| 3272 | ··-·NIST-800-53-CM-6(a) | 3272 | ··-·NIST-800-53-CM-6(a) |
| 3273 | ··-·configure_strategy | 3273 | ··-·configure_strategy |
| Offset 3278, 16 lines modified | Offset 3278, 16 lines modified | ||
| 3278 | ··-·medium_severity | 3278 | ··-·medium_severity |
| 3279 | ··-·no_reboot_needed | 3279 | ··-·no_reboot_needed |
| 3280 | Remediation_Shell_script_⇲ | 3280 | Remediation_Shell_script_⇲ |
| 3281 | Complexity:·low | 3281 | Complexity:·low |
| 3282 | Disruption:·low | 3282 | Disruption:·low |
| 3283 | Strategy:···configure | 3283 | Strategy:···configure |
| 3284 | #·Remediation·is·applicable·only·in·certain·platforms | 3284 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3285 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2> | 3285 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ |
| 3286 | 3286 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3287 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 3287 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 3288 | else | 3288 | else |
| 3289 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3289 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3290 | fi | 3290 | fi |
| 3291 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 3291 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 39645, 21 lines modified | Offset 39645, 21 lines modified | ||
| 0009adc0:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | 0009adc0:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | ||
| 0009add0:·202f·626f·6f74·2f67·7275·622f·6772·7562···/boot/grub/grub | 0009add0:·202f·626f·6f74·2f67·7275·622f·6772·7562···/boot/grub/grub | ||
| 0009ade0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 0009ade0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 0009adf0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 0009adf0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 0009ae00:·622f·6772·7562·2e63·6667·0a20·2072·6567··b/grub.cfg.··reg | 0009ae00:·622f·6772·7562·2e63·6667·0a20·2072·6567··b/grub.cfg.··reg | ||
| 0009ae10:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 0009ae10:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 0009ae20:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 0009ae20:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 0009ae30:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | |||
| 0009ae40:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0009ae50:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 0009ae60:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 0009ae70:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 0009ae80:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 0009ae | 0009ae30:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | ||
| 0009ae40:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 0009ae50:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 0009ae60:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 0009ae70:·7427·0a20·202d·2027·2267·7275·6232·2d63··t'.··-·'"grub2-c | |||
| 0009ae80:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | |||
| 0009ae90:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0009aea0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 0009aea0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 0009aeb0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 0009aeb0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 0009aec0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 0009aec0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 0009aed0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 0009aed0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 0009aee0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 0009aee0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 0009aef0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | 0009aef0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | ||
| 0009af00:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | 0009af00:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | ||
| Offset 39680, 21 lines modified | Offset 39680, 21 lines modified | ||
| 0009aff0:·2d20·6e61·6d65·3a20·456e·7375·7265·206f··-·name:·Ensure·o | 0009aff0:·2d20·6e61·6d65·3a20·456e·7375·7265·206f··-·name:·Ensure·o | ||
| 0009b000:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | 0009b000:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | ||
| 0009b010:·6772·7562·2f67·7275·622e·6366·670a·2020··grub/grub.cfg.·· | 0009b010:·6772·7562·2f67·7275·622e·6366·670a·2020··grub/grub.cfg.·· | ||
| 0009b020:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | 0009b020:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | ||
| 0009b030:·2f62·6f6f·742f·6772·7562·2f67·7275·622e··/boot/grub/grub. | 0009b030:·2f62·6f6f·742f·6772·7562·2f67·7275·622e··/boot/grub/grub. | ||
| 0009b040:·6366·670a·2020·2020·6f77·6e65·723a·2027··cfg.····owner:·' | 0009b040:·6366·670a·2020·2020·6f77·6e65·723a·2027··cfg.····owner:·' | ||
| 0009b050:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | 0009b050:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | ||
| 0009b060:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | |||
| 0009b070:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0009b080:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 0009b090:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 0009b0a0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 0009b0b0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 0009b0 | 0009b060:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | ||
| 0009b070:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 0009b080:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 0009b090:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 0009b0a0:·7427·0a20·202d·2027·2267·7275·6232·2d63··t'.··-·'"grub2-c | |||
| 0009b0b0:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | |||
| 0009b0c0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0009b0d0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 0009b0d0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 0009b0e0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 0009b0e0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 0009b0f0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 0009b0f0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 0009b100:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 0009b100:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 0009b110:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 0009b110:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 0009b120:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | 0009b120:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | ||
| 0009b130:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | 0009b130:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | ||
| Offset 39745, 23 lines modified | Offset 39745, 23 lines modified | ||
| 0009b400:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | 0009b400:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0009b410:·7464·3e63·6f6e·6669·6775·7265·3c2f·7464··td>configure</td | 0009b410:·7464·3e63·6f6e·6669·6775·7265·3c2f·7464··td>configure</td | ||
| 0009b420:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | 0009b420:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0009b430:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | 0009b430:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0009b440:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | 0009b440:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0009b450:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | 0009b450:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0009b460:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | 0009b460:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0009b470:·6620·6470·6b67·2d71·7565·7279·202d·2d73··f·dpkg-query·--s | |||
| 0009b480:·686f·7720·2d2d·7368·6f77·666f·726d·6174··how·--showformat | |||
| 0009b490:·3d27·247b·6462·3a53·7461·7475·732d·5374··='${db:Status-St | |||
| 0009b4a0:·6174·7573·7d5c·6e27·2027·6772·7562·322d··atus}\n'·'grub2- | |||
| 0009b4b0:·636f·6d6d·6f6e·2720·3226·6774·3b2f·6465··common'·2>/de | |||
| 0009b4c0:·762f·6e75·6c6c·207c·2067·7265·7020·2d71··v/null·|·grep·-q | |||
| 0009b4d0:·2069·6e73·7461·6c6c·6564·2026·616d·703b···installed·& | |||
| 0009b4 | 0009b470:·6620·5b20·2120·2d66·202f·7379·732f·6669··f·[·!·-f·/sys/fi | ||
| 0009b4 | 0009b480:·726d·7761·7265·2f65·6669·205d·2026·616d··rmware/efi·]·&am | ||
| 0009b490:·703b·2661·6d70·3b20·6470·6b67·2d71·7565··p;&·dpkg-que | |||
| 0009b4a0:·7279·202d·2d73·686f·7720·2d2d·7368·6f77··ry·--show·--show | |||
| 0009b4b0:·666f·726d·6174·3d27·247b·6462·3a53·7461··format='${db:Sta | |||
| 0009b4c0:·7475·732d·5374·6174·7573·7d5c·6e27·2027··tus-Status}\n'·' | |||
| 0009b4d0:·6772·7562·322d·636f·6d6d·6f6e·2720·3226··grub2-common'·2& | |||
| 0009b4e0:·6774·3b2f·6465·762f·6e75·6c6c·207c·2067··gt;/dev/null·|·g | |||
| 0009b4f0:·7265·7020·2d71·2069·6e73·7461·6c6c·6564··rep·-q·installed | |||
| 0009b500:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | 0009b500:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 0009b510:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | 0009b510:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 0009b520:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | 0009b520:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 0009b530:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | 0009b530:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 0009b540:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | 0009b540:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 0009b550:·656e·0a0a·6368·6f77·6e20·3020·2f62·6f6f··en..chown·0·/boo | 0009b550:·656e·0a0a·6368·6f77·6e20·3020·2f62·6f6f··en..chown·0·/boo | ||
| 0009b560:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | 0009b560:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | ||
| Offset 40213, 22 lines modified | Offset 40213, 22 lines modified | ||
| 0009d140:·3a20·5465·7374·2066·6f72·2065·7869·7374··:·Test·for·exist | 0009d140:·3a20·5465·7374·2066·6f72·2065·7869·7374··:·Test·for·exist | ||
| 0009d150:·656e·6365·202f·626f·6f74·2f67·7275·622f··ence·/boot/grub/ | 0009d150:·656e·6365·202f·626f·6f74·2f67·7275·622f··ence·/boot/grub/ | ||
| 0009d160:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | 0009d160:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | ||
| 0009d170:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 0009d170:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 0009d180:·2f67·7275·622f·6772·7562·2e63·6667·0a20··/grub/grub.cfg.· | 0009d180:·2f67·7275·622f·6772·7562·2e63·6667·0a20··/grub/grub.cfg.· | ||
| 0009d190:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | 0009d190:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | ||
| 0009d1a0:·6578·6973·7473·0a20·2077·6865·6e3a·0a20··exists.··when:.· | 0009d1a0:·6578·6973·7473·0a20·2077·6865·6e3a·0a20··exists.··when:.· | ||
| 0009d1b0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | |||
| 0009d1c0:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 0009d1d0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0009d1e0:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 0009d1f0:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 0009d200:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 0009d | 0009d1b0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | ||
| 0009d1c0:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 0009d1d0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 0009d1e0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 0009d1f0:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 0009d200:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | |||
| 0009d210:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0009d220:·6 | 0009d220:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | ||
| 0009d230:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 0009d230:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 0009d240:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 0009d240:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 0009d250:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 0009d250:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 0009d260:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 0009d260:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 0009d270:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | 0009d270:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 0009d280:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | 0009d280:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | ||
| 0009d290:·2d38·3030·2d31·3731·2d33·2e34·2e35·0a20··-800-171-3.4.5.· | 0009d290:·2d38·3030·2d31·3731·2d33·2e34·2e35·0a20··-800-171-3.4.5.· | ||
| Offset 40248, 22 lines modified | Offset 40248, 22 lines modified | ||
| 0009d370:·2d78·732c·672d·7877·7273·2c6f·2d78·7772··-xs,g-xwrs,o-xwr | 0009d370:·2d78·732c·672d·7877·7273·2c6f·2d78·7772··-xs,g-xwrs,o-xwr | ||
| 0009d380:·7420·6f6e·202f·626f·6f74·2f67·7275·622f··t·on·/boot/grub/ | 0009d380:·7420·6f6e·202f·626f·6f74·2f67·7275·622f··t·on·/boot/grub/ | ||
| 0009d390:·6772·7562·2e63·6667·0a20·2066·696c·653a··grub.cfg.··file: | 0009d390:·6772·7562·2e63·6667·0a20·2066·696c·653a··grub.cfg.··file: | ||
| 0009d3a0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 0009d3a0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 0009d3b0:·2f67·7275·622f·6772·7562·2e63·6667·0a20··/grub/grub.cfg.· | 0009d3b0:·2f67·7275·622f·6772·7562·2e63·6667·0a20··/grub/grub.cfg.· | ||
| 0009d3c0:·2020·206d·6f64·653a·2075·2d78·732c·672d·····mode:·u-xs,g- | 0009d3c0:·2020·206d·6f64·653a·2075·2d78·732c·672d·····mode:·u-xs,g- | ||
| 0009d3d0:·7877·7273·2c6f·2d78·7772·740a·2020·7768··xwrs,o-xwrt.··wh | 0009d3d0:·7877·7273·2c6f·2d78·7772·740a·2020·7768··xwrs,o-xwrt.··wh | ||
| 0009d3e0:·656e·3a0a·2020·2d20·2722· | 0009d3e0:·656e·3a0a·2020·2d20·2722·2f62·6f6f·742f··en:.··-·'"/boot/ | ||
| 0009d3f0:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | |||
| 0009d400:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0009d410:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| Max diff block lines reached; 2786/12714 bytes (21.91%) of diff not shown. | |||
| Offset 3389, 16 lines modified | Offset 3389, 16 lines modified | ||
| 3389 | ··-·no_reboot_needed | 3389 | ··-·no_reboot_needed |
| 3390 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3390 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3391 | ··stat: | 3391 | ··stat: |
| 3392 | ····path:·/boot/grub/grub.cfg | 3392 | ····path:·/boot/grub/grub.cfg |
| 3393 | ··register:·file_exists | 3393 | ··register:·file_exists |
| 3394 | ··when: | 3394 | ··when: |
| 3395 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3396 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3395 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3396 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3397 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3397 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3398 | ··tags: | 3398 | ··tags: |
| 3399 | ··-·CJIS-5.5.2.2 | 3399 | ··-·CJIS-5.5.2.2 |
| 3400 | ··-·NIST-800-171-3.4.5 | 3400 | ··-·NIST-800-171-3.4.5 |
| 3401 | ··-·NIST-800-53-AC-6(1) | 3401 | ··-·NIST-800-53-AC-6(1) |
| 3402 | ··-·NIST-800-53-CM-6(a) | 3402 | ··-·NIST-800-53-CM-6(a) |
| 3403 | ··-·PCI-DSS-Req-7.1 | 3403 | ··-·PCI-DSS-Req-7.1 |
| Offset 3410, 16 lines modified | Offset 3410, 16 lines modified | ||
| 3410 | ··-·no_reboot_needed | 3410 | ··-·no_reboot_needed |
| 3411 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 3411 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 3412 | ··file: | 3412 | ··file: |
| 3413 | ····path:·/boot/grub/grub.cfg | 3413 | ····path:·/boot/grub/grub.cfg |
| 3414 | ····owner:·'0' | 3414 | ····owner:·'0' |
| 3415 | ··when: | 3415 | ··when: |
| 3416 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3417 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3416 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3417 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3418 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3418 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3419 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3419 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3420 | ··tags: | 3420 | ··tags: |
| 3421 | ··-·CJIS-5.5.2.2 | 3421 | ··-·CJIS-5.5.2.2 |
| 3422 | ··-·NIST-800-171-3.4.5 | 3422 | ··-·NIST-800-171-3.4.5 |
| 3423 | ··-·NIST-800-53-AC-6(1) | 3423 | ··-·NIST-800-53-AC-6(1) |
| 3424 | ··-·NIST-800-53-CM-6(a) | 3424 | ··-·NIST-800-53-CM-6(a) |
| Offset 3431, 16 lines modified | Offset 3431, 16 lines modified | ||
| 3431 | ··-·medium_severity | 3431 | ··-·medium_severity |
| 3432 | ··-·no_reboot_needed | 3432 | ··-·no_reboot_needed |
| 3433 | Remediation_Shell_script_⇲ | 3433 | Remediation_Shell_script_⇲ |
| 3434 | Complexity:·low | 3434 | Complexity:·low |
| 3435 | Disruption:·low | 3435 | Disruption:·low |
| 3436 | Strategy:···configure | 3436 | Strategy:···configure |
| 3437 | #·Remediation·is·applicable·only·in·certain·platforms | 3437 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3438 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ | 3438 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ |
| 3439 | 3439 | null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3440 | chown·0·/boot/grub/grub.cfg | 3440 | chown·0·/boot/grub/grub.cfg |
| 3441 | else | 3441 | else |
| 3442 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3442 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3443 | fi | 3443 | fi |
| 3444 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** | 3444 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** |
| Offset 3476, 16 lines modified | Offset 3476, 16 lines modified | ||
| 3476 | ··-·no_reboot_needed | 3476 | ··-·no_reboot_needed |
| 3477 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 3477 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 3478 | ··stat: | 3478 | ··stat: |
| 3479 | ····path:·/boot/grub/grub.cfg | 3479 | ····path:·/boot/grub/grub.cfg |
| 3480 | ··register:·file_exists | 3480 | ··register:·file_exists |
| 3481 | ··when: | 3481 | ··when: |
| 3482 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3483 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3482 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3483 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3484 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3484 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3485 | ··tags: | 3485 | ··tags: |
| 3486 | ··-·NIST-800-171-3.4.5 | 3486 | ··-·NIST-800-171-3.4.5 |
| 3487 | ··-·NIST-800-53-AC-6(1) | 3487 | ··-·NIST-800-53-AC-6(1) |
| 3488 | ··-·NIST-800-53-CM-6(a) | 3488 | ··-·NIST-800-53-CM-6(a) |
| 3489 | ··-·configure_strategy | 3489 | ··-·configure_strategy |
| 3490 | ··-·file_permissions_grub2_cfg | 3490 | ··-·file_permissions_grub2_cfg |
| Offset 3495, 16 lines modified | Offset 3495, 16 lines modified | ||
| 3495 | ··-·no_reboot_needed | 3495 | ··-·no_reboot_needed |
| 3496 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 3496 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 3497 | ··file: | 3497 | ··file: |
| 3498 | ····path:·/boot/grub/grub.cfg | 3498 | ····path:·/boot/grub/grub.cfg |
| 3499 | ····mode:·u-xs,g-xwrs,o-xwrt | 3499 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 3500 | ··when: | 3500 | ··when: |
| 3501 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3502 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 3501 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 3502 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 3503 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3503 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3504 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3504 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3505 | ··tags: | 3505 | ··tags: |
| 3506 | ··-·NIST-800-171-3.4.5 | 3506 | ··-·NIST-800-171-3.4.5 |
| 3507 | ··-·NIST-800-53-AC-6(1) | 3507 | ··-·NIST-800-53-AC-6(1) |
| 3508 | ··-·NIST-800-53-CM-6(a) | 3508 | ··-·NIST-800-53-CM-6(a) |
| 3509 | ··-·configure_strategy | 3509 | ··-·configure_strategy |
| Offset 3514, 16 lines modified | Offset 3514, 16 lines modified | ||
| 3514 | ··-·medium_severity | 3514 | ··-·medium_severity |
| 3515 | ··-·no_reboot_needed | 3515 | ··-·no_reboot_needed |
| 3516 | Remediation_Shell_script_⇲ | 3516 | Remediation_Shell_script_⇲ |
| 3517 | Complexity:·low | 3517 | Complexity:·low |
| 3518 | Disruption:·low | 3518 | Disruption:·low |
| 3519 | Strategy:···configure | 3519 | Strategy:···configure |
| 3520 | #·Remediation·is·applicable·only·in·certain·platforms | 3520 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3521 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2> | 3521 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ |
| 3522 | 3522 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 3523 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 3523 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 3524 | else | 3524 | else |
| 3525 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3525 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3526 | fi | 3526 | fi |
| 3527 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 3527 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 175019, 22 lines modified | Offset 175019, 22 lines modified | ||
| 002abaa0:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 002abaa0:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 002abab0:·6520·2f62·6f6f·742f·6772·7562·2f67·7275··e·/boot/grub/gru | 002abab0:·6520·2f62·6f6f·742f·6772·7562·2f67·7275··e·/boot/grub/gru | ||
| 002abac0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 002abac0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 002abad0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 002abad0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 002abae0:·7562·2f67·7275·622e·6366·670a·2020·7265··ub/grub.cfg.··re | 002abae0:·7562·2f67·7275·622e·6366·670a·2020·7265··ub/grub.cfg.··re | ||
| 002abaf0:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 002abaf0:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 002abb00:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 002abb00:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 002abb10:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 002abb20:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 002abb30:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | |||
| 002abb40:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 002abb50:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 002abb60:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 002abb | 002abb10:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | ||
| 002abb20:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002abb30:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002abb40:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002abb50:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | |||
| 002abb60:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | |||
| 002abb70:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 002abb80:·7 | 002abb80:·7327·0a20·202d·2061·6e73·6962·6c65·5f76··s'.··-·ansible_v | ||
| 002abb90:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 002abb90:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 002abba0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 002abba0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 002abbb0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 002abbb0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 002abbc0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 002abbc0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 002abbd0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 002abbd0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 002abbe0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 002abbe0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 002abbf0:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | 002abbf0:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | ||
| Offset 175054, 22 lines modified | Offset 175054, 22 lines modified | ||
| 002abcd0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | 002abcd0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 002abce0:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 002abce0:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 002abcf0:·2f67·7275·622f·6772·7562·2e63·6667·0a20··/grub/grub.cfg.· | 002abcf0:·2f67·7275·622f·6772·7562·2e63·6667·0a20··/grub/grub.cfg.· | ||
| 002abd00:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | 002abd00:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | ||
| 002abd10:·202f·626f·6f74·2f67·7275·622f·6772·7562···/boot/grub/grub | 002abd10:·202f·626f·6f74·2f67·7275·622f·6772·7562···/boot/grub/grub | ||
| 002abd20:·2e63·6667·0a20·2020·206f·776e·6572·3a20··.cfg.····owner:· | 002abd20:·2e63·6667·0a20·2020·206f·776e·6572·3a20··.cfg.····owner:· | ||
| 002abd30:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | 002abd30:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | ||
| 002abd40:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 002abd50:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 002abd60:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | |||
| 002abd70:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 002abd80:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 002abd90:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 002abd | 002abd40:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | ||
| 002abd50:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002abd60:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002abd70:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002abd80:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | |||
| 002abd90:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | |||
| 002abda0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 002abdb0:·7 | 002abdb0:·7327·0a20·202d·2061·6e73·6962·6c65·5f76··s'.··-·ansible_v | ||
| 002abdc0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 002abdc0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 002abdd0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 002abdd0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 002abde0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 002abde0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 002abdf0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 002abdf0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 002abe00:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | 002abe00:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | ||
| 002abe10:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | 002abe10:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | ||
| 002abe20:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | 002abe20:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | ||
| Offset 175119, 24 lines modified | Offset 175119, 24 lines modified | ||
| 002ac0e0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | 002ac0e0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 002ac0f0:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | 002ac0f0:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | ||
| 002ac100:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | 002ac100:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 002ac110:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | 002ac110:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 002ac120:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | 002ac120:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 002ac130:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | 002ac130:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 002ac140:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | 002ac140:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 002ac150:·6966·205b·2021·202d·6620·2f73·7973·2f66··if·[·!·-f·/sys/f | |||
| 002ac150:·6966·2064·706b·672d·7175·6572·7920·2d2d··if·dpkg-query·-- | |||
| 002ac160:·7368·6f77·202d·2d73·686f·7766·6f72·6d61··show·--showforma | |||
| 002ac170:·743d·2724·7b64·623a·5374·6174·7573·2d53··t='${db:Status-S | |||
| 002ac180:·7461·7475·737d·5c6e·2720·2767·7275·6232··tatus}\n'·'grub2 | |||
| 002ac190:·2d63·6f6d·6d6f·6e27·2032·2667·743b·2f64··-common'·2>/d | |||
| 002ac1a0:·6576·2f6e·756c·6c20·7c20·6772·6570·202d··ev/null·|·grep·- | |||
| 002ac1b0:·7120·696e·7374·616c·6c65·6420·2661·6d70··q·installed·& | |||
| 002ac1c0:·3b26·616d·703b·205b·2021·202d·6620·2f73··;&·[·!·-f·/s | |||
| 002ac1 | 002ac160:·6972·6d77·6172·652f·6566·6920·5d20·2661··irmware/efi·]·&a | ||
| 002ac170:·6d70·3b26·616d·703b·2064·706b·672d·7175··mp;&·dpkg-qu | |||
| 002ac180:·6572·7920·2d2d·7368·6f77·202d·2d73·686f··ery·--show·--sho | |||
| 002ac190:·7766·6f72·6d61·743d·2724·7b64·623a·5374··wformat='${db:St | |||
| 002ac1a0:·6174·7573·2d53·7461·7475·737d·5c6e·2720··atus-Status}\n'· | |||
| 002ac1b0:·2767·7275·6232·2d63·6f6d·6d6f·6e27·2032··'grub2-common'·2 | |||
| 002ac1c0:·2667·743b·2f64·6576·2f6e·756c·6c20·7c20··>/dev/null·|· | |||
| 002ac1d0:·6772·6570·202d·7120·696e·7374·616c·6c65··grep·-q·installe | |||
| 002ac1e0:· | 002ac1e0:·6420·2661·6d70·3b26·616d·703b·207b·205b··d·&&·{·[ | ||
| 002ac1f0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | 002ac1f0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 002ac200:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | 002ac200:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 002ac210:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | 002ac210:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 002ac220:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | 002ac220:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 002ac230:·6865·6e0a·0a63·686f·776e·2030·202f·626f··hen..chown·0·/bo | 002ac230:·6865·6e0a·0a63·686f·776e·2030·202f·626f··hen..chown·0·/bo | ||
| 002ac240:·6f74·2f67·7275·622f·6772·7562·2e63·6667··ot/grub/grub.cfg | 002ac240:·6f74·2f67·7275·622f·6772·7562·2e63·6667··ot/grub/grub.cfg | ||
| 002ac250:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | 002ac250:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| Offset 175587, 22 lines modified | Offset 175587, 22 lines modified | ||
| 002ade20:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | 002ade20:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | ||
| 002ade30:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | 002ade30:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | ||
| 002ade40:·2f67·7275·622e·6366·670a·2020·7374·6174··/grub.cfg.··stat | 002ade40:·2f67·7275·622e·6366·670a·2020·7374·6174··/grub.cfg.··stat | ||
| 002ade50:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 002ade50:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 002ade60:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | 002ade60:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | ||
| 002ade70:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 002ade70:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 002ade80:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 002ade80:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 002ade90:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 002adea0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002adeb0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 002adec0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002aded0:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 002adee0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002ade | 002ade90:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | ||
| 002adea0:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002adeb0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002adec0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002aded0:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 002adee0:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | |||
| 002adef0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 002adf00:· | 002adf00:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | ||
| 002adf10:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 002adf10:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 002adf20:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 002adf20:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 002adf30:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 002adf30:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 002adf40:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 002adf40:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 002adf50:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 002adf50:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 002adf60:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | 002adf60:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | ||
| 002adf70:·542d·3830·302d·3137·312d·332e·342e·350a··T-800-171-3.4.5. | 002adf70:·542d·3830·302d·3137·312d·332e·342e·350a··T-800-171-3.4.5. | ||
| Offset 175622, 22 lines modified | Offset 175622, 22 lines modified | ||
| 002ae050:·752d·7873·2c67·2d78·7772·732c·6f2d·7877··u-xs,g-xwrs,o-xw | 002ae050:·752d·7873·2c67·2d78·7772·732c·6f2d·7877··u-xs,g-xwrs,o-xw | ||
| 002ae060:·7274·206f·6e20·2f62·6f6f·742f·6772·7562··rt·on·/boot/grub | 002ae060:·7274·206f·6e20·2f62·6f6f·742f·6772·7562··rt·on·/boot/grub | ||
| 002ae070:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | 002ae070:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | ||
| 002ae080:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 002ae080:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 002ae090:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | 002ae090:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | ||
| 002ae0a0:·2020·2020·6d6f·6465·3a20·752d·7873·2c67······mode:·u-xs,g | 002ae0a0:·2020·2020·6d6f·6465·3a20·752d·7873·2c67······mode:·u-xs,g | ||
| 002ae0b0:·2d78·7772·732c·6f2d·7877·7274·0a20·2077··-xwrs,o-xwrt.··w | 002ae0b0:·2d78·7772·732c·6f2d·7877·7274·0a20·2077··-xwrs,o-xwrt.··w | ||
| Max diff block lines reached; 2788/13140 bytes (21.22%) of diff not shown. | |||
| Offset 39172, 16 lines modified | Offset 39172, 16 lines modified | ||
| 39172 | ··-·no_reboot_needed | 39172 | ··-·no_reboot_needed |
| 39173 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 39173 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 39174 | ··stat: | 39174 | ··stat: |
| 39175 | ····path:·/boot/grub/grub.cfg | 39175 | ····path:·/boot/grub/grub.cfg |
| 39176 | ··register:·file_exists | 39176 | ··register:·file_exists |
| 39177 | ··when: | 39177 | ··when: |
| 39178 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39179 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39178 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39179 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39180 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39180 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39181 | ··tags: | 39181 | ··tags: |
| 39182 | ··-·CJIS-5.5.2.2 | 39182 | ··-·CJIS-5.5.2.2 |
| 39183 | ··-·NIST-800-171-3.4.5 | 39183 | ··-·NIST-800-171-3.4.5 |
| 39184 | ··-·NIST-800-53-AC-6(1) | 39184 | ··-·NIST-800-53-AC-6(1) |
| 39185 | ··-·NIST-800-53-CM-6(a) | 39185 | ··-·NIST-800-53-CM-6(a) |
| 39186 | ··-·PCI-DSS-Req-7.1 | 39186 | ··-·PCI-DSS-Req-7.1 |
| Offset 39193, 16 lines modified | Offset 39193, 16 lines modified | ||
| 39193 | ··-·no_reboot_needed | 39193 | ··-·no_reboot_needed |
| 39194 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 39194 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 39195 | ··file: | 39195 | ··file: |
| 39196 | ····path:·/boot/grub/grub.cfg | 39196 | ····path:·/boot/grub/grub.cfg |
| 39197 | ····owner:·'0' | 39197 | ····owner:·'0' |
| 39198 | ··when: | 39198 | ··when: |
| 39199 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39200 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39199 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39200 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39201 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39201 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39202 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 39202 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 39203 | ··tags: | 39203 | ··tags: |
| 39204 | ··-·CJIS-5.5.2.2 | 39204 | ··-·CJIS-5.5.2.2 |
| 39205 | ··-·NIST-800-171-3.4.5 | 39205 | ··-·NIST-800-171-3.4.5 |
| 39206 | ··-·NIST-800-53-AC-6(1) | 39206 | ··-·NIST-800-53-AC-6(1) |
| 39207 | ··-·NIST-800-53-CM-6(a) | 39207 | ··-·NIST-800-53-CM-6(a) |
| Offset 39214, 16 lines modified | Offset 39214, 16 lines modified | ||
| 39214 | ··-·medium_severity | 39214 | ··-·medium_severity |
| 39215 | ··-·no_reboot_needed | 39215 | ··-·no_reboot_needed |
| 39216 | Remediation_Shell_script_⇲ | 39216 | Remediation_Shell_script_⇲ |
| 39217 | Complexity:·low | 39217 | Complexity:·low |
| 39218 | Disruption:·low | 39218 | Disruption:·low |
| 39219 | Strategy:···configure | 39219 | Strategy:···configure |
| 39220 | #·Remediation·is·applicable·only·in·certain·platforms | 39220 | #·Remediation·is·applicable·only·in·certain·platforms |
| 39221 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ | 39221 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ |
| 39222 | 39222 | null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 39223 | chown·0·/boot/grub/grub.cfg | 39223 | chown·0·/boot/grub/grub.cfg |
| 39224 | else | 39224 | else |
| 39225 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 39225 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 39226 | fi | 39226 | fi |
| 39227 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** | 39227 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** |
| Offset 39259, 16 lines modified | Offset 39259, 16 lines modified | ||
| 39259 | ··-·no_reboot_needed | 39259 | ··-·no_reboot_needed |
| 39260 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 39260 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 39261 | ··stat: | 39261 | ··stat: |
| 39262 | ····path:·/boot/grub/grub.cfg | 39262 | ····path:·/boot/grub/grub.cfg |
| 39263 | ··register:·file_exists | 39263 | ··register:·file_exists |
| 39264 | ··when: | 39264 | ··when: |
| 39265 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39266 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39265 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39266 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39267 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39267 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39268 | ··tags: | 39268 | ··tags: |
| 39269 | ··-·NIST-800-171-3.4.5 | 39269 | ··-·NIST-800-171-3.4.5 |
| 39270 | ··-·NIST-800-53-AC-6(1) | 39270 | ··-·NIST-800-53-AC-6(1) |
| 39271 | ··-·NIST-800-53-CM-6(a) | 39271 | ··-·NIST-800-53-CM-6(a) |
| 39272 | ··-·configure_strategy | 39272 | ··-·configure_strategy |
| 39273 | ··-·file_permissions_grub2_cfg | 39273 | ··-·file_permissions_grub2_cfg |
| Offset 39278, 16 lines modified | Offset 39278, 16 lines modified | ||
| 39278 | ··-·no_reboot_needed | 39278 | ··-·no_reboot_needed |
| 39279 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 39279 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 39280 | ··file: | 39280 | ··file: |
| 39281 | ····path:·/boot/grub/grub.cfg | 39281 | ····path:·/boot/grub/grub.cfg |
| 39282 | ····mode:·u-xs,g-xwrs,o-xwrt | 39282 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 39283 | ··when: | 39283 | ··when: |
| 39284 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39285 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39284 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39285 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39286 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39286 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39287 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 39287 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 39288 | ··tags: | 39288 | ··tags: |
| 39289 | ··-·NIST-800-171-3.4.5 | 39289 | ··-·NIST-800-171-3.4.5 |
| 39290 | ··-·NIST-800-53-AC-6(1) | 39290 | ··-·NIST-800-53-AC-6(1) |
| 39291 | ··-·NIST-800-53-CM-6(a) | 39291 | ··-·NIST-800-53-CM-6(a) |
| 39292 | ··-·configure_strategy | 39292 | ··-·configure_strategy |
| Offset 39297, 16 lines modified | Offset 39297, 16 lines modified | ||
| 39297 | ··-·medium_severity | 39297 | ··-·medium_severity |
| 39298 | ··-·no_reboot_needed | 39298 | ··-·no_reboot_needed |
| 39299 | Remediation_Shell_script_⇲ | 39299 | Remediation_Shell_script_⇲ |
| 39300 | Complexity:·low | 39300 | Complexity:·low |
| 39301 | Disruption:·low | 39301 | Disruption:·low |
| 39302 | Strategy:···configure | 39302 | Strategy:···configure |
| 39303 | #·Remediation·is·applicable·only·in·certain·platforms | 39303 | #·Remediation·is·applicable·only·in·certain·platforms |
| 39304 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2> | 39304 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ |
| 39305 | 39305 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 39306 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 39306 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 39307 | else | 39307 | else |
| 39308 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 39308 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 39309 | fi | 39309 | fi |
| 39310 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 39310 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 176573, 22 lines modified | Offset 176573, 22 lines modified | ||
| 002b1bc0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | 002b1bc0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | ||
| 002b1bd0:·6365·202f·626f·6f74·2f67·7275·622f·6772··ce·/boot/grub/gr | 002b1bd0:·6365·202f·626f·6f74·2f67·7275·622f·6772··ce·/boot/grub/gr | ||
| 002b1be0:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | 002b1be0:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | ||
| 002b1bf0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 002b1bf0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 002b1c00:·7275·622f·6772·7562·2e63·6667·0a20·2072··rub/grub.cfg.··r | 002b1c00:·7275·622f·6772·7562·2e63·6667·0a20·2072··rub/grub.cfg.··r | ||
| 002b1c10:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 002b1c10:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 002b1c20:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 002b1c20:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 002b1c30:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002b1c40:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002b1c50:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002b1c30:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 002b1c40:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002b1c50:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002b1c60:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002b1c70:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002b1c80:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002b1c | 002b1c60:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | ||
| 002b1c70:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002b1c80:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002b1c90:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 002b1ca0:· | 002b1ca0:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | ||
| 002b1cb0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002b1cb0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002b1cc0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002b1cc0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002b1cd0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002b1cd0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002b1ce0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002b1ce0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002b1cf0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002b1cf0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002b1d00:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | 002b1d00:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 002b1d10:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | 002b1d10:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | ||
| Offset 176608, 22 lines modified | Offset 176608, 22 lines modified | ||
| 002b1df0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | 002b1df0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 002b1e00:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | 002b1e00:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | ||
| 002b1e10:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | 002b1e10:·742f·6772·7562·2f67·7275·622e·6366·670a··t/grub/grub.cfg. | ||
| 002b1e20:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | 002b1e20:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | ||
| 002b1e30:·3a20·2f62·6f6f·742f·6772·7562·2f67·7275··:·/boot/grub/gru | 002b1e30:·3a20·2f62·6f6f·742f·6772·7562·2f67·7275··:·/boot/grub/gru | ||
| 002b1e40:·622e·6366·670a·2020·2020·6f77·6e65·723a··b.cfg.····owner: | 002b1e40:·622e·6366·670a·2020·2020·6f77·6e65·723a··b.cfg.····owner: | ||
| 002b1e50:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | 002b1e50:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | ||
| 002b1e60:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002b1e70:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002b1e80:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002b1e60:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 002b1e70:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002b1e80:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002b1e90:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002b1ea0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002b1eb0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002b1e | 002b1e90:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | ||
| 002b1ea0:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002b1eb0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002b1ec0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 002b1ed0:· | 002b1ed0:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | ||
| 002b1ee0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002b1ee0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002b1ef0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002b1ef0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002b1f00:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002b1f00:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002b1f10:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002b1f10:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002b1f20:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002b1f20:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002b1f30:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | 002b1f30:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | ||
| 002b1f40:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | 002b1f40:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | ||
| Offset 176673, 24 lines modified | Offset 176673, 24 lines modified | ||
| 002b2200:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | 002b2200:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 002b2210:·3e3c·7464·3e63·6f6e·6669·6775·7265·3c2f··><td>configure</ | 002b2210:·3e3c·7464·3e63·6f6e·6669·6775·7265·3c2f··><td>configure</ | ||
| 002b2220:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | 002b2220:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 002b2230:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 002b2230:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 002b2240:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 002b2240:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 002b2250:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 002b2250:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 002b2260:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 002b2260:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 002b2270:·0a69·6620·5b20·2120·2d66·202f·7379·732f··.if·[·!·-f·/sys/ | |||
| 002b2270:·0a69·6620·6470·6b67·2d71·7565·7279·202d··.if·dpkg-query·- | |||
| 002b2280:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | |||
| 002b2290:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | |||
| 002b22a0:·5374·6174·7573·7d5c·6e27·2027·6772·7562··Status}\n'·'grub | |||
| 002b22b0:·322d·636f·6d6d·6f6e·2720·3226·6774·3b2f··2-common'·2>/ | |||
| 002b22c0:·6465·762f·6e75·6c6c·207c·2067·7265·7020··dev/null·|·grep· | |||
| 002b22d0:·2d71·2069·6e73·7461·6c6c·6564·2026·616d··-q·installed·&am | |||
| 002b22e0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 002b22 | 002b2280:·6669·726d·7761·7265·2f65·6669·205d·2026··firmware/efi·]·& | ||
| 002b2290:·616d·703b·2661·6d70·3b20·6470·6b67·2d71··amp;&·dpkg-q | |||
| 002b22a0:·7565·7279·202d·2d73·686f·7720·2d2d·7368··uery·--show·--sh | |||
| 002b22b0:·6f77·666f·726d·6174·3d27·247b·6462·3a53··owformat='${db:S | |||
| 002b22c0:·7461·7475·732d·5374·6174·7573·7d5c·6e27··tatus-Status}\n' | |||
| 002b22d0:·2027·6772·7562·322d·636f·6d6d·6f6e·2720···'grub2-common'· | |||
| 002b22e0:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | |||
| 002b22f0:·2067·7265·7020·2d71·2069·6e73·7461·6c6c···grep·-q·install | |||
| 002b2300:· | 002b2300:·6564·2026·616d·703b·2661·6d70·3b20·7b20··ed·&&·{· | ||
| 002b2310:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | 002b2310:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 002b2320:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | 002b2320:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 002b2330:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | 002b2330:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 002b2340:·7461·696e·6572·656e·7620·5d3b·207d·3b20··tainerenv·];·};· | 002b2340:·7461·696e·6572·656e·7620·5d3b·207d·3b20··tainerenv·];·};· | ||
| 002b2350:·7468·656e·0a0a·6368·6f77·6e20·3020·2f62··then..chown·0·/b | 002b2350:·7468·656e·0a0a·6368·6f77·6e20·3020·2f62··then..chown·0·/b | ||
| 002b2360:·6f6f·742f·6772·7562·2f67·7275·622e·6366··oot/grub/grub.cf | 002b2360:·6f6f·742f·6772·7562·2f67·7275·622e·6366··oot/grub/grub.cf | ||
| 002b2370:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | 002b2370:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | ||
| Offset 177141, 22 lines modified | Offset 177141, 22 lines modified | ||
| 002b3f40:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | 002b3f40:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | ||
| 002b3f50:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | 002b3f50:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | ||
| 002b3f60:·622f·6772·7562·2e63·6667·0a20·2073·7461··b/grub.cfg.··sta | 002b3f60:·622f·6772·7562·2e63·6667·0a20·2073·7461··b/grub.cfg.··sta | ||
| 002b3f70:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 002b3f70:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 002b3f80:·6f74·2f67·7275·622f·6772·7562·2e63·6667··ot/grub/grub.cfg | 002b3f80:·6f74·2f67·7275·622f·6772·7562·2e63·6667··ot/grub/grub.cfg | ||
| 002b3f90:·0a20·2072·6567·6973·7465·723a·2066·696c··.··register:·fil | 002b3f90:·0a20·2072·6567·6973·7465·723a·2066·696c··.··register:·fil | ||
| 002b3fa0:·655f·6578·6973·7473·0a20·2077·6865·6e3a··e_exists.··when: | 002b3fa0:·655f·6578·6973·7473·0a20·2077·6865·6e3a··e_exists.··when: | ||
| 002b3fb0:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | |||
| 002b3fc0:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 002b3fd0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 002b3fe0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 002b3ff0:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002b4000:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002b | 002b3fb0:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | ||
| 002b3fc0:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 002b3fd0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 002b3fe0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 002b3ff0:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 002b4000:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | |||
| 002b4010:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 002b4020:· | 002b4020:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | ||
| 002b4030:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 002b4030:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 002b4040:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 002b4040:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 002b4050:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 002b4050:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 002b4060:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 002b4060:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 002b4070:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 002b4070:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 002b4080:·5d0a·2020·7461·6773·3a0a·2020·2d20·4e49··].··tags:.··-·NI | 002b4080:·5d0a·2020·7461·6773·3a0a·2020·2d20·4e49··].··tags:.··-·NI | ||
| 002b4090:·5354·2d38·3030·2d31·3731·2d33·2e34·2e35··ST-800-171-3.4.5 | 002b4090:·5354·2d38·3030·2d31·3731·2d33·2e34·2e35··ST-800-171-3.4.5 | ||
| Offset 177176, 22 lines modified | Offset 177176, 22 lines modified | ||
| 002b4170:·2075·2d78·732c·672d·7877·7273·2c6f·2d78···u-xs,g-xwrs,o-x | 002b4170:·2075·2d78·732c·672d·7877·7273·2c6f·2d78···u-xs,g-xwrs,o-x | ||
| 002b4180:·7772·7420·6f6e·202f·626f·6f74·2f67·7275··wrt·on·/boot/gru | 002b4180:·7772·7420·6f6e·202f·626f·6f74·2f67·7275··wrt·on·/boot/gru | ||
| 002b4190:·622f·6772·7562·2e63·6667·0a20·2066·696c··b/grub.cfg.··fil | 002b4190:·622f·6772·7562·2e63·6667·0a20·2066·696c··b/grub.cfg.··fil | ||
| 002b41a0:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | 002b41a0:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | ||
| 002b41b0:·6f74·2f67·7275·622f·6772·7562·2e63·6667··ot/grub/grub.cfg | 002b41b0:·6f74·2f67·7275·622f·6772·7562·2e63·6667··ot/grub/grub.cfg | ||
| 002b41c0:·0a20·2020·206d·6f64·653a·2075·2d78·732c··.····mode:·u-xs, | 002b41c0:·0a20·2020·206d·6f64·653a·2075·2d78·732c··.····mode:·u-xs, | ||
| 002b41d0:·672d·7877·7273·2c6f·2d78·7772·740a·2020··g-xwrs,o-xwrt.·· | 002b41d0:·672d·7877·7273·2c6f·2d78·7772·740a·2020··g-xwrs,o-xwrt.·· | ||
| Max diff block lines reached; 2788/13140 bytes (21.22%) of diff not shown. | |||
| Offset 39409, 16 lines modified | Offset 39409, 16 lines modified | ||
| 39409 | ··-·no_reboot_needed | 39409 | ··-·no_reboot_needed |
| 39410 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 39410 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 39411 | ··stat: | 39411 | ··stat: |
| 39412 | ····path:·/boot/grub/grub.cfg | 39412 | ····path:·/boot/grub/grub.cfg |
| 39413 | ··register:·file_exists | 39413 | ··register:·file_exists |
| 39414 | ··when: | 39414 | ··when: |
| 39415 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39416 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39415 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39416 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39417 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39417 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39418 | ··tags: | 39418 | ··tags: |
| 39419 | ··-·CJIS-5.5.2.2 | 39419 | ··-·CJIS-5.5.2.2 |
| 39420 | ··-·NIST-800-171-3.4.5 | 39420 | ··-·NIST-800-171-3.4.5 |
| 39421 | ··-·NIST-800-53-AC-6(1) | 39421 | ··-·NIST-800-53-AC-6(1) |
| 39422 | ··-·NIST-800-53-CM-6(a) | 39422 | ··-·NIST-800-53-CM-6(a) |
| 39423 | ··-·PCI-DSS-Req-7.1 | 39423 | ··-·PCI-DSS-Req-7.1 |
| Offset 39430, 16 lines modified | Offset 39430, 16 lines modified | ||
| 39430 | ··-·no_reboot_needed | 39430 | ··-·no_reboot_needed |
| 39431 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 39431 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 39432 | ··file: | 39432 | ··file: |
| 39433 | ····path:·/boot/grub/grub.cfg | 39433 | ····path:·/boot/grub/grub.cfg |
| 39434 | ····owner:·'0' | 39434 | ····owner:·'0' |
| 39435 | ··when: | 39435 | ··when: |
| 39436 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39437 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39436 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39437 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39438 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39438 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39439 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 39439 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 39440 | ··tags: | 39440 | ··tags: |
| 39441 | ··-·CJIS-5.5.2.2 | 39441 | ··-·CJIS-5.5.2.2 |
| 39442 | ··-·NIST-800-171-3.4.5 | 39442 | ··-·NIST-800-171-3.4.5 |
| 39443 | ··-·NIST-800-53-AC-6(1) | 39443 | ··-·NIST-800-53-AC-6(1) |
| 39444 | ··-·NIST-800-53-CM-6(a) | 39444 | ··-·NIST-800-53-CM-6(a) |
| Offset 39451, 16 lines modified | Offset 39451, 16 lines modified | ||
| 39451 | ··-·medium_severity | 39451 | ··-·medium_severity |
| 39452 | ··-·no_reboot_needed | 39452 | ··-·no_reboot_needed |
| 39453 | Remediation_Shell_script_⇲ | 39453 | Remediation_Shell_script_⇲ |
| 39454 | Complexity:·low | 39454 | Complexity:·low |
| 39455 | Disruption:·low | 39455 | Disruption:·low |
| 39456 | Strategy:···configure | 39456 | Strategy:···configure |
| 39457 | #·Remediation·is·applicable·only·in·certain·platforms | 39457 | #·Remediation·is·applicable·only·in·certain·platforms |
| 39458 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ | 39458 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/ |
| 39459 | 39459 | null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 39460 | chown·0·/boot/grub/grub.cfg | 39460 | chown·0·/boot/grub/grub.cfg |
| 39461 | else | 39461 | else |
| 39462 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 39462 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 39463 | fi | 39463 | fi |
| 39464 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** | 39464 | ***·Rule ·Verify·/boot/grub/grub.cfg·Permissions· [ref]·*** |
| Offset 39496, 16 lines modified | Offset 39496, 16 lines modified | ||
| 39496 | ··-·no_reboot_needed | 39496 | ··-·no_reboot_needed |
| 39497 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 39497 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 39498 | ··stat: | 39498 | ··stat: |
| 39499 | ····path:·/boot/grub/grub.cfg | 39499 | ····path:·/boot/grub/grub.cfg |
| 39500 | ··register:·file_exists | 39500 | ··register:·file_exists |
| 39501 | ··when: | 39501 | ··when: |
| 39502 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39503 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39502 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39503 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39504 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39504 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39505 | ··tags: | 39505 | ··tags: |
| 39506 | ··-·NIST-800-171-3.4.5 | 39506 | ··-·NIST-800-171-3.4.5 |
| 39507 | ··-·NIST-800-53-AC-6(1) | 39507 | ··-·NIST-800-53-AC-6(1) |
| 39508 | ··-·NIST-800-53-CM-6(a) | 39508 | ··-·NIST-800-53-CM-6(a) |
| 39509 | ··-·configure_strategy | 39509 | ··-·configure_strategy |
| 39510 | ··-·file_permissions_grub2_cfg | 39510 | ··-·file_permissions_grub2_cfg |
| Offset 39515, 16 lines modified | Offset 39515, 16 lines modified | ||
| 39515 | ··-·no_reboot_needed | 39515 | ··-·no_reboot_needed |
| 39516 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 39516 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 39517 | ··file: | 39517 | ··file: |
| 39518 | ····path:·/boot/grub/grub.cfg | 39518 | ····path:·/boot/grub/grub.cfg |
| 39519 | ····mode:·u-xs,g-xwrs,o-xwrt | 39519 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 39520 | ··when: | 39520 | ··when: |
| 39521 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39522 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39521 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39522 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39523 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39523 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39524 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 39524 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 39525 | ··tags: | 39525 | ··tags: |
| 39526 | ··-·NIST-800-171-3.4.5 | 39526 | ··-·NIST-800-171-3.4.5 |
| 39527 | ··-·NIST-800-53-AC-6(1) | 39527 | ··-·NIST-800-53-AC-6(1) |
| 39528 | ··-·NIST-800-53-CM-6(a) | 39528 | ··-·NIST-800-53-CM-6(a) |
| 39529 | ··-·configure_strategy | 39529 | ··-·configure_strategy |
| Offset 39534, 16 lines modified | Offset 39534, 16 lines modified | ||
| 39534 | ··-·medium_severity | 39534 | ··-·medium_severity |
| 39535 | ··-·no_reboot_needed | 39535 | ··-·no_reboot_needed |
| 39536 | Remediation_Shell_script_⇲ | 39536 | Remediation_Shell_script_⇲ |
| 39537 | Complexity:·low | 39537 | Complexity:·low |
| 39538 | Disruption:·low | 39538 | Disruption:·low |
| 39539 | Strategy:···configure | 39539 | Strategy:···configure |
| 39540 | #·Remediation·is·applicable·only·in·certain·platforms | 39540 | #·Remediation·is·applicable·only·in·certain·platforms |
| 39541 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2> | 39541 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/ |
| 39542 | 39542 | dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | |
| 39543 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 39543 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 39544 | else | 39544 | else |
| 39545 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 39545 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 39546 | fi | 39546 | fi |
| 39547 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 39547 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 138, 16 lines modified | Offset 138, 16 lines modified | ||
| 138 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 138 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 139 | ······find: | 139 | ······find: |
| 140 | ········paths:·/etc/audit/rules.d | 140 | ········paths:·/etc/audit/rules.d |
| 141 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 141 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 142 | ········patterns:·'*.rules' | 142 | ········patterns:·'*.rules' |
| 143 | ······register:·find_existing_watch_rules_d | 143 | ······register:·find_existing_watch_rules_d |
| 144 | ······when: | 144 | ······when: |
| 145 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 146 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 145 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 146 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 147 | ······tags: | 147 | ······tags: |
| 148 | ······-·CJIS-5.4.1.1 | 148 | ······-·CJIS-5.4.1.1 |
| 149 | ······-·NIST-800-171-3.1.7 | 149 | ······-·NIST-800-171-3.1.7 |
| 150 | ······-·NIST-800-53-AC-2(7)(b) | 150 | ······-·NIST-800-53-AC-2(7)(b) |
| 151 | ······-·NIST-800-53-AC-6(9) | 151 | ······-·NIST-800-53-AC-6(9) |
| 152 | ······-·NIST-800-53-AU-12(c) | 152 | ······-·NIST-800-53-AU-12(c) |
| 153 | ······-·NIST-800-53-AU-2(d) | 153 | ······-·NIST-800-53-AU-2(d) |
| Offset 164, 16 lines modified | Offset 164, 16 lines modified | ||
| 164 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 164 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 165 | ······find: | 165 | ······find: |
| 166 | ········paths:·/etc/audit/rules.d | 166 | ········paths:·/etc/audit/rules.d |
| 167 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ | 167 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 168 | ········patterns:·'*.rules' | 168 | ········patterns:·'*.rules' |
| 169 | ······register:·find_watch_key | 169 | ······register:·find_watch_key |
| 170 | ······when: | 170 | ······when: |
| 171 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 172 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 172 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 173 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 173 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 174 | ········==·0 | 174 | ········==·0 |
| 175 | ······tags: | 175 | ······tags: |
| 176 | ······-·CJIS-5.4.1.1 | 176 | ······-·CJIS-5.4.1.1 |
| 177 | ······-·NIST-800-171-3.1.7 | 177 | ······-·NIST-800-171-3.1.7 |
| 178 | ······-·NIST-800-53-AC-2(7)(b) | 178 | ······-·NIST-800-53-AC-2(7)(b) |
| 179 | ······-·NIST-800-53-AC-6(9) | 179 | ······-·NIST-800-53-AC-6(9) |
| Offset 190, 16 lines modified | Offset 190, 16 lines modified | ||
| 190 | ······-·restrict_strategy | 190 | ······-·restrict_strategy |
| 191 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 191 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 192 | ······set_fact: | 192 | ······set_fact: |
| 193 | ········all_files: | 193 | ········all_files: |
| 194 | ········-·/etc/audit/rules.d/actions.rules | 194 | ········-·/etc/audit/rules.d/actions.rules |
| 195 | ······when: | 195 | ······when: |
| 196 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 197 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 196 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 197 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 198 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 198 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 199 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 199 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 200 | ······tags: | 200 | ······tags: |
| 201 | ······-·CJIS-5.4.1.1 | 201 | ······-·CJIS-5.4.1.1 |
| 202 | ······-·NIST-800-171-3.1.7 | 202 | ······-·NIST-800-171-3.1.7 |
| 203 | ······-·NIST-800-53-AC-2(7)(b) | 203 | ······-·NIST-800-53-AC-2(7)(b) |
| 204 | ······-·NIST-800-53-AC-6(9) | 204 | ······-·NIST-800-53-AC-6(9) |
| Offset 216, 16 lines modified | Offset 216, 16 lines modified | ||
| 216 | ······-·restrict_strategy | 216 | ······-·restrict_strategy |
| 217 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 217 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 218 | ······set_fact: | 218 | ······set_fact: |
| 219 | ········all_files: | 219 | ········all_files: |
| 220 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 220 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 221 | ······when: | 221 | ······when: |
| 222 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 223 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 222 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 223 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 224 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 224 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 225 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 225 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 226 | ······tags: | 226 | ······tags: |
| 227 | ······-·CJIS-5.4.1.1 | 227 | ······-·CJIS-5.4.1.1 |
| 228 | ······-·NIST-800-171-3.1.7 | 228 | ······-·NIST-800-171-3.1.7 |
| 229 | ······-·NIST-800-53-AC-2(7)(b) | 229 | ······-·NIST-800-53-AC-2(7)(b) |
| 230 | ······-·NIST-800-53-AC-6(9) | 230 | ······-·NIST-800-53-AC-6(9) |
| Offset 244, 16 lines modified | Offset 244, 16 lines modified | ||
| 244 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 244 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| 245 | ······lineinfile: | 245 | ······lineinfile: |
| 246 | ········path:·'{{·all_files[0]·}}' | 246 | ········path:·'{{·all_files[0]·}}' |
| 247 | ········line:·-w·/etc/sudoers·-p·wa·-k·actions | 247 | ········line:·-w·/etc/sudoers·-p·wa·-k·actions |
| 248 | ········create:·true | 248 | ········create:·true |
| 249 | ········mode:·'0640' | 249 | ········mode:·'0640' |
| 250 | ······when: | 250 | ······when: |
| 251 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 252 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 251 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 252 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 253 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 253 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 254 | ········==·0 | 254 | ········==·0 |
| 255 | ······tags: | 255 | ······tags: |
| 256 | ······-·CJIS-5.4.1.1 | 256 | ······-·CJIS-5.4.1.1 |
| 257 | ······-·NIST-800-171-3.1.7 | 257 | ······-·NIST-800-171-3.1.7 |
| 258 | ······-·NIST-800-53-AC-2(7)(b) | 258 | ······-·NIST-800-53-AC-2(7)(b) |
| 259 | ······-·NIST-800-53-AC-6(9) | 259 | ······-·NIST-800-53-AC-6(9) |
| Offset 272, 16 lines modified | Offset 272, 16 lines modified | ||
| 272 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/audit.rules | 272 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/audit.rules |
| 273 | ······find: | 273 | ······find: |
| 274 | ········paths:·/etc/audit/ | 274 | ········paths:·/etc/audit/ |
| 275 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 275 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 276 | ········patterns:·audit.rules | 276 | ········patterns:·audit.rules |
| 277 | ······register:·find_existing_watch_audit_rules | 277 | ······register:·find_existing_watch_audit_rules |
| 278 | ······when: | 278 | ······when: |
| 279 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 280 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 279 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 280 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 281 | ······tags: | 281 | ······tags: |
| 282 | ······-·CJIS-5.4.1.1 | 282 | ······-·CJIS-5.4.1.1 |
| 283 | ······-·NIST-800-171-3.1.7 | 283 | ······-·NIST-800-171-3.1.7 |
| 284 | ······-·NIST-800-53-AC-2(7)(b) | 284 | ······-·NIST-800-53-AC-2(7)(b) |
| 285 | ······-·NIST-800-53-AC-6(9) | 285 | ······-·NIST-800-53-AC-6(9) |
| 286 | ······-·NIST-800-53-AU-12(c) | 286 | ······-·NIST-800-53-AU-12(c) |
| 287 | ······-·NIST-800-53-AU-2(d) | 287 | ······-·NIST-800-53-AU-2(d) |
| Offset 299, 16 lines modified | Offset 299, 16 lines modified | ||
| 299 | ······lineinfile: | 299 | ······lineinfile: |
| 300 | ········line:·-w·/etc/sudoers·-p·wa·-k·actions | 300 | ········line:·-w·/etc/sudoers·-p·wa·-k·actions |
| 301 | ········state:·present | 301 | ········state:·present |
| 302 | ········dest:·/etc/audit/audit.rules | 302 | ········dest:·/etc/audit/audit.rules |
| 303 | ········create:·true | 303 | ········create:·true |
| 304 | ········mode:·'0640' | 304 | ········mode:·'0640' |
| 305 | ······when: | 305 | ······when: |
| 306 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 307 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 306 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 307 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 308 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched | 308 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched |
| 309 | ········==·0 | 309 | ········==·0 |
| 310 | ······tags: | 310 | ······tags: |
| 311 | ······-·CJIS-5.4.1.1 | 311 | ······-·CJIS-5.4.1.1 |
| 312 | ······-·NIST-800-171-3.1.7 | 312 | ······-·NIST-800-171-3.1.7 |
| 313 | ······-·NIST-800-53-AC-2(7)(b) | 313 | ······-·NIST-800-53-AC-2(7)(b) |
| 314 | ······-·NIST-800-53-AC-6(9) | 314 | ······-·NIST-800-53-AC-6(9) |
| Offset 327, 16 lines modified | Offset 327, 16 lines modified | ||
| 327 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers.d/·already·exists·in·/etc/audit/rules.d/ | 327 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers.d/·already·exists·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 6662/11573 bytes (57.57%) of diff not shown. | |||
| Offset 1092, 16 lines modified | Offset 1092, 16 lines modified | ||
| 1092 | ······-·no_reboot_needed | 1092 | ······-·no_reboot_needed |
| 1093 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1093 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1094 | ······stat: | 1094 | ······stat: |
| 1095 | ········path:·/boot/grub/grub.cfg | 1095 | ········path:·/boot/grub/grub.cfg |
| 1096 | ······register:·file_exists | 1096 | ······register:·file_exists |
| 1097 | ······when: | 1097 | ······when: |
| 1098 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1099 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1098 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1099 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1100 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1100 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1101 | ······tags: | 1101 | ······tags: |
| 1102 | ······-·CJIS-5.5.2.2 | 1102 | ······-·CJIS-5.5.2.2 |
| 1103 | ······-·NIST-800-171-3.4.5 | 1103 | ······-·NIST-800-171-3.4.5 |
| 1104 | ······-·NIST-800-53-AC-6(1) | 1104 | ······-·NIST-800-53-AC-6(1) |
| 1105 | ······-·NIST-800-53-CM-6(a) | 1105 | ······-·NIST-800-53-CM-6(a) |
| 1106 | ······-·PCI-DSS-Req-7.1 | 1106 | ······-·PCI-DSS-Req-7.1 |
| Offset 1113, 16 lines modified | Offset 1113, 16 lines modified | ||
| 1113 | ······-·no_reboot_needed | 1113 | ······-·no_reboot_needed |
| 1114 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 1114 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 1115 | ······file: | 1115 | ······file: |
| 1116 | ········path:·/boot/grub/grub.cfg | 1116 | ········path:·/boot/grub/grub.cfg |
| 1117 | ········owner:·'0' | 1117 | ········owner:·'0' |
| 1118 | ······when: | 1118 | ······when: |
| 1119 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1120 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1119 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1120 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1121 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1121 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1122 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1122 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1123 | ······tags: | 1123 | ······tags: |
| 1124 | ······-·CJIS-5.5.2.2 | 1124 | ······-·CJIS-5.5.2.2 |
| 1125 | ······-·NIST-800-171-3.4.5 | 1125 | ······-·NIST-800-171-3.4.5 |
| 1126 | ······-·NIST-800-53-AC-6(1) | 1126 | ······-·NIST-800-53-AC-6(1) |
| 1127 | ······-·NIST-800-53-CM-6(a) | 1127 | ······-·NIST-800-53-CM-6(a) |
| Offset 1150, 16 lines modified | Offset 1150, 16 lines modified | ||
| 1150 | ······-·no_reboot_needed | 1150 | ······-·no_reboot_needed |
| 1151 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1151 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1152 | ······stat: | 1152 | ······stat: |
| 1153 | ········path:·/boot/grub/grub.cfg | 1153 | ········path:·/boot/grub/grub.cfg |
| 1154 | ······register:·file_exists | 1154 | ······register:·file_exists |
| 1155 | ······when: | 1155 | ······when: |
| 1156 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1157 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1156 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1157 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1158 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1158 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1159 | ······tags: | 1159 | ······tags: |
| 1160 | ······-·NIST-800-171-3.4.5 | 1160 | ······-·NIST-800-171-3.4.5 |
| 1161 | ······-·NIST-800-53-AC-6(1) | 1161 | ······-·NIST-800-53-AC-6(1) |
| 1162 | ······-·NIST-800-53-CM-6(a) | 1162 | ······-·NIST-800-53-CM-6(a) |
| 1163 | ······-·configure_strategy | 1163 | ······-·configure_strategy |
| 1164 | ······-·file_permissions_grub2_cfg | 1164 | ······-·file_permissions_grub2_cfg |
| Offset 1169, 16 lines modified | Offset 1169, 16 lines modified | ||
| 1169 | ······-·no_reboot_needed | 1169 | ······-·no_reboot_needed |
| 1170 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 1170 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 1171 | ······file: | 1171 | ······file: |
| 1172 | ········path:·/boot/grub/grub.cfg | 1172 | ········path:·/boot/grub/grub.cfg |
| 1173 | ········mode:·u-xs,g-xwrs,o-xwrt | 1173 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 1174 | ······when: | 1174 | ······when: |
| 1175 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1176 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1175 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1176 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1177 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1177 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1178 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1178 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1179 | ······tags: | 1179 | ······tags: |
| 1180 | ······-·NIST-800-171-3.4.5 | 1180 | ······-·NIST-800-171-3.4.5 |
| 1181 | ······-·NIST-800-53-AC-6(1) | 1181 | ······-·NIST-800-53-AC-6(1) |
| 1182 | ······-·NIST-800-53-CM-6(a) | 1182 | ······-·NIST-800-53-CM-6(a) |
| 1183 | ······-·configure_strategy | 1183 | ······-·configure_strategy |
| Offset 1061, 16 lines modified | Offset 1061, 16 lines modified | ||
| 1061 | ······-·no_reboot_needed | 1061 | ······-·no_reboot_needed |
| 1062 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1062 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1063 | ······stat: | 1063 | ······stat: |
| 1064 | ········path:·/boot/grub/grub.cfg | 1064 | ········path:·/boot/grub/grub.cfg |
| 1065 | ······register:·file_exists | 1065 | ······register:·file_exists |
| 1066 | ······when: | 1066 | ······when: |
| 1067 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1068 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1067 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1068 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1069 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1069 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1070 | ······tags: | 1070 | ······tags: |
| 1071 | ······-·CJIS-5.5.2.2 | 1071 | ······-·CJIS-5.5.2.2 |
| 1072 | ······-·NIST-800-171-3.4.5 | 1072 | ······-·NIST-800-171-3.4.5 |
| 1073 | ······-·NIST-800-53-AC-6(1) | 1073 | ······-·NIST-800-53-AC-6(1) |
| 1074 | ······-·NIST-800-53-CM-6(a) | 1074 | ······-·NIST-800-53-CM-6(a) |
| 1075 | ······-·PCI-DSS-Req-7.1 | 1075 | ······-·PCI-DSS-Req-7.1 |
| Offset 1082, 16 lines modified | Offset 1082, 16 lines modified | ||
| 1082 | ······-·no_reboot_needed | 1082 | ······-·no_reboot_needed |
| 1083 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 1083 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 1084 | ······file: | 1084 | ······file: |
| 1085 | ········path:·/boot/grub/grub.cfg | 1085 | ········path:·/boot/grub/grub.cfg |
| 1086 | ········owner:·'0' | 1086 | ········owner:·'0' |
| 1087 | ······when: | 1087 | ······when: |
| 1088 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1089 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1088 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1089 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1090 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1090 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1091 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1091 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1092 | ······tags: | 1092 | ······tags: |
| 1093 | ······-·CJIS-5.5.2.2 | 1093 | ······-·CJIS-5.5.2.2 |
| 1094 | ······-·NIST-800-171-3.4.5 | 1094 | ······-·NIST-800-171-3.4.5 |
| 1095 | ······-·NIST-800-53-AC-6(1) | 1095 | ······-·NIST-800-53-AC-6(1) |
| 1096 | ······-·NIST-800-53-CM-6(a) | 1096 | ······-·NIST-800-53-CM-6(a) |
| Offset 1119, 16 lines modified | Offset 1119, 16 lines modified | ||
| 1119 | ······-·no_reboot_needed | 1119 | ······-·no_reboot_needed |
| 1120 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1120 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1121 | ······stat: | 1121 | ······stat: |
| 1122 | ········path:·/boot/grub/grub.cfg | 1122 | ········path:·/boot/grub/grub.cfg |
| 1123 | ······register:·file_exists | 1123 | ······register:·file_exists |
| 1124 | ······when: | 1124 | ······when: |
| 1125 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1126 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1125 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1126 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1127 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1127 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1128 | ······tags: | 1128 | ······tags: |
| 1129 | ······-·NIST-800-171-3.4.5 | 1129 | ······-·NIST-800-171-3.4.5 |
| 1130 | ······-·NIST-800-53-AC-6(1) | 1130 | ······-·NIST-800-53-AC-6(1) |
| 1131 | ······-·NIST-800-53-CM-6(a) | 1131 | ······-·NIST-800-53-CM-6(a) |
| 1132 | ······-·configure_strategy | 1132 | ······-·configure_strategy |
| 1133 | ······-·file_permissions_grub2_cfg | 1133 | ······-·file_permissions_grub2_cfg |
| Offset 1138, 16 lines modified | Offset 1138, 16 lines modified | ||
| 1138 | ······-·no_reboot_needed | 1138 | ······-·no_reboot_needed |
| 1139 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 1139 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 1140 | ······file: | 1140 | ······file: |
| 1141 | ········path:·/boot/grub/grub.cfg | 1141 | ········path:·/boot/grub/grub.cfg |
| 1142 | ········mode:·u-xs,g-xwrs,o-xwrt | 1142 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 1143 | ······when: | 1143 | ······when: |
| 1144 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1145 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1144 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1145 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1146 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1146 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1147 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1147 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1148 | ······tags: | 1148 | ······tags: |
| 1149 | ······-·NIST-800-171-3.4.5 | 1149 | ······-·NIST-800-171-3.4.5 |
| 1150 | ······-·NIST-800-53-AC-6(1) | 1150 | ······-·NIST-800-53-AC-6(1) |
| 1151 | ······-·NIST-800-53-CM-6(a) | 1151 | ······-·NIST-800-53-CM-6(a) |
| 1152 | ······-·configure_strategy | 1152 | ······-·configure_strategy |
| Offset 1183, 16 lines modified | Offset 1183, 16 lines modified | ||
| 1183 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 1183 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 1184 | ······find: | 1184 | ······find: |
| 1185 | ········paths:·/etc/audit/rules.d/ | 1185 | ········paths:·/etc/audit/rules.d/ |
| 1186 | ········patterns:·'*.rules' | 1186 | ········patterns:·'*.rules' |
| 1187 | ······register:·find_rules_d | 1187 | ······register:·find_rules_d |
| 1188 | ······when: | 1188 | ······when: |
| 1189 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1190 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1189 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1190 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1191 | ······tags: | 1191 | ······tags: |
| 1192 | ······-·CJIS-5.4.1.1 | 1192 | ······-·CJIS-5.4.1.1 |
| 1193 | ······-·NIST-800-171-3.3.1 | 1193 | ······-·NIST-800-171-3.3.1 |
| 1194 | ······-·NIST-800-171-3.4.3 | 1194 | ······-·NIST-800-171-3.4.3 |
| 1195 | ······-·NIST-800-53-AC-6(9) | 1195 | ······-·NIST-800-53-AC-6(9) |
| 1196 | ······-·NIST-800-53-CM-6(a) | 1196 | ······-·NIST-800-53-CM-6(a) |
| 1197 | ······-·PCI-DSS-Req-10.5.2 | 1197 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1207, 16 lines modified | Offset 1207, 16 lines modified | ||
| 1207 | ······lineinfile: | 1207 | ······lineinfile: |
| 1208 | ········path:·'{{·item·}}' | 1208 | ········path:·'{{·item·}}' |
| 1209 | ········regexp:·^\s*(?:-e)\s+.*$ | 1209 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 1210 | ········state:·absent | 1210 | ········state:·absent |
| 1211 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 1211 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 1212 | ········}}' | 1212 | ········}}' |
| 1213 | ······when: | 1213 | ······when: |
| 1214 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1215 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1214 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1215 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1216 | ······tags: | 1216 | ······tags: |
| 1217 | ······-·CJIS-5.4.1.1 | 1217 | ······-·CJIS-5.4.1.1 |
| 1218 | ······-·NIST-800-171-3.3.1 | 1218 | ······-·NIST-800-171-3.3.1 |
| 1219 | ······-·NIST-800-171-3.4.3 | 1219 | ······-·NIST-800-171-3.4.3 |
| 1220 | ······-·NIST-800-53-AC-6(9) | 1220 | ······-·NIST-800-53-AC-6(9) |
| 1221 | ······-·NIST-800-53-CM-6(a) | 1221 | ······-·NIST-800-53-CM-6(a) |
| 1222 | ······-·PCI-DSS-Req-10.5.2 | 1222 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1233, 16 lines modified | Offset 1233, 16 lines modified | ||
| 1233 | ········create:·true | 1233 | ········create:·true |
| 1234 | ········line:·-e·2 | 1234 | ········line:·-e·2 |
| 1235 | ········mode:·o-rwx | 1235 | ········mode:·o-rwx |
| 1236 | ······loop: | 1236 | ······loop: |
| 1237 | ······-·/etc/audit/audit.rules | 1237 | ······-·/etc/audit/audit.rules |
| 1238 | ······-·/etc/audit/rules.d/immutable.rules | 1238 | ······-·/etc/audit/rules.d/immutable.rules |
| 1239 | ······when: | 1239 | ······when: |
| 1240 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1241 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1240 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1241 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1242 | ······tags: | 1242 | ······tags: |
| 1243 | ······-·CJIS-5.4.1.1 | 1243 | ······-·CJIS-5.4.1.1 |
| 1244 | ······-·NIST-800-171-3.3.1 | 1244 | ······-·NIST-800-171-3.3.1 |
| 1245 | ······-·NIST-800-171-3.4.3 | 1245 | ······-·NIST-800-171-3.4.3 |
| 1246 | ······-·NIST-800-53-AC-6(9) | 1246 | ······-·NIST-800-53-AC-6(9) |
| 1247 | ······-·NIST-800-53-CM-6(a) | 1247 | ······-·NIST-800-53-CM-6(a) |
| 1248 | ······-·PCI-DSS-Req-10.5.2 | 1248 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1277, 16 lines modified | Offset 1277, 16 lines modified | ||
| 1277 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 1277 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 1278 | ······find: | 1278 | ······find: |
| 1279 | ········paths:·/etc/audit/rules.d | 1279 | ········paths:·/etc/audit/rules.d |
| 1280 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 1280 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 1281 | ········patterns:·'*.rules' | 1281 | ········patterns:·'*.rules' |
| 1282 | ······register:·find_existing_watch_rules_d | 1282 | ······register:·find_existing_watch_rules_d |
| 1283 | ······when: | 1283 | ······when: |
| 1284 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1285 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1285 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1286 | ······tags: | 1286 | ······tags: |
| 1287 | ······-·CJIS-5.4.1.1 | 1287 | ······-·CJIS-5.4.1.1 |
| 1288 | ······-·NIST-800-171-3.1.7 | 1288 | ······-·NIST-800-171-3.1.7 |
| 1289 | ······-·NIST-800-53-AC-2(7)(b) | 1289 | ······-·NIST-800-53-AC-2(7)(b) |
| 1290 | ······-·NIST-800-53-AC-6(9) | 1290 | ······-·NIST-800-53-AC-6(9) |
| 1291 | ······-·NIST-800-53-AU-12(c) | 1291 | ······-·NIST-800-53-AU-12(c) |
| 1292 | ······-·NIST-800-53-AU-2(d) | 1292 | ······-·NIST-800-53-AU-2(d) |
| Offset 1303, 16 lines modified | Offset 1303, 16 lines modified | ||
| 1303 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 1303 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 1304 | ······find: | 1304 | ······find: |
| 1305 | ········paths:·/etc/audit/rules.d | 1305 | ········paths:·/etc/audit/rules.d |
| 1306 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ | 1306 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 1307 | ········patterns:·'*.rules' | 1307 | ········patterns:·'*.rules' |
| 1308 | ······register:·find_watch_key | 1308 | ······register:·find_watch_key |
| 1309 | ······when: | 1309 | ······when: |
| 1310 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1311 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1310 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1311 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1312 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1312 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1313 | ········==·0 | 1313 | ········==·0 |
| 1314 | ······tags: | 1314 | ······tags: |
| 1315 | ······-·CJIS-5.4.1.1 | 1315 | ······-·CJIS-5.4.1.1 |
| 1316 | ······-·NIST-800-171-3.1.7 | 1316 | ······-·NIST-800-171-3.1.7 |
| 1317 | ······-·NIST-800-53-AC-2(7)(b) | 1317 | ······-·NIST-800-53-AC-2(7)(b) |
| 1318 | ······-·NIST-800-53-AC-6(9) | 1318 | ······-·NIST-800-53-AC-6(9) |
| Offset 1329, 16 lines modified | Offset 1329, 16 lines modified | ||
| 1329 | ······-·restrict_strategy | 1329 | ······-·restrict_strategy |
| 1330 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 1330 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 1331 | ······set_fact: | 1331 | ······set_fact: |
| 1332 | ········all_files: | 1332 | ········all_files: |
| 1333 | ········-·/etc/audit/rules.d/actions.rules | 1333 | ········-·/etc/audit/rules.d/actions.rules |
| 1334 | ······when: | 1334 | ······when: |
| 1335 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1336 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1335 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1336 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1337 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1337 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1338 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1338 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1339 | ······tags: | 1339 | ······tags: |
| 1340 | ······-·CJIS-5.4.1.1 | 1340 | ······-·CJIS-5.4.1.1 |
| 1341 | ······-·NIST-800-171-3.1.7 | 1341 | ······-·NIST-800-171-3.1.7 |
| 1342 | ······-·NIST-800-53-AC-2(7)(b) | 1342 | ······-·NIST-800-53-AC-2(7)(b) |
| 1343 | ······-·NIST-800-53-AC-6(9) | 1343 | ······-·NIST-800-53-AC-6(9) |
| Offset 1355, 16 lines modified | Offset 1355, 16 lines modified | ||
| 1355 | ······-·restrict_strategy | 1355 | ······-·restrict_strategy |
| 1356 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1356 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1357 | ······set_fact: | 1357 | ······set_fact: |
| 1358 | ········all_files: | 1358 | ········all_files: |
| 1359 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1359 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1360 | ······when: | 1360 | ······when: |
| 1361 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1362 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1361 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1362 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1363 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1363 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1364 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1364 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1365 | ······tags: | 1365 | ······tags: |
| 1366 | ······-·CJIS-5.4.1.1 | 1366 | ······-·CJIS-5.4.1.1 |
| 1367 | ······-·NIST-800-171-3.1.7 | 1367 | ······-·NIST-800-171-3.1.7 |
| 1368 | ······-·NIST-800-53-AC-2(7)(b) | 1368 | ······-·NIST-800-53-AC-2(7)(b) |
| 1369 | ······-·NIST-800-53-AC-6(9) | 1369 | ······-·NIST-800-53-AC-6(9) |
| Offset 1383, 16 lines modified | Offset 1383, 16 lines modified | ||
| 1383 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 1383 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 124928/129622 bytes (96.38%) of diff not shown. | |||
| Offset 1152, 16 lines modified | Offset 1152, 16 lines modified | ||
| 1152 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 1152 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 1153 | ······find: | 1153 | ······find: |
| 1154 | ········paths:·/etc/audit/rules.d/ | 1154 | ········paths:·/etc/audit/rules.d/ |
| 1155 | ········patterns:·'*.rules' | 1155 | ········patterns:·'*.rules' |
| 1156 | ······register:·find_rules_d | 1156 | ······register:·find_rules_d |
| 1157 | ······when: | 1157 | ······when: |
| 1158 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1159 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1158 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1159 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1160 | ······tags: | 1160 | ······tags: |
| 1161 | ······-·CJIS-5.4.1.1 | 1161 | ······-·CJIS-5.4.1.1 |
| 1162 | ······-·NIST-800-171-3.3.1 | 1162 | ······-·NIST-800-171-3.3.1 |
| 1163 | ······-·NIST-800-171-3.4.3 | 1163 | ······-·NIST-800-171-3.4.3 |
| 1164 | ······-·NIST-800-53-AC-6(9) | 1164 | ······-·NIST-800-53-AC-6(9) |
| 1165 | ······-·NIST-800-53-CM-6(a) | 1165 | ······-·NIST-800-53-CM-6(a) |
| 1166 | ······-·PCI-DSS-Req-10.5.2 | 1166 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1176, 16 lines modified | Offset 1176, 16 lines modified | ||
| 1176 | ······lineinfile: | 1176 | ······lineinfile: |
| 1177 | ········path:·'{{·item·}}' | 1177 | ········path:·'{{·item·}}' |
| 1178 | ········regexp:·^\s*(?:-e)\s+.*$ | 1178 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 1179 | ········state:·absent | 1179 | ········state:·absent |
| 1180 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 1180 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 1181 | ········}}' | 1181 | ········}}' |
| 1182 | ······when: | 1182 | ······when: |
| 1183 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1184 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1183 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1184 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1185 | ······tags: | 1185 | ······tags: |
| 1186 | ······-·CJIS-5.4.1.1 | 1186 | ······-·CJIS-5.4.1.1 |
| 1187 | ······-·NIST-800-171-3.3.1 | 1187 | ······-·NIST-800-171-3.3.1 |
| 1188 | ······-·NIST-800-171-3.4.3 | 1188 | ······-·NIST-800-171-3.4.3 |
| 1189 | ······-·NIST-800-53-AC-6(9) | 1189 | ······-·NIST-800-53-AC-6(9) |
| 1190 | ······-·NIST-800-53-CM-6(a) | 1190 | ······-·NIST-800-53-CM-6(a) |
| 1191 | ······-·PCI-DSS-Req-10.5.2 | 1191 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1202, 16 lines modified | Offset 1202, 16 lines modified | ||
| 1202 | ········create:·true | 1202 | ········create:·true |
| 1203 | ········line:·-e·2 | 1203 | ········line:·-e·2 |
| 1204 | ········mode:·o-rwx | 1204 | ········mode:·o-rwx |
| 1205 | ······loop: | 1205 | ······loop: |
| 1206 | ······-·/etc/audit/audit.rules | 1206 | ······-·/etc/audit/audit.rules |
| 1207 | ······-·/etc/audit/rules.d/immutable.rules | 1207 | ······-·/etc/audit/rules.d/immutable.rules |
| 1208 | ······when: | 1208 | ······when: |
| 1209 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1210 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1209 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1210 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1211 | ······tags: | 1211 | ······tags: |
| 1212 | ······-·CJIS-5.4.1.1 | 1212 | ······-·CJIS-5.4.1.1 |
| 1213 | ······-·NIST-800-171-3.3.1 | 1213 | ······-·NIST-800-171-3.3.1 |
| 1214 | ······-·NIST-800-171-3.4.3 | 1214 | ······-·NIST-800-171-3.4.3 |
| 1215 | ······-·NIST-800-53-AC-6(9) | 1215 | ······-·NIST-800-53-AC-6(9) |
| 1216 | ······-·NIST-800-53-CM-6(a) | 1216 | ······-·NIST-800-53-CM-6(a) |
| 1217 | ······-·PCI-DSS-Req-10.5.2 | 1217 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1246, 16 lines modified | Offset 1246, 16 lines modified | ||
| 1246 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 1246 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 1247 | ······find: | 1247 | ······find: |
| 1248 | ········paths:·/etc/audit/rules.d | 1248 | ········paths:·/etc/audit/rules.d |
| 1249 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 1249 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 1250 | ········patterns:·'*.rules' | 1250 | ········patterns:·'*.rules' |
| 1251 | ······register:·find_existing_watch_rules_d | 1251 | ······register:·find_existing_watch_rules_d |
| 1252 | ······when: | 1252 | ······when: |
| 1253 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1254 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1253 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1254 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1255 | ······tags: | 1255 | ······tags: |
| 1256 | ······-·CJIS-5.4.1.1 | 1256 | ······-·CJIS-5.4.1.1 |
| 1257 | ······-·NIST-800-171-3.1.7 | 1257 | ······-·NIST-800-171-3.1.7 |
| 1258 | ······-·NIST-800-53-AC-2(7)(b) | 1258 | ······-·NIST-800-53-AC-2(7)(b) |
| 1259 | ······-·NIST-800-53-AC-6(9) | 1259 | ······-·NIST-800-53-AC-6(9) |
| 1260 | ······-·NIST-800-53-AU-12(c) | 1260 | ······-·NIST-800-53-AU-12(c) |
| 1261 | ······-·NIST-800-53-AU-2(d) | 1261 | ······-·NIST-800-53-AU-2(d) |
| Offset 1272, 16 lines modified | Offset 1272, 16 lines modified | ||
| 1272 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 1272 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 1273 | ······find: | 1273 | ······find: |
| 1274 | ········paths:·/etc/audit/rules.d | 1274 | ········paths:·/etc/audit/rules.d |
| 1275 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ | 1275 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 1276 | ········patterns:·'*.rules' | 1276 | ········patterns:·'*.rules' |
| 1277 | ······register:·find_watch_key | 1277 | ······register:·find_watch_key |
| 1278 | ······when: | 1278 | ······when: |
| 1279 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1280 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1279 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1280 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1281 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1281 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1282 | ········==·0 | 1282 | ········==·0 |
| 1283 | ······tags: | 1283 | ······tags: |
| 1284 | ······-·CJIS-5.4.1.1 | 1284 | ······-·CJIS-5.4.1.1 |
| 1285 | ······-·NIST-800-171-3.1.7 | 1285 | ······-·NIST-800-171-3.1.7 |
| 1286 | ······-·NIST-800-53-AC-2(7)(b) | 1286 | ······-·NIST-800-53-AC-2(7)(b) |
| 1287 | ······-·NIST-800-53-AC-6(9) | 1287 | ······-·NIST-800-53-AC-6(9) |
| Offset 1298, 16 lines modified | Offset 1298, 16 lines modified | ||
| 1298 | ······-·restrict_strategy | 1298 | ······-·restrict_strategy |
| 1299 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 1299 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 1300 | ······set_fact: | 1300 | ······set_fact: |
| 1301 | ········all_files: | 1301 | ········all_files: |
| 1302 | ········-·/etc/audit/rules.d/actions.rules | 1302 | ········-·/etc/audit/rules.d/actions.rules |
| 1303 | ······when: | 1303 | ······when: |
| 1304 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1305 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1304 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1305 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1306 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1306 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1307 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1307 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1308 | ······tags: | 1308 | ······tags: |
| 1309 | ······-·CJIS-5.4.1.1 | 1309 | ······-·CJIS-5.4.1.1 |
| 1310 | ······-·NIST-800-171-3.1.7 | 1310 | ······-·NIST-800-171-3.1.7 |
| 1311 | ······-·NIST-800-53-AC-2(7)(b) | 1311 | ······-·NIST-800-53-AC-2(7)(b) |
| 1312 | ······-·NIST-800-53-AC-6(9) | 1312 | ······-·NIST-800-53-AC-6(9) |
| Offset 1324, 16 lines modified | Offset 1324, 16 lines modified | ||
| 1324 | ······-·restrict_strategy | 1324 | ······-·restrict_strategy |
| 1325 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1325 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1326 | ······set_fact: | 1326 | ······set_fact: |
| 1327 | ········all_files: | 1327 | ········all_files: |
| 1328 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1328 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1329 | ······when: | 1329 | ······when: |
| 1330 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1331 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1330 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1331 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 1332 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1332 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1333 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1333 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1334 | ······tags: | 1334 | ······tags: |
| 1335 | ······-·CJIS-5.4.1.1 | 1335 | ······-·CJIS-5.4.1.1 |
| 1336 | ······-·NIST-800-171-3.1.7 | 1336 | ······-·NIST-800-171-3.1.7 |
| 1337 | ······-·NIST-800-53-AC-2(7)(b) | 1337 | ······-·NIST-800-53-AC-2(7)(b) |
| 1338 | ······-·NIST-800-53-AC-6(9) | 1338 | ······-·NIST-800-53-AC-6(9) |
| Offset 1352, 16 lines modified | Offset 1352, 16 lines modified | ||
| 1352 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 1352 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 124928/129622 bytes (96.38%) of diff not shown. | |||
| Offset 779, 16 lines modified | Offset 779, 16 lines modified | ||
| 779 | ····-·name:·Check·if·watch·rule·for·/etc/group·already·exists·in·/etc/audit/rules.d/ | 779 | ····-·name:·Check·if·watch·rule·for·/etc/group·already·exists·in·/etc/audit/rules.d/ |
| 780 | ······find: | 780 | ······find: |
| 781 | ········paths:·/etc/audit/rules.d | 781 | ········paths:·/etc/audit/rules.d |
| 782 | ········contains:·^\s*-w\s+/etc/group\s+-p\s+wa(\s|$)+ | 782 | ········contains:·^\s*-w\s+/etc/group\s+-p\s+wa(\s|$)+ |
| 783 | ········patterns:·'*.rules' | 783 | ········patterns:·'*.rules' |
| 784 | ······register:·find_existing_watch_rules_d | 784 | ······register:·find_existing_watch_rules_d |
| 785 | ······when: | 785 | ······when: |
| 786 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 787 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 786 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 787 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 788 | ······tags: | 788 | ······tags: |
| 789 | ······-·CJIS-5.4.1.1 | 789 | ······-·CJIS-5.4.1.1 |
| 790 | ······-·DISA-STIG-UBTU-20-010101 | 790 | ······-·DISA-STIG-UBTU-20-010101 |
| 791 | ······-·NIST-800-171-3.1.7 | 791 | ······-·NIST-800-171-3.1.7 |
| 792 | ······-·NIST-800-53-AC-2(4) | 792 | ······-·NIST-800-53-AC-2(4) |
| 793 | ······-·NIST-800-53-AC-6(9) | 793 | ······-·NIST-800-53-AC-6(9) |
| 794 | ······-·NIST-800-53-AU-12(c) | 794 | ······-·NIST-800-53-AU-12(c) |
| Offset 805, 16 lines modified | Offset 805, 16 lines modified | ||
| 805 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·audit_rules_usergroup_modification | 805 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·audit_rules_usergroup_modification |
| 806 | ······find: | 806 | ······find: |
| 807 | ········paths:·/etc/audit/rules.d | 807 | ········paths:·/etc/audit/rules.d |
| 808 | ········contains:·^.*(?:-F·key=|-k\s+)audit_rules_usergroup_modification$ | 808 | ········contains:·^.*(?:-F·key=|-k\s+)audit_rules_usergroup_modification$ |
| 809 | ········patterns:·'*.rules' | 809 | ········patterns:·'*.rules' |
| 810 | ······register:·find_watch_key | 810 | ······register:·find_watch_key |
| 811 | ······when: | 811 | ······when: |
| 812 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 813 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 812 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 813 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 814 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 814 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 815 | ········==·0 | 815 | ········==·0 |
| 816 | ······tags: | 816 | ······tags: |
| 817 | ······-·CJIS-5.4.1.1 | 817 | ······-·CJIS-5.4.1.1 |
| 818 | ······-·DISA-STIG-UBTU-20-010101 | 818 | ······-·DISA-STIG-UBTU-20-010101 |
| 819 | ······-·NIST-800-171-3.1.7 | 819 | ······-·NIST-800-171-3.1.7 |
| 820 | ······-·NIST-800-53-AC-2(4) | 820 | ······-·NIST-800-53-AC-2(4) |
| Offset 832, 16 lines modified | Offset 832, 16 lines modified | ||
| 832 | ····-·name:·Use·/etc/audit/rules.d/audit_rules_usergroup_modification.rules·as·the·recipient | 832 | ····-·name:·Use·/etc/audit/rules.d/audit_rules_usergroup_modification.rules·as·the·recipient |
| 833 | ········for·the·rule | 833 | ········for·the·rule |
| 834 | ······set_fact: | 834 | ······set_fact: |
| 835 | ········all_files: | 835 | ········all_files: |
| 836 | ········-·/etc/audit/rules.d/audit_rules_usergroup_modification.rules | 836 | ········-·/etc/audit/rules.d/audit_rules_usergroup_modification.rules |
| 837 | ······when: | 837 | ······when: |
| 838 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 839 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 838 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 839 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 840 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 840 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 841 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 841 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 842 | ······tags: | 842 | ······tags: |
| 843 | ······-·CJIS-5.4.1.1 | 843 | ······-·CJIS-5.4.1.1 |
| 844 | ······-·DISA-STIG-UBTU-20-010101 | 844 | ······-·DISA-STIG-UBTU-20-010101 |
| 845 | ······-·NIST-800-171-3.1.7 | 845 | ······-·NIST-800-171-3.1.7 |
| 846 | ······-·NIST-800-53-AC-2(4) | 846 | ······-·NIST-800-53-AC-2(4) |
| Offset 858, 16 lines modified | Offset 858, 16 lines modified | ||
| 858 | ······-·restrict_strategy | 858 | ······-·restrict_strategy |
| 859 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 859 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 860 | ······set_fact: | 860 | ······set_fact: |
| 861 | ········all_files: | 861 | ········all_files: |
| 862 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 862 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 863 | ······when: | 863 | ······when: |
| 864 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 865 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 864 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 865 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 866 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 866 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 867 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 867 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 868 | ······tags: | 868 | ······tags: |
| 869 | ······-·CJIS-5.4.1.1 | 869 | ······-·CJIS-5.4.1.1 |
| 870 | ······-·DISA-STIG-UBTU-20-010101 | 870 | ······-·DISA-STIG-UBTU-20-010101 |
| 871 | ······-·NIST-800-171-3.1.7 | 871 | ······-·NIST-800-171-3.1.7 |
| 872 | ······-·NIST-800-53-AC-2(4) | 872 | ······-·NIST-800-53-AC-2(4) |
| Offset 886, 16 lines modified | Offset 886, 16 lines modified | ||
| 886 | ····-·name:·Add·watch·rule·for·/etc/group·in·/etc/audit/rules.d/ | 886 | ····-·name:·Add·watch·rule·for·/etc/group·in·/etc/audit/rules.d/ |
| 887 | ······lineinfile: | 887 | ······lineinfile: |
| 888 | ········path:·'{{·all_files[0]·}}' | 888 | ········path:·'{{·all_files[0]·}}' |
| 889 | ········line:·-w·/etc/group·-p·wa·-k·audit_rules_usergroup_modification | 889 | ········line:·-w·/etc/group·-p·wa·-k·audit_rules_usergroup_modification |
| 890 | ········create:·true | 890 | ········create:·true |
| 891 | ········mode:·'0640' | 891 | ········mode:·'0640' |
| 892 | ······when: | 892 | ······when: |
| 893 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 894 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 893 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 894 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 895 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 895 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 896 | ········==·0 | 896 | ········==·0 |
| 897 | ······tags: | 897 | ······tags: |
| 898 | ······-·CJIS-5.4.1.1 | 898 | ······-·CJIS-5.4.1.1 |
| 899 | ······-·DISA-STIG-UBTU-20-010101 | 899 | ······-·DISA-STIG-UBTU-20-010101 |
| 900 | ······-·NIST-800-171-3.1.7 | 900 | ······-·NIST-800-171-3.1.7 |
| 901 | ······-·NIST-800-53-AC-2(4) | 901 | ······-·NIST-800-53-AC-2(4) |
| Offset 914, 16 lines modified | Offset 914, 16 lines modified | ||
| 914 | ····-·name:·Check·if·watch·rule·for·/etc/group·already·exists·in·/etc/audit/audit.rules | 914 | ····-·name:·Check·if·watch·rule·for·/etc/group·already·exists·in·/etc/audit/audit.rules |
| 915 | ······find: | 915 | ······find: |
| 916 | ········paths:·/etc/audit/ | 916 | ········paths:·/etc/audit/ |
| 917 | ········contains:·^\s*-w\s+/etc/group\s+-p\s+wa(\s|$)+ | 917 | ········contains:·^\s*-w\s+/etc/group\s+-p\s+wa(\s|$)+ |
| 918 | ········patterns:·audit.rules | 918 | ········patterns:·audit.rules |
| 919 | ······register:·find_existing_watch_audit_rules | 919 | ······register:·find_existing_watch_audit_rules |
| 920 | ······when: | 920 | ······when: |
| 921 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 922 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 921 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 922 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 923 | ······tags: | 923 | ······tags: |
| 924 | ······-·CJIS-5.4.1.1 | 924 | ······-·CJIS-5.4.1.1 |
| 925 | ······-·DISA-STIG-UBTU-20-010101 | 925 | ······-·DISA-STIG-UBTU-20-010101 |
| 926 | ······-·NIST-800-171-3.1.7 | 926 | ······-·NIST-800-171-3.1.7 |
| 927 | ······-·NIST-800-53-AC-2(4) | 927 | ······-·NIST-800-53-AC-2(4) |
| 928 | ······-·NIST-800-53-AC-6(9) | 928 | ······-·NIST-800-53-AC-6(9) |
| 929 | ······-·NIST-800-53-AU-12(c) | 929 | ······-·NIST-800-53-AU-12(c) |
| Offset 941, 16 lines modified | Offset 941, 16 lines modified | ||
| 941 | ······lineinfile: | 941 | ······lineinfile: |
| 942 | ········line:·-w·/etc/group·-p·wa·-k·audit_rules_usergroup_modification | 942 | ········line:·-w·/etc/group·-p·wa·-k·audit_rules_usergroup_modification |
| 943 | ········state:·present | 943 | ········state:·present |
| 944 | ········dest:·/etc/audit/audit.rules | 944 | ········dest:·/etc/audit/audit.rules |
| 945 | ········create:·true | 945 | ········create:·true |
| 946 | ········mode:·'0640' | 946 | ········mode:·'0640' |
| 947 | ······when: | 947 | ······when: |
| 948 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 949 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 948 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 949 | ······-·'"auditd"·in·ansible_facts.packages' | ||
| 950 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched | 950 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched |
| 951 | ········==·0 | 951 | ········==·0 |
| 952 | ······tags: | 952 | ······tags: |
| 953 | ······-·CJIS-5.4.1.1 | 953 | ······-·CJIS-5.4.1.1 |
| 954 | ······-·DISA-STIG-UBTU-20-010101 | 954 | ······-·DISA-STIG-UBTU-20-010101 |
| 955 | ······-·NIST-800-171-3.1.7 | 955 | ······-·NIST-800-171-3.1.7 |
| 956 | ······-·NIST-800-53-AC-2(4) | 956 | ······-·NIST-800-53-AC-2(4) |
| Offset 990, 16 lines modified | Offset 990, 16 lines modified | ||
| 990 | ····-·name:·Check·if·watch·rule·for·/etc/gshadow·already·exists·in·/etc/audit/rules.d/ | 990 | ····-·name:·Check·if·watch·rule·for·/etc/gshadow·already·exists·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 114863/119929 bytes (95.78%) of diff not shown. | |||
| Offset 1062, 16 lines modified | Offset 1062, 16 lines modified | ||
| 1062 | ······-·no_reboot_needed | 1062 | ······-·no_reboot_needed |
| 1063 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1063 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1064 | ······stat: | 1064 | ······stat: |
| 1065 | ········path:·/boot/grub/grub.cfg | 1065 | ········path:·/boot/grub/grub.cfg |
| 1066 | ······register:·file_exists | 1066 | ······register:·file_exists |
| 1067 | ······when: | 1067 | ······when: |
| 1068 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1069 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1068 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1069 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1070 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1070 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1071 | ······tags: | 1071 | ······tags: |
| 1072 | ······-·CJIS-5.5.2.2 | 1072 | ······-·CJIS-5.5.2.2 |
| 1073 | ······-·NIST-800-171-3.4.5 | 1073 | ······-·NIST-800-171-3.4.5 |
| 1074 | ······-·NIST-800-53-AC-6(1) | 1074 | ······-·NIST-800-53-AC-6(1) |
| 1075 | ······-·NIST-800-53-CM-6(a) | 1075 | ······-·NIST-800-53-CM-6(a) |
| 1076 | ······-·PCI-DSS-Req-7.1 | 1076 | ······-·PCI-DSS-Req-7.1 |
| Offset 1083, 16 lines modified | Offset 1083, 16 lines modified | ||
| 1083 | ······-·no_reboot_needed | 1083 | ······-·no_reboot_needed |
| 1084 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 1084 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 1085 | ······file: | 1085 | ······file: |
| 1086 | ········path:·/boot/grub/grub.cfg | 1086 | ········path:·/boot/grub/grub.cfg |
| 1087 | ········owner:·'0' | 1087 | ········owner:·'0' |
| 1088 | ······when: | 1088 | ······when: |
| 1089 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1090 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1089 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1090 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1091 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1091 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1092 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1092 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1093 | ······tags: | 1093 | ······tags: |
| 1094 | ······-·CJIS-5.5.2.2 | 1094 | ······-·CJIS-5.5.2.2 |
| 1095 | ······-·NIST-800-171-3.4.5 | 1095 | ······-·NIST-800-171-3.4.5 |
| 1096 | ······-·NIST-800-53-AC-6(1) | 1096 | ······-·NIST-800-53-AC-6(1) |
| 1097 | ······-·NIST-800-53-CM-6(a) | 1097 | ······-·NIST-800-53-CM-6(a) |
| Offset 1120, 16 lines modified | Offset 1120, 16 lines modified | ||
| 1120 | ······-·no_reboot_needed | 1120 | ······-·no_reboot_needed |
| 1121 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1121 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1122 | ······stat: | 1122 | ······stat: |
| 1123 | ········path:·/boot/grub/grub.cfg | 1123 | ········path:·/boot/grub/grub.cfg |
| 1124 | ······register:·file_exists | 1124 | ······register:·file_exists |
| 1125 | ······when: | 1125 | ······when: |
| 1126 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1127 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1126 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1127 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1128 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1128 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1129 | ······tags: | 1129 | ······tags: |
| 1130 | ······-·NIST-800-171-3.4.5 | 1130 | ······-·NIST-800-171-3.4.5 |
| 1131 | ······-·NIST-800-53-AC-6(1) | 1131 | ······-·NIST-800-53-AC-6(1) |
| 1132 | ······-·NIST-800-53-CM-6(a) | 1132 | ······-·NIST-800-53-CM-6(a) |
| 1133 | ······-·configure_strategy | 1133 | ······-·configure_strategy |
| 1134 | ······-·file_permissions_grub2_cfg | 1134 | ······-·file_permissions_grub2_cfg |
| Offset 1139, 16 lines modified | Offset 1139, 16 lines modified | ||
| 1139 | ······-·no_reboot_needed | 1139 | ······-·no_reboot_needed |
| 1140 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 1140 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 1141 | ······file: | 1141 | ······file: |
| 1142 | ········path:·/boot/grub/grub.cfg | 1142 | ········path:·/boot/grub/grub.cfg |
| 1143 | ········mode:·u-xs,g-xwrs,o-xwrt | 1143 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 1144 | ······when: | 1144 | ······when: |
| 1145 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1146 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1145 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1146 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1147 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1147 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1148 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1148 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1149 | ······tags: | 1149 | ······tags: |
| 1150 | ······-·NIST-800-171-3.4.5 | 1150 | ······-·NIST-800-171-3.4.5 |
| 1151 | ······-·NIST-800-53-AC-6(1) | 1151 | ······-·NIST-800-53-AC-6(1) |
| 1152 | ······-·NIST-800-53-CM-6(a) | 1152 | ······-·NIST-800-53-CM-6(a) |
| 1153 | ······-·configure_strategy | 1153 | ······-·configure_strategy |
| Offset 1031, 16 lines modified | Offset 1031, 16 lines modified | ||
| 1031 | ······-·no_reboot_needed | 1031 | ······-·no_reboot_needed |
| 1032 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1032 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1033 | ······stat: | 1033 | ······stat: |
| 1034 | ········path:·/boot/grub/grub.cfg | 1034 | ········path:·/boot/grub/grub.cfg |
| 1035 | ······register:·file_exists | 1035 | ······register:·file_exists |
| 1036 | ······when: | 1036 | ······when: |
| 1037 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1038 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1037 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1038 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1039 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1039 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1040 | ······tags: | 1040 | ······tags: |
| 1041 | ······-·CJIS-5.5.2.2 | 1041 | ······-·CJIS-5.5.2.2 |
| 1042 | ······-·NIST-800-171-3.4.5 | 1042 | ······-·NIST-800-171-3.4.5 |
| 1043 | ······-·NIST-800-53-AC-6(1) | 1043 | ······-·NIST-800-53-AC-6(1) |
| 1044 | ······-·NIST-800-53-CM-6(a) | 1044 | ······-·NIST-800-53-CM-6(a) |
| 1045 | ······-·PCI-DSS-Req-7.1 | 1045 | ······-·PCI-DSS-Req-7.1 |
| Offset 1052, 16 lines modified | Offset 1052, 16 lines modified | ||
| 1052 | ······-·no_reboot_needed | 1052 | ······-·no_reboot_needed |
| 1053 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 1053 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 1054 | ······file: | 1054 | ······file: |
| 1055 | ········path:·/boot/grub/grub.cfg | 1055 | ········path:·/boot/grub/grub.cfg |
| 1056 | ········owner:·'0' | 1056 | ········owner:·'0' |
| 1057 | ······when: | 1057 | ······when: |
| 1058 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1059 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1058 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1059 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1060 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1060 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1061 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1061 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1062 | ······tags: | 1062 | ······tags: |
| 1063 | ······-·CJIS-5.5.2.2 | 1063 | ······-·CJIS-5.5.2.2 |
| 1064 | ······-·NIST-800-171-3.4.5 | 1064 | ······-·NIST-800-171-3.4.5 |
| 1065 | ······-·NIST-800-53-AC-6(1) | 1065 | ······-·NIST-800-53-AC-6(1) |
| 1066 | ······-·NIST-800-53-CM-6(a) | 1066 | ······-·NIST-800-53-CM-6(a) |
| Offset 1089, 16 lines modified | Offset 1089, 16 lines modified | ||
| 1089 | ······-·no_reboot_needed | 1089 | ······-·no_reboot_needed |
| 1090 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 1090 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 1091 | ······stat: | 1091 | ······stat: |
| 1092 | ········path:·/boot/grub/grub.cfg | 1092 | ········path:·/boot/grub/grub.cfg |
| 1093 | ······register:·file_exists | 1093 | ······register:·file_exists |
| 1094 | ······when: | 1094 | ······when: |
| 1095 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1096 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1095 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1096 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1097 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1097 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1098 | ······tags: | 1098 | ······tags: |
| 1099 | ······-·NIST-800-171-3.4.5 | 1099 | ······-·NIST-800-171-3.4.5 |
| 1100 | ······-·NIST-800-53-AC-6(1) | 1100 | ······-·NIST-800-53-AC-6(1) |
| 1101 | ······-·NIST-800-53-CM-6(a) | 1101 | ······-·NIST-800-53-CM-6(a) |
| 1102 | ······-·configure_strategy | 1102 | ······-·configure_strategy |
| 1103 | ······-·file_permissions_grub2_cfg | 1103 | ······-·file_permissions_grub2_cfg |
| Offset 1108, 16 lines modified | Offset 1108, 16 lines modified | ||
| 1108 | ······-·no_reboot_needed | 1108 | ······-·no_reboot_needed |
| 1109 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 1109 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 1110 | ······file: | 1110 | ······file: |
| 1111 | ········path:·/boot/grub/grub.cfg | 1111 | ········path:·/boot/grub/grub.cfg |
| 1112 | ········mode:·u-xs,g-xwrs,o-xwrt | 1112 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 1113 | ······when: | 1113 | ······when: |
| 1114 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1115 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1114 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1115 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1116 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1116 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1117 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1117 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1118 | ······tags: | 1118 | ······tags: |
| 1119 | ······-·NIST-800-171-3.4.5 | 1119 | ······-·NIST-800-171-3.4.5 |
| 1120 | ······-·NIST-800-53-AC-6(1) | 1120 | ······-·NIST-800-53-AC-6(1) |
| 1121 | ······-·NIST-800-53-CM-6(a) | 1121 | ······-·NIST-800-53-CM-6(a) |
| 1122 | ······-·configure_strategy | 1122 | ······-·configure_strategy |
| Offset 16207, 16 lines modified | Offset 16207, 16 lines modified | ||
| 16207 | ······-·no_reboot_needed | 16207 | ······-·no_reboot_needed |
| 16208 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 16208 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 16209 | ······stat: | 16209 | ······stat: |
| 16210 | ········path:·/boot/grub/grub.cfg | 16210 | ········path:·/boot/grub/grub.cfg |
| 16211 | ······register:·file_exists | 16211 | ······register:·file_exists |
| 16212 | ······when: | 16212 | ······when: |
| 16213 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16214 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16213 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16214 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16215 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16215 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16216 | ······tags: | 16216 | ······tags: |
| 16217 | ······-·CJIS-5.5.2.2 | 16217 | ······-·CJIS-5.5.2.2 |
| 16218 | ······-·NIST-800-171-3.4.5 | 16218 | ······-·NIST-800-171-3.4.5 |
| 16219 | ······-·NIST-800-53-AC-6(1) | 16219 | ······-·NIST-800-53-AC-6(1) |
| 16220 | ······-·NIST-800-53-CM-6(a) | 16220 | ······-·NIST-800-53-CM-6(a) |
| 16221 | ······-·PCI-DSS-Req-7.1 | 16221 | ······-·PCI-DSS-Req-7.1 |
| Offset 16228, 16 lines modified | Offset 16228, 16 lines modified | ||
| 16228 | ······-·no_reboot_needed | 16228 | ······-·no_reboot_needed |
| 16229 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 16229 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 16230 | ······file: | 16230 | ······file: |
| 16231 | ········path:·/boot/grub/grub.cfg | 16231 | ········path:·/boot/grub/grub.cfg |
| 16232 | ········owner:·'0' | 16232 | ········owner:·'0' |
| 16233 | ······when: | 16233 | ······when: |
| 16234 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16235 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16234 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16235 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16236 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16236 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16237 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 16237 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 16238 | ······tags: | 16238 | ······tags: |
| 16239 | ······-·CJIS-5.5.2.2 | 16239 | ······-·CJIS-5.5.2.2 |
| 16240 | ······-·NIST-800-171-3.4.5 | 16240 | ······-·NIST-800-171-3.4.5 |
| 16241 | ······-·NIST-800-53-AC-6(1) | 16241 | ······-·NIST-800-53-AC-6(1) |
| 16242 | ······-·NIST-800-53-CM-6(a) | 16242 | ······-·NIST-800-53-CM-6(a) |
| Offset 16265, 16 lines modified | Offset 16265, 16 lines modified | ||
| 16265 | ······-·no_reboot_needed | 16265 | ······-·no_reboot_needed |
| 16266 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 16266 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 16267 | ······stat: | 16267 | ······stat: |
| 16268 | ········path:·/boot/grub/grub.cfg | 16268 | ········path:·/boot/grub/grub.cfg |
| 16269 | ······register:·file_exists | 16269 | ······register:·file_exists |
| 16270 | ······when: | 16270 | ······when: |
| 16271 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16272 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16271 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16272 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16273 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16273 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16274 | ······tags: | 16274 | ······tags: |
| 16275 | ······-·NIST-800-171-3.4.5 | 16275 | ······-·NIST-800-171-3.4.5 |
| 16276 | ······-·NIST-800-53-AC-6(1) | 16276 | ······-·NIST-800-53-AC-6(1) |
| 16277 | ······-·NIST-800-53-CM-6(a) | 16277 | ······-·NIST-800-53-CM-6(a) |
| 16278 | ······-·configure_strategy | 16278 | ······-·configure_strategy |
| 16279 | ······-·file_permissions_grub2_cfg | 16279 | ······-·file_permissions_grub2_cfg |
| Offset 16284, 16 lines modified | Offset 16284, 16 lines modified | ||
| 16284 | ······-·no_reboot_needed | 16284 | ······-·no_reboot_needed |
| 16285 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 16285 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 16286 | ······file: | 16286 | ······file: |
| 16287 | ········path:·/boot/grub/grub.cfg | 16287 | ········path:·/boot/grub/grub.cfg |
| 16288 | ········mode:·u-xs,g-xwrs,o-xwrt | 16288 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 16289 | ······when: | 16289 | ······when: |
| 16290 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16291 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16290 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16291 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16292 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16292 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16293 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 16293 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 16294 | ······tags: | 16294 | ······tags: |
| 16295 | ······-·NIST-800-171-3.4.5 | 16295 | ······-·NIST-800-171-3.4.5 |
| 16296 | ······-·NIST-800-53-AC-6(1) | 16296 | ······-·NIST-800-53-AC-6(1) |
| 16297 | ······-·NIST-800-53-CM-6(a) | 16297 | ······-·NIST-800-53-CM-6(a) |
| 16298 | ······-·configure_strategy | 16298 | ······-·configure_strategy |
| Offset 16176, 16 lines modified | Offset 16176, 16 lines modified | ||
| 16176 | ······-·no_reboot_needed | 16176 | ······-·no_reboot_needed |
| 16177 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 16177 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 16178 | ······stat: | 16178 | ······stat: |
| 16179 | ········path:·/boot/grub/grub.cfg | 16179 | ········path:·/boot/grub/grub.cfg |
| 16180 | ······register:·file_exists | 16180 | ······register:·file_exists |
| 16181 | ······when: | 16181 | ······when: |
| 16182 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16183 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16182 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16183 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16184 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16184 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16185 | ······tags: | 16185 | ······tags: |
| 16186 | ······-·CJIS-5.5.2.2 | 16186 | ······-·CJIS-5.5.2.2 |
| 16187 | ······-·NIST-800-171-3.4.5 | 16187 | ······-·NIST-800-171-3.4.5 |
| 16188 | ······-·NIST-800-53-AC-6(1) | 16188 | ······-·NIST-800-53-AC-6(1) |
| 16189 | ······-·NIST-800-53-CM-6(a) | 16189 | ······-·NIST-800-53-CM-6(a) |
| 16190 | ······-·PCI-DSS-Req-7.1 | 16190 | ······-·PCI-DSS-Req-7.1 |
| Offset 16197, 16 lines modified | Offset 16197, 16 lines modified | ||
| 16197 | ······-·no_reboot_needed | 16197 | ······-·no_reboot_needed |
| 16198 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 16198 | ····-·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 16199 | ······file: | 16199 | ······file: |
| 16200 | ········path:·/boot/grub/grub.cfg | 16200 | ········path:·/boot/grub/grub.cfg |
| 16201 | ········owner:·'0' | 16201 | ········owner:·'0' |
| 16202 | ······when: | 16202 | ······when: |
| 16203 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16204 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16203 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16204 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16205 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16205 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16206 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 16206 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 16207 | ······tags: | 16207 | ······tags: |
| 16208 | ······-·CJIS-5.5.2.2 | 16208 | ······-·CJIS-5.5.2.2 |
| 16209 | ······-·NIST-800-171-3.4.5 | 16209 | ······-·NIST-800-171-3.4.5 |
| 16210 | ······-·NIST-800-53-AC-6(1) | 16210 | ······-·NIST-800-53-AC-6(1) |
| 16211 | ······-·NIST-800-53-CM-6(a) | 16211 | ······-·NIST-800-53-CM-6(a) |
| Offset 16234, 16 lines modified | Offset 16234, 16 lines modified | ||
| 16234 | ······-·no_reboot_needed | 16234 | ······-·no_reboot_needed |
| 16235 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg | 16235 | ····-·name:·Test·for·existence·/boot/grub/grub.cfg |
| 16236 | ······stat: | 16236 | ······stat: |
| 16237 | ········path:·/boot/grub/grub.cfg | 16237 | ········path:·/boot/grub/grub.cfg |
| 16238 | ······register:·file_exists | 16238 | ······register:·file_exists |
| 16239 | ······when: | 16239 | ······when: |
| 16240 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16241 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16240 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16241 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16242 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16242 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16243 | ······tags: | 16243 | ······tags: |
| 16244 | ······-·NIST-800-171-3.4.5 | 16244 | ······-·NIST-800-171-3.4.5 |
| 16245 | ······-·NIST-800-53-AC-6(1) | 16245 | ······-·NIST-800-53-AC-6(1) |
| 16246 | ······-·NIST-800-53-CM-6(a) | 16246 | ······-·NIST-800-53-CM-6(a) |
| 16247 | ······-·configure_strategy | 16247 | ······-·configure_strategy |
| 16248 | ······-·file_permissions_grub2_cfg | 16248 | ······-·file_permissions_grub2_cfg |
| Offset 16253, 16 lines modified | Offset 16253, 16 lines modified | ||
| 16253 | ······-·no_reboot_needed | 16253 | ······-·no_reboot_needed |
| 16254 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 16254 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 16255 | ······file: | 16255 | ······file: |
| 16256 | ········path:·/boot/grub/grub.cfg | 16256 | ········path:·/boot/grub/grub.cfg |
| 16257 | ········mode:·u-xs,g-xwrs,o-xwrt | 16257 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 16258 | ······when: | 16258 | ······when: |
| 16259 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16260 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 16259 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 16260 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 16261 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16261 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16262 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 16262 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 16263 | ······tags: | 16263 | ······tags: |
| 16264 | ······-·NIST-800-171-3.4.5 | 16264 | ······-·NIST-800-171-3.4.5 |
| 16265 | ······-·NIST-800-53-AC-6(1) | 16265 | ······-·NIST-800-53-AC-6(1) |
| 16266 | ······-·NIST-800-53-CM-6(a) | 16266 | ······-·NIST-800-53-CM-6(a) |
| 16267 | ······-·configure_strategy | 16267 | ······-·configure_strategy |
| Offset 8715, 16 lines modified | Offset 8715, 16 lines modified | ||
| 8715 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 8715 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 8716 | ··find: | 8716 | ··find: |
| 8717 | ····paths:·/etc/audit/rules.d/ | 8717 | ····paths:·/etc/audit/rules.d/ |
| 8718 | ····patterns:·'*.rules' | 8718 | ····patterns:·'*.rules' |
| 8719 | ··register:·find_rules_d | 8719 | ··register:·find_rules_d |
| 8720 | ··when: | 8720 | ··when: |
| 8721 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8722 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8721 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8722 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8723 | ··tags: | 8723 | ··tags: |
| 8724 | ··-·CJIS-5.4.1.1 | 8724 | ··-·CJIS-5.4.1.1 |
| 8725 | ··-·NIST-800-171-3.3.1 | 8725 | ··-·NIST-800-171-3.3.1 |
| 8726 | ··-·NIST-800-171-3.4.3 | 8726 | ··-·NIST-800-171-3.4.3 |
| 8727 | ··-·NIST-800-53-AC-6(9) | 8727 | ··-·NIST-800-53-AC-6(9) |
| 8728 | ··-·NIST-800-53-CM-6(a) | 8728 | ··-·NIST-800-53-CM-6(a) |
| 8729 | ··-·PCI-DSS-Req-10.5.2 | 8729 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8739, 16 lines modified | Offset 8739, 16 lines modified | ||
| 8739 | ··lineinfile: | 8739 | ··lineinfile: |
| 8740 | ····path:·'{{·item·}}' | 8740 | ····path:·'{{·item·}}' |
| 8741 | ····regexp:·^\s*(?:-e)\s+.*$ | 8741 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 8742 | ····state:·absent | 8742 | ····state:·absent |
| 8743 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 8743 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 8744 | ····}}' | 8744 | ····}}' |
| 8745 | ··when: | 8745 | ··when: |
| 8746 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8747 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8746 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8747 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8748 | ··tags: | 8748 | ··tags: |
| 8749 | ··-·CJIS-5.4.1.1 | 8749 | ··-·CJIS-5.4.1.1 |
| 8750 | ··-·NIST-800-171-3.3.1 | 8750 | ··-·NIST-800-171-3.3.1 |
| 8751 | ··-·NIST-800-171-3.4.3 | 8751 | ··-·NIST-800-171-3.4.3 |
| 8752 | ··-·NIST-800-53-AC-6(9) | 8752 | ··-·NIST-800-53-AC-6(9) |
| 8753 | ··-·NIST-800-53-CM-6(a) | 8753 | ··-·NIST-800-53-CM-6(a) |
| 8754 | ··-·PCI-DSS-Req-10.5.2 | 8754 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8765, 16 lines modified | Offset 8765, 16 lines modified | ||
| 8765 | ····create:·true | 8765 | ····create:·true |
| 8766 | ····line:·-e·2 | 8766 | ····line:·-e·2 |
| 8767 | ····mode:·o-rwx | 8767 | ····mode:·o-rwx |
| 8768 | ··loop: | 8768 | ··loop: |
| 8769 | ··-·/etc/audit/audit.rules | 8769 | ··-·/etc/audit/audit.rules |
| 8770 | ··-·/etc/audit/rules.d/immutable.rules | 8770 | ··-·/etc/audit/rules.d/immutable.rules |
| 8771 | ··when: | 8771 | ··when: |
| 8772 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8773 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8772 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8773 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8774 | ··tags: | 8774 | ··tags: |
| 8775 | ··-·CJIS-5.4.1.1 | 8775 | ··-·CJIS-5.4.1.1 |
| 8776 | ··-·NIST-800-171-3.3.1 | 8776 | ··-·NIST-800-171-3.3.1 |
| 8777 | ··-·NIST-800-171-3.4.3 | 8777 | ··-·NIST-800-171-3.4.3 |
| 8778 | ··-·NIST-800-53-AC-6(9) | 8778 | ··-·NIST-800-53-AC-6(9) |
| 8779 | ··-·NIST-800-53-CM-6(a) | 8779 | ··-·NIST-800-53-CM-6(a) |
| 8780 | ··-·PCI-DSS-Req-10.5.2 | 8780 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 9118, 16 lines modified | Offset 9118, 16 lines modified | ||
| 9118 | ··-·reboot_required | 9118 | ··-·reboot_required |
| 9119 | ··-·restrict_strategy | 9119 | ··-·restrict_strategy |
| 9120 | -·name:·Set·architecture·for·audit·mount·tasks | 9120 | -·name:·Set·architecture·for·audit·mount·tasks |
| 9121 | ··set_fact: | 9121 | ··set_fact: |
| 9122 | ····audit_arch:·b64 | 9122 | ····audit_arch:·b64 |
| 9123 | ··when: | 9123 | ··when: |
| 9124 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9125 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9124 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9125 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9126 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 9126 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 9127 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 9127 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 9128 | ··tags: | 9128 | ··tags: |
| 9129 | ··-·CJIS-5.4.1.1 | 9129 | ··-·CJIS-5.4.1.1 |
| 9130 | ··-·NIST-800-171-3.1.7 | 9130 | ··-·NIST-800-171-3.1.7 |
| 9131 | ··-·NIST-800-53-AC-6(9) | 9131 | ··-·NIST-800-53-AC-6(9) |
| 9132 | ··-·NIST-800-53-AU-12(c) | 9132 | ··-·NIST-800-53-AU-12(c) |
| Offset 9258, 16 lines modified | Offset 9258, 16 lines modified | ||
| 9258 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9258 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9259 | ········-F·auid!=unset·-F·key=perm_mod | 9259 | ········-F·auid!=unset·-F·key=perm_mod |
| 9260 | ······create:·true | 9260 | ······create:·true |
| 9261 | ······mode:·o-rwx | 9261 | ······mode:·o-rwx |
| 9262 | ······state:·present | 9262 | ······state:·present |
| 9263 | ····when:·syscalls_found·|·length·==·0 | 9263 | ····when:·syscalls_found·|·length·==·0 |
| 9264 | ··when: | 9264 | ··when: |
| 9265 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9266 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9265 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9266 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9267 | ··tags: | 9267 | ··tags: |
| 9268 | ··-·CJIS-5.4.1.1 | 9268 | ··-·CJIS-5.4.1.1 |
| 9269 | ··-·NIST-800-171-3.1.7 | 9269 | ··-·NIST-800-171-3.1.7 |
| 9270 | ··-·NIST-800-53-AC-6(9) | 9270 | ··-·NIST-800-53-AC-6(9) |
| 9271 | ··-·NIST-800-53-AU-12(c) | 9271 | ··-·NIST-800-53-AU-12(c) |
| 9272 | ··-·NIST-800-53-AU-2(d) | 9272 | ··-·NIST-800-53-AU-2(d) |
| 9273 | ··-·NIST-800-53-CM-6(a) | 9273 | ··-·NIST-800-53-CM-6(a) |
| Offset 9396, 16 lines modified | Offset 9396, 16 lines modified | ||
| 9396 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9396 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9397 | ········-F·auid!=unset·-F·key=perm_mod | 9397 | ········-F·auid!=unset·-F·key=perm_mod |
| 9398 | ······create:·true | 9398 | ······create:·true |
| 9399 | ······mode:·o-rwx | 9399 | ······mode:·o-rwx |
| 9400 | ······state:·present | 9400 | ······state:·present |
| 9401 | ····when:·syscalls_found·|·length·==·0 | 9401 | ····when:·syscalls_found·|·length·==·0 |
| 9402 | ··when: | 9402 | ··when: |
| 9403 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9404 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9403 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9404 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9405 | ··-·audit_arch·==·"b64" | 9405 | ··-·audit_arch·==·"b64" |
| 9406 | ··tags: | 9406 | ··tags: |
| 9407 | ··-·CJIS-5.4.1.1 | 9407 | ··-·CJIS-5.4.1.1 |
| 9408 | ··-·NIST-800-171-3.1.7 | 9408 | ··-·NIST-800-171-3.1.7 |
| 9409 | ··-·NIST-800-53-AC-6(9) | 9409 | ··-·NIST-800-53-AC-6(9) |
| 9410 | ··-·NIST-800-53-AU-12(c) | 9410 | ··-·NIST-800-53-AU-12(c) |
| 9411 | ··-·NIST-800-53-AU-2(d) | 9411 | ··-·NIST-800-53-AU-2(d) |
| Offset 9414, 15 lines modified | Offset 9414, 15 lines modified | ||
| 9414 | ··-·audit_rules_media_export | 9414 | ··-·audit_rules_media_export |
| 9415 | ··-·low_complexity | 9415 | ··-·low_complexity |
| 9416 | ··-·low_disruption | 9416 | ··-·low_disruption |
| 9417 | ··-·medium_severity | 9417 | ··-·medium_severity |
| 9418 | ··-·reboot_required | 9418 | ··-·reboot_required |
| 9419 | ··-·restrict_strategy</xccdf-1.2:fix> | 9419 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 9420 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms | 9420 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms |
| 9421 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'audit'·2>/dev/null·|·grep·-q·installe | 9421 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'audit'·2>/dev/null·|·grep·-q·installed;·then |
| 9422 | #·First·perform·the·remediation·of·the·syscall·rule | 9422 | #·First·perform·the·remediation·of·the·syscall·rule |
| 9423 | #·Retrieve·hardware·architecture·of·the·underlying·system | 9423 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 9424 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 9424 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 9425 | for·ARCH·in·"${RULE_ARCHS[@]}" | 9425 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 9426 | do | 9426 | do |
| Offset 10300, 16 lines modified | Offset 10300, 16 lines modified | ||
| 10300 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 10300 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 10301 | ··find: | 10301 | ··find: |
| 10302 | ····paths:·/etc/audit/rules.d | 10302 | ····paths:·/etc/audit/rules.d |
| Max diff block lines reached; 111430/116446 bytes (95.69%) of diff not shown. | |||
| Offset 8715, 16 lines modified | Offset 8715, 16 lines modified | ||
| 8715 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 8715 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 8716 | ··find: | 8716 | ··find: |
| 8717 | ····paths:·/etc/audit/rules.d/ | 8717 | ····paths:·/etc/audit/rules.d/ |
| 8718 | ····patterns:·'*.rules' | 8718 | ····patterns:·'*.rules' |
| 8719 | ··register:·find_rules_d | 8719 | ··register:·find_rules_d |
| 8720 | ··when: | 8720 | ··when: |
| 8721 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8722 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8721 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8722 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8723 | ··tags: | 8723 | ··tags: |
| 8724 | ··-·CJIS-5.4.1.1 | 8724 | ··-·CJIS-5.4.1.1 |
| 8725 | ··-·NIST-800-171-3.3.1 | 8725 | ··-·NIST-800-171-3.3.1 |
| 8726 | ··-·NIST-800-171-3.4.3 | 8726 | ··-·NIST-800-171-3.4.3 |
| 8727 | ··-·NIST-800-53-AC-6(9) | 8727 | ··-·NIST-800-53-AC-6(9) |
| 8728 | ··-·NIST-800-53-CM-6(a) | 8728 | ··-·NIST-800-53-CM-6(a) |
| 8729 | ··-·PCI-DSS-Req-10.5.2 | 8729 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8739, 16 lines modified | Offset 8739, 16 lines modified | ||
| 8739 | ··lineinfile: | 8739 | ··lineinfile: |
| 8740 | ····path:·'{{·item·}}' | 8740 | ····path:·'{{·item·}}' |
| 8741 | ····regexp:·^\s*(?:-e)\s+.*$ | 8741 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 8742 | ····state:·absent | 8742 | ····state:·absent |
| 8743 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 8743 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 8744 | ····}}' | 8744 | ····}}' |
| 8745 | ··when: | 8745 | ··when: |
| 8746 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8747 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8746 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8747 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8748 | ··tags: | 8748 | ··tags: |
| 8749 | ··-·CJIS-5.4.1.1 | 8749 | ··-·CJIS-5.4.1.1 |
| 8750 | ··-·NIST-800-171-3.3.1 | 8750 | ··-·NIST-800-171-3.3.1 |
| 8751 | ··-·NIST-800-171-3.4.3 | 8751 | ··-·NIST-800-171-3.4.3 |
| 8752 | ··-·NIST-800-53-AC-6(9) | 8752 | ··-·NIST-800-53-AC-6(9) |
| 8753 | ··-·NIST-800-53-CM-6(a) | 8753 | ··-·NIST-800-53-CM-6(a) |
| 8754 | ··-·PCI-DSS-Req-10.5.2 | 8754 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8765, 16 lines modified | Offset 8765, 16 lines modified | ||
| 8765 | ····create:·true | 8765 | ····create:·true |
| 8766 | ····line:·-e·2 | 8766 | ····line:·-e·2 |
| 8767 | ····mode:·o-rwx | 8767 | ····mode:·o-rwx |
| 8768 | ··loop: | 8768 | ··loop: |
| 8769 | ··-·/etc/audit/audit.rules | 8769 | ··-·/etc/audit/audit.rules |
| 8770 | ··-·/etc/audit/rules.d/immutable.rules | 8770 | ··-·/etc/audit/rules.d/immutable.rules |
| 8771 | ··when: | 8771 | ··when: |
| 8772 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8773 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8772 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8773 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8774 | ··tags: | 8774 | ··tags: |
| 8775 | ··-·CJIS-5.4.1.1 | 8775 | ··-·CJIS-5.4.1.1 |
| 8776 | ··-·NIST-800-171-3.3.1 | 8776 | ··-·NIST-800-171-3.3.1 |
| 8777 | ··-·NIST-800-171-3.4.3 | 8777 | ··-·NIST-800-171-3.4.3 |
| 8778 | ··-·NIST-800-53-AC-6(9) | 8778 | ··-·NIST-800-53-AC-6(9) |
| 8779 | ··-·NIST-800-53-CM-6(a) | 8779 | ··-·NIST-800-53-CM-6(a) |
| 8780 | ··-·PCI-DSS-Req-10.5.2 | 8780 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 9118, 16 lines modified | Offset 9118, 16 lines modified | ||
| 9118 | ··-·reboot_required | 9118 | ··-·reboot_required |
| 9119 | ··-·restrict_strategy | 9119 | ··-·restrict_strategy |
| 9120 | -·name:·Set·architecture·for·audit·mount·tasks | 9120 | -·name:·Set·architecture·for·audit·mount·tasks |
| 9121 | ··set_fact: | 9121 | ··set_fact: |
| 9122 | ····audit_arch:·b64 | 9122 | ····audit_arch:·b64 |
| 9123 | ··when: | 9123 | ··when: |
| 9124 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9125 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9124 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9125 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9126 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 9126 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 9127 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 9127 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 9128 | ··tags: | 9128 | ··tags: |
| 9129 | ··-·CJIS-5.4.1.1 | 9129 | ··-·CJIS-5.4.1.1 |
| 9130 | ··-·NIST-800-171-3.1.7 | 9130 | ··-·NIST-800-171-3.1.7 |
| 9131 | ··-·NIST-800-53-AC-6(9) | 9131 | ··-·NIST-800-53-AC-6(9) |
| 9132 | ··-·NIST-800-53-AU-12(c) | 9132 | ··-·NIST-800-53-AU-12(c) |
| Offset 9258, 16 lines modified | Offset 9258, 16 lines modified | ||
| 9258 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9258 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9259 | ········-F·auid!=unset·-F·key=perm_mod | 9259 | ········-F·auid!=unset·-F·key=perm_mod |
| 9260 | ······create:·true | 9260 | ······create:·true |
| 9261 | ······mode:·o-rwx | 9261 | ······mode:·o-rwx |
| 9262 | ······state:·present | 9262 | ······state:·present |
| 9263 | ····when:·syscalls_found·|·length·==·0 | 9263 | ····when:·syscalls_found·|·length·==·0 |
| 9264 | ··when: | 9264 | ··when: |
| 9265 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9266 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9265 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9266 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9267 | ··tags: | 9267 | ··tags: |
| 9268 | ··-·CJIS-5.4.1.1 | 9268 | ··-·CJIS-5.4.1.1 |
| 9269 | ··-·NIST-800-171-3.1.7 | 9269 | ··-·NIST-800-171-3.1.7 |
| 9270 | ··-·NIST-800-53-AC-6(9) | 9270 | ··-·NIST-800-53-AC-6(9) |
| 9271 | ··-·NIST-800-53-AU-12(c) | 9271 | ··-·NIST-800-53-AU-12(c) |
| 9272 | ··-·NIST-800-53-AU-2(d) | 9272 | ··-·NIST-800-53-AU-2(d) |
| 9273 | ··-·NIST-800-53-CM-6(a) | 9273 | ··-·NIST-800-53-CM-6(a) |
| Offset 9396, 16 lines modified | Offset 9396, 16 lines modified | ||
| 9396 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9396 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9397 | ········-F·auid!=unset·-F·key=perm_mod | 9397 | ········-F·auid!=unset·-F·key=perm_mod |
| 9398 | ······create:·true | 9398 | ······create:·true |
| 9399 | ······mode:·o-rwx | 9399 | ······mode:·o-rwx |
| 9400 | ······state:·present | 9400 | ······state:·present |
| 9401 | ····when:·syscalls_found·|·length·==·0 | 9401 | ····when:·syscalls_found·|·length·==·0 |
| 9402 | ··when: | 9402 | ··when: |
| 9403 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9404 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9403 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9404 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9405 | ··-·audit_arch·==·"b64" | 9405 | ··-·audit_arch·==·"b64" |
| 9406 | ··tags: | 9406 | ··tags: |
| 9407 | ··-·CJIS-5.4.1.1 | 9407 | ··-·CJIS-5.4.1.1 |
| 9408 | ··-·NIST-800-171-3.1.7 | 9408 | ··-·NIST-800-171-3.1.7 |
| 9409 | ··-·NIST-800-53-AC-6(9) | 9409 | ··-·NIST-800-53-AC-6(9) |
| 9410 | ··-·NIST-800-53-AU-12(c) | 9410 | ··-·NIST-800-53-AU-12(c) |
| 9411 | ··-·NIST-800-53-AU-2(d) | 9411 | ··-·NIST-800-53-AU-2(d) |
| Offset 9414, 15 lines modified | Offset 9414, 15 lines modified | ||
| 9414 | ··-·audit_rules_media_export | 9414 | ··-·audit_rules_media_export |
| 9415 | ··-·low_complexity | 9415 | ··-·low_complexity |
| 9416 | ··-·low_disruption | 9416 | ··-·low_disruption |
| 9417 | ··-·medium_severity | 9417 | ··-·medium_severity |
| 9418 | ··-·reboot_required | 9418 | ··-·reboot_required |
| 9419 | ··-·restrict_strategy</xccdf-1.2:fix> | 9419 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 9420 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms | 9420 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms |
| 9421 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'audit'·2>/dev/null·|·grep·-q·installe | 9421 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'audit'·2>/dev/null·|·grep·-q·installed;·then |
| 9422 | #·First·perform·the·remediation·of·the·syscall·rule | 9422 | #·First·perform·the·remediation·of·the·syscall·rule |
| 9423 | #·Retrieve·hardware·architecture·of·the·underlying·system | 9423 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 9424 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 9424 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 9425 | for·ARCH·in·"${RULE_ARCHS[@]}" | 9425 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 9426 | do | 9426 | do |
| Offset 10300, 16 lines modified | Offset 10300, 16 lines modified | ||
| 10300 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 10300 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 10301 | ··find: | 10301 | ··find: |
| 10302 | ····paths:·/etc/audit/rules.d | 10302 | ····paths:·/etc/audit/rules.d |
| Max diff block lines reached; 111430/116446 bytes (95.69%) of diff not shown. | |||
| Offset 8611, 16 lines modified | Offset 8611, 16 lines modified | ||
| 8611 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 8611 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 8612 | ··find: | 8612 | ··find: |
| 8613 | ····paths:·/etc/audit/rules.d/ | 8613 | ····paths:·/etc/audit/rules.d/ |
| 8614 | ····patterns:·'*.rules' | 8614 | ····patterns:·'*.rules' |
| 8615 | ··register:·find_rules_d | 8615 | ··register:·find_rules_d |
| 8616 | ··when: | 8616 | ··when: |
| 8617 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8618 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8617 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8618 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8619 | ··tags: | 8619 | ··tags: |
| 8620 | ··-·CJIS-5.4.1.1 | 8620 | ··-·CJIS-5.4.1.1 |
| 8621 | ··-·NIST-800-171-3.3.1 | 8621 | ··-·NIST-800-171-3.3.1 |
| 8622 | ··-·NIST-800-171-3.4.3 | 8622 | ··-·NIST-800-171-3.4.3 |
| 8623 | ··-·NIST-800-53-AC-6(9) | 8623 | ··-·NIST-800-53-AC-6(9) |
| 8624 | ··-·NIST-800-53-CM-6(a) | 8624 | ··-·NIST-800-53-CM-6(a) |
| 8625 | ··-·PCI-DSS-Req-10.5.2 | 8625 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8635, 16 lines modified | Offset 8635, 16 lines modified | ||
| 8635 | ··lineinfile: | 8635 | ··lineinfile: |
| 8636 | ····path:·'{{·item·}}' | 8636 | ····path:·'{{·item·}}' |
| 8637 | ····regexp:·^\s*(?:-e)\s+.*$ | 8637 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 8638 | ····state:·absent | 8638 | ····state:·absent |
| 8639 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 8639 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 8640 | ····}}' | 8640 | ····}}' |
| 8641 | ··when: | 8641 | ··when: |
| 8642 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8643 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8642 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8643 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8644 | ··tags: | 8644 | ··tags: |
| 8645 | ··-·CJIS-5.4.1.1 | 8645 | ··-·CJIS-5.4.1.1 |
| 8646 | ··-·NIST-800-171-3.3.1 | 8646 | ··-·NIST-800-171-3.3.1 |
| 8647 | ··-·NIST-800-171-3.4.3 | 8647 | ··-·NIST-800-171-3.4.3 |
| 8648 | ··-·NIST-800-53-AC-6(9) | 8648 | ··-·NIST-800-53-AC-6(9) |
| 8649 | ··-·NIST-800-53-CM-6(a) | 8649 | ··-·NIST-800-53-CM-6(a) |
| 8650 | ··-·PCI-DSS-Req-10.5.2 | 8650 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8661, 16 lines modified | Offset 8661, 16 lines modified | ||
| 8661 | ····create:·true | 8661 | ····create:·true |
| 8662 | ····line:·-e·2 | 8662 | ····line:·-e·2 |
| 8663 | ····mode:·o-rwx | 8663 | ····mode:·o-rwx |
| 8664 | ··loop: | 8664 | ··loop: |
| 8665 | ··-·/etc/audit/audit.rules | 8665 | ··-·/etc/audit/audit.rules |
| 8666 | ··-·/etc/audit/rules.d/immutable.rules | 8666 | ··-·/etc/audit/rules.d/immutable.rules |
| 8667 | ··when: | 8667 | ··when: |
| 8668 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8669 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8668 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8669 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 8670 | ··tags: | 8670 | ··tags: |
| 8671 | ··-·CJIS-5.4.1.1 | 8671 | ··-·CJIS-5.4.1.1 |
| 8672 | ··-·NIST-800-171-3.3.1 | 8672 | ··-·NIST-800-171-3.3.1 |
| 8673 | ··-·NIST-800-171-3.4.3 | 8673 | ··-·NIST-800-171-3.4.3 |
| 8674 | ··-·NIST-800-53-AC-6(9) | 8674 | ··-·NIST-800-53-AC-6(9) |
| 8675 | ··-·NIST-800-53-CM-6(a) | 8675 | ··-·NIST-800-53-CM-6(a) |
| 8676 | ··-·PCI-DSS-Req-10.5.2 | 8676 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 9014, 16 lines modified | Offset 9014, 16 lines modified | ||
| 9014 | ··-·reboot_required | 9014 | ··-·reboot_required |
| 9015 | ··-·restrict_strategy | 9015 | ··-·restrict_strategy |
| 9016 | -·name:·Set·architecture·for·audit·mount·tasks | 9016 | -·name:·Set·architecture·for·audit·mount·tasks |
| 9017 | ··set_fact: | 9017 | ··set_fact: |
| 9018 | ····audit_arch:·b64 | 9018 | ····audit_arch:·b64 |
| 9019 | ··when: | 9019 | ··when: |
| 9020 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9021 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9020 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9021 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9022 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 9022 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 9023 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 9023 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 9024 | ··tags: | 9024 | ··tags: |
| 9025 | ··-·CJIS-5.4.1.1 | 9025 | ··-·CJIS-5.4.1.1 |
| 9026 | ··-·NIST-800-171-3.1.7 | 9026 | ··-·NIST-800-171-3.1.7 |
| 9027 | ··-·NIST-800-53-AC-6(9) | 9027 | ··-·NIST-800-53-AC-6(9) |
| 9028 | ··-·NIST-800-53-AU-12(c) | 9028 | ··-·NIST-800-53-AU-12(c) |
| Offset 9154, 16 lines modified | Offset 9154, 16 lines modified | ||
| 9154 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9154 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9155 | ········-F·auid!=unset·-F·key=perm_mod | 9155 | ········-F·auid!=unset·-F·key=perm_mod |
| 9156 | ······create:·true | 9156 | ······create:·true |
| 9157 | ······mode:·o-rwx | 9157 | ······mode:·o-rwx |
| 9158 | ······state:·present | 9158 | ······state:·present |
| 9159 | ····when:·syscalls_found·|·length·==·0 | 9159 | ····when:·syscalls_found·|·length·==·0 |
| 9160 | ··when: | 9160 | ··when: |
| 9161 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9162 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9161 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9162 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9163 | ··tags: | 9163 | ··tags: |
| 9164 | ··-·CJIS-5.4.1.1 | 9164 | ··-·CJIS-5.4.1.1 |
| 9165 | ··-·NIST-800-171-3.1.7 | 9165 | ··-·NIST-800-171-3.1.7 |
| 9166 | ··-·NIST-800-53-AC-6(9) | 9166 | ··-·NIST-800-53-AC-6(9) |
| 9167 | ··-·NIST-800-53-AU-12(c) | 9167 | ··-·NIST-800-53-AU-12(c) |
| 9168 | ··-·NIST-800-53-AU-2(d) | 9168 | ··-·NIST-800-53-AU-2(d) |
| 9169 | ··-·NIST-800-53-CM-6(a) | 9169 | ··-·NIST-800-53-CM-6(a) |
| Offset 9292, 16 lines modified | Offset 9292, 16 lines modified | ||
| 9292 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9292 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9293 | ········-F·auid!=unset·-F·key=perm_mod | 9293 | ········-F·auid!=unset·-F·key=perm_mod |
| 9294 | ······create:·true | 9294 | ······create:·true |
| 9295 | ······mode:·o-rwx | 9295 | ······mode:·o-rwx |
| 9296 | ······state:·present | 9296 | ······state:·present |
| 9297 | ····when:·syscalls_found·|·length·==·0 | 9297 | ····when:·syscalls_found·|·length·==·0 |
| 9298 | ··when: | 9298 | ··when: |
| 9299 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9300 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 9299 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 9300 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 9301 | ··-·audit_arch·==·"b64" | 9301 | ··-·audit_arch·==·"b64" |
| 9302 | ··tags: | 9302 | ··tags: |
| 9303 | ··-·CJIS-5.4.1.1 | 9303 | ··-·CJIS-5.4.1.1 |
| 9304 | ··-·NIST-800-171-3.1.7 | 9304 | ··-·NIST-800-171-3.1.7 |
| 9305 | ··-·NIST-800-53-AC-6(9) | 9305 | ··-·NIST-800-53-AC-6(9) |
| 9306 | ··-·NIST-800-53-AU-12(c) | 9306 | ··-·NIST-800-53-AU-12(c) |
| 9307 | ··-·NIST-800-53-AU-2(d) | 9307 | ··-·NIST-800-53-AU-2(d) |
| Offset 9310, 15 lines modified | Offset 9310, 15 lines modified | ||
| 9310 | ··-·audit_rules_media_export | 9310 | ··-·audit_rules_media_export |
| 9311 | ··-·low_complexity | 9311 | ··-·low_complexity |
| 9312 | ··-·low_disruption | 9312 | ··-·low_disruption |
| 9313 | ··-·medium_severity | 9313 | ··-·medium_severity |
| 9314 | ··-·reboot_required | 9314 | ··-·reboot_required |
| 9315 | ··-·restrict_strategy</xccdf-1.2:fix> | 9315 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 9316 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms | 9316 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms |
| 9317 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'audit'·2>/dev/null·|·grep·-q·installe | 9317 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'audit'·2>/dev/null·|·grep·-q·installed;·then |
| 9318 | #·First·perform·the·remediation·of·the·syscall·rule | 9318 | #·First·perform·the·remediation·of·the·syscall·rule |
| 9319 | #·Retrieve·hardware·architecture·of·the·underlying·system | 9319 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 9320 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 9320 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 9321 | for·ARCH·in·"${RULE_ARCHS[@]}" | 9321 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 9322 | do | 9322 | do |
| Offset 10196, 16 lines modified | Offset 10196, 16 lines modified | ||
| 10196 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 10196 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 10197 | ··find: | 10197 | ··find: |
| 10198 | ····paths:·/etc/audit/rules.d | 10198 | ····paths:·/etc/audit/rules.d |
| Max diff block lines reached; 111106/116118 bytes (95.68%) of diff not shown. | |||
| Offset 16284, 16 lines modified | Offset 16284, 16 lines modified | ||
| 16284 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 16284 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 16285 | ··find: | 16285 | ··find: |
| 16286 | ····paths:·/etc/audit/rules.d/ | 16286 | ····paths:·/etc/audit/rules.d/ |
| 16287 | ····patterns:·'*.rules' | 16287 | ····patterns:·'*.rules' |
| 16288 | ··register:·find_rules_d | 16288 | ··register:·find_rules_d |
| 16289 | ··when: | 16289 | ··when: |
| 16290 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16291 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16290 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16291 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16292 | ··tags: | 16292 | ··tags: |
| 16293 | ··-·CJIS-5.4.1.1 | 16293 | ··-·CJIS-5.4.1.1 |
| 16294 | ··-·NIST-800-171-3.3.1 | 16294 | ··-·NIST-800-171-3.3.1 |
| 16295 | ··-·NIST-800-171-3.4.3 | 16295 | ··-·NIST-800-171-3.4.3 |
| 16296 | ··-·NIST-800-53-AC-6(9) | 16296 | ··-·NIST-800-53-AC-6(9) |
| 16297 | ··-·NIST-800-53-CM-6(a) | 16297 | ··-·NIST-800-53-CM-6(a) |
| 16298 | ··-·PCI-DSS-Req-10.5.2 | 16298 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16308, 16 lines modified | Offset 16308, 16 lines modified | ||
| 16308 | ··lineinfile: | 16308 | ··lineinfile: |
| 16309 | ····path:·'{{·item·}}' | 16309 | ····path:·'{{·item·}}' |
| 16310 | ····regexp:·^\s*(?:-e)\s+.*$ | 16310 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 16311 | ····state:·absent | 16311 | ····state:·absent |
| 16312 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 16312 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 16313 | ····}}' | 16313 | ····}}' |
| 16314 | ··when: | 16314 | ··when: |
| 16315 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16316 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16315 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16316 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16317 | ··tags: | 16317 | ··tags: |
| 16318 | ··-·CJIS-5.4.1.1 | 16318 | ··-·CJIS-5.4.1.1 |
| 16319 | ··-·NIST-800-171-3.3.1 | 16319 | ··-·NIST-800-171-3.3.1 |
| 16320 | ··-·NIST-800-171-3.4.3 | 16320 | ··-·NIST-800-171-3.4.3 |
| 16321 | ··-·NIST-800-53-AC-6(9) | 16321 | ··-·NIST-800-53-AC-6(9) |
| 16322 | ··-·NIST-800-53-CM-6(a) | 16322 | ··-·NIST-800-53-CM-6(a) |
| 16323 | ··-·PCI-DSS-Req-10.5.2 | 16323 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16334, 16 lines modified | Offset 16334, 16 lines modified | ||
| 16334 | ····create:·true | 16334 | ····create:·true |
| 16335 | ····line:·-e·2 | 16335 | ····line:·-e·2 |
| 16336 | ····mode:·o-rwx | 16336 | ····mode:·o-rwx |
| 16337 | ··loop: | 16337 | ··loop: |
| 16338 | ··-·/etc/audit/audit.rules | 16338 | ··-·/etc/audit/audit.rules |
| 16339 | ··-·/etc/audit/rules.d/immutable.rules | 16339 | ··-·/etc/audit/rules.d/immutable.rules |
| 16340 | ··when: | 16340 | ··when: |
| 16341 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16342 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16341 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16342 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16343 | ··tags: | 16343 | ··tags: |
| 16344 | ··-·CJIS-5.4.1.1 | 16344 | ··-·CJIS-5.4.1.1 |
| 16345 | ··-·NIST-800-171-3.3.1 | 16345 | ··-·NIST-800-171-3.3.1 |
| 16346 | ··-·NIST-800-171-3.4.3 | 16346 | ··-·NIST-800-171-3.4.3 |
| 16347 | ··-·NIST-800-53-AC-6(9) | 16347 | ··-·NIST-800-53-AC-6(9) |
| 16348 | ··-·NIST-800-53-CM-6(a) | 16348 | ··-·NIST-800-53-CM-6(a) |
| 16349 | ··-·PCI-DSS-Req-10.5.2 | 16349 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16687, 16 lines modified | Offset 16687, 16 lines modified | ||
| 16687 | ··-·reboot_required | 16687 | ··-·reboot_required |
| 16688 | ··-·restrict_strategy | 16688 | ··-·restrict_strategy |
| 16689 | -·name:·Set·architecture·for·audit·mount·tasks | 16689 | -·name:·Set·architecture·for·audit·mount·tasks |
| 16690 | ··set_fact: | 16690 | ··set_fact: |
| 16691 | ····audit_arch:·b64 | 16691 | ····audit_arch:·b64 |
| 16692 | ··when: | 16692 | ··when: |
| 16693 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16694 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16693 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16694 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16695 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 16695 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 16696 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 16696 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 16697 | ··tags: | 16697 | ··tags: |
| 16698 | ··-·CJIS-5.4.1.1 | 16698 | ··-·CJIS-5.4.1.1 |
| 16699 | ··-·NIST-800-171-3.1.7 | 16699 | ··-·NIST-800-171-3.1.7 |
| 16700 | ··-·NIST-800-53-AC-6(9) | 16700 | ··-·NIST-800-53-AC-6(9) |
| 16701 | ··-·NIST-800-53-AU-12(c) | 16701 | ··-·NIST-800-53-AU-12(c) |
| Offset 16827, 16 lines modified | Offset 16827, 16 lines modified | ||
| 16827 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 16827 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 16828 | ········-F·auid!=unset·-F·key=perm_mod | 16828 | ········-F·auid!=unset·-F·key=perm_mod |
| 16829 | ······create:·true | 16829 | ······create:·true |
| 16830 | ······mode:·o-rwx | 16830 | ······mode:·o-rwx |
| 16831 | ······state:·present | 16831 | ······state:·present |
| 16832 | ····when:·syscalls_found·|·length·==·0 | 16832 | ····when:·syscalls_found·|·length·==·0 |
| 16833 | ··when: | 16833 | ··when: |
| 16834 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16835 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16834 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16835 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16836 | ··tags: | 16836 | ··tags: |
| 16837 | ··-·CJIS-5.4.1.1 | 16837 | ··-·CJIS-5.4.1.1 |
| 16838 | ··-·NIST-800-171-3.1.7 | 16838 | ··-·NIST-800-171-3.1.7 |
| 16839 | ··-·NIST-800-53-AC-6(9) | 16839 | ··-·NIST-800-53-AC-6(9) |
| 16840 | ··-·NIST-800-53-AU-12(c) | 16840 | ··-·NIST-800-53-AU-12(c) |
| 16841 | ··-·NIST-800-53-AU-2(d) | 16841 | ··-·NIST-800-53-AU-2(d) |
| 16842 | ··-·NIST-800-53-CM-6(a) | 16842 | ··-·NIST-800-53-CM-6(a) |
| Offset 16965, 16 lines modified | Offset 16965, 16 lines modified | ||
| 16965 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 16965 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 16966 | ········-F·auid!=unset·-F·key=perm_mod | 16966 | ········-F·auid!=unset·-F·key=perm_mod |
| 16967 | ······create:·true | 16967 | ······create:·true |
| 16968 | ······mode:·o-rwx | 16968 | ······mode:·o-rwx |
| 16969 | ······state:·present | 16969 | ······state:·present |
| 16970 | ····when:·syscalls_found·|·length·==·0 | 16970 | ····when:·syscalls_found·|·length·==·0 |
| 16971 | ··when: | 16971 | ··when: |
| 16972 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16973 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16972 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16973 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16974 | ··-·audit_arch·==·"b64" | 16974 | ··-·audit_arch·==·"b64" |
| 16975 | ··tags: | 16975 | ··tags: |
| 16976 | ··-·CJIS-5.4.1.1 | 16976 | ··-·CJIS-5.4.1.1 |
| 16977 | ··-·NIST-800-171-3.1.7 | 16977 | ··-·NIST-800-171-3.1.7 |
| 16978 | ··-·NIST-800-53-AC-6(9) | 16978 | ··-·NIST-800-53-AC-6(9) |
| 16979 | ··-·NIST-800-53-AU-12(c) | 16979 | ··-·NIST-800-53-AU-12(c) |
| 16980 | ··-·NIST-800-53-AU-2(d) | 16980 | ··-·NIST-800-53-AU-2(d) |
| Offset 16983, 15 lines modified | Offset 16983, 15 lines modified | ||
| 16983 | ··-·audit_rules_media_export | 16983 | ··-·audit_rules_media_export |
| 16984 | ··-·low_complexity | 16984 | ··-·low_complexity |
| 16985 | ··-·low_disruption | 16985 | ··-·low_disruption |
| 16986 | ··-·medium_severity | 16986 | ··-·medium_severity |
| 16987 | ··-·reboot_required | 16987 | ··-·reboot_required |
| 16988 | ··-·restrict_strategy</xccdf-1.2:fix> | 16988 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 16989 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms | 16989 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms |
| 16990 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installe | 16990 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed;·then |
| 16991 | #·First·perform·the·remediation·of·the·syscall·rule | 16991 | #·First·perform·the·remediation·of·the·syscall·rule |
| 16992 | #·Retrieve·hardware·architecture·of·the·underlying·system | 16992 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 16993 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 16993 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 16994 | for·ARCH·in·"${RULE_ARCHS[@]}" | 16994 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 16995 | do | 16995 | do |
| Offset 17674, 15 lines modified | Offset 17674, 15 lines modified | ||
| 17674 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12(c)</xccdf-1.2:reference> | 17674 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12(c)</xccdf-1.2:reference> |
| 17675 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12.1(iv)</xccdf-1.2:reference> | 17675 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12.1(iv)</xccdf-1.2:reference> |
| 17676 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000472-GPOS-00217</xccdf-1.2:reference> | 17676 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000472-GPOS-00217</xccdf-1.2:reference> |
| Max diff block lines reached; 267035/272556 bytes (97.97%) of diff not shown. | |||
| Offset 16284, 16 lines modified | Offset 16284, 16 lines modified | ||
| 16284 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 16284 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 16285 | ··find: | 16285 | ··find: |
| 16286 | ····paths:·/etc/audit/rules.d/ | 16286 | ····paths:·/etc/audit/rules.d/ |
| 16287 | ····patterns:·'*.rules' | 16287 | ····patterns:·'*.rules' |
| 16288 | ··register:·find_rules_d | 16288 | ··register:·find_rules_d |
| 16289 | ··when: | 16289 | ··when: |
| 16290 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16291 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16290 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16291 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16292 | ··tags: | 16292 | ··tags: |
| 16293 | ··-·CJIS-5.4.1.1 | 16293 | ··-·CJIS-5.4.1.1 |
| 16294 | ··-·NIST-800-171-3.3.1 | 16294 | ··-·NIST-800-171-3.3.1 |
| 16295 | ··-·NIST-800-171-3.4.3 | 16295 | ··-·NIST-800-171-3.4.3 |
| 16296 | ··-·NIST-800-53-AC-6(9) | 16296 | ··-·NIST-800-53-AC-6(9) |
| 16297 | ··-·NIST-800-53-CM-6(a) | 16297 | ··-·NIST-800-53-CM-6(a) |
| 16298 | ··-·PCI-DSS-Req-10.5.2 | 16298 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16308, 16 lines modified | Offset 16308, 16 lines modified | ||
| 16308 | ··lineinfile: | 16308 | ··lineinfile: |
| 16309 | ····path:·'{{·item·}}' | 16309 | ····path:·'{{·item·}}' |
| 16310 | ····regexp:·^\s*(?:-e)\s+.*$ | 16310 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 16311 | ····state:·absent | 16311 | ····state:·absent |
| 16312 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 16312 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 16313 | ····}}' | 16313 | ····}}' |
| 16314 | ··when: | 16314 | ··when: |
| 16315 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16316 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16315 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16316 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16317 | ··tags: | 16317 | ··tags: |
| 16318 | ··-·CJIS-5.4.1.1 | 16318 | ··-·CJIS-5.4.1.1 |
| 16319 | ··-·NIST-800-171-3.3.1 | 16319 | ··-·NIST-800-171-3.3.1 |
| 16320 | ··-·NIST-800-171-3.4.3 | 16320 | ··-·NIST-800-171-3.4.3 |
| 16321 | ··-·NIST-800-53-AC-6(9) | 16321 | ··-·NIST-800-53-AC-6(9) |
| 16322 | ··-·NIST-800-53-CM-6(a) | 16322 | ··-·NIST-800-53-CM-6(a) |
| 16323 | ··-·PCI-DSS-Req-10.5.2 | 16323 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16334, 16 lines modified | Offset 16334, 16 lines modified | ||
| 16334 | ····create:·true | 16334 | ····create:·true |
| 16335 | ····line:·-e·2 | 16335 | ····line:·-e·2 |
| 16336 | ····mode:·o-rwx | 16336 | ····mode:·o-rwx |
| 16337 | ··loop: | 16337 | ··loop: |
| 16338 | ··-·/etc/audit/audit.rules | 16338 | ··-·/etc/audit/audit.rules |
| 16339 | ··-·/etc/audit/rules.d/immutable.rules | 16339 | ··-·/etc/audit/rules.d/immutable.rules |
| 16340 | ··when: | 16340 | ··when: |
| 16341 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16342 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16341 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16342 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16343 | ··tags: | 16343 | ··tags: |
| 16344 | ··-·CJIS-5.4.1.1 | 16344 | ··-·CJIS-5.4.1.1 |
| 16345 | ··-·NIST-800-171-3.3.1 | 16345 | ··-·NIST-800-171-3.3.1 |
| 16346 | ··-·NIST-800-171-3.4.3 | 16346 | ··-·NIST-800-171-3.4.3 |
| 16347 | ··-·NIST-800-53-AC-6(9) | 16347 | ··-·NIST-800-53-AC-6(9) |
| 16348 | ··-·NIST-800-53-CM-6(a) | 16348 | ··-·NIST-800-53-CM-6(a) |
| 16349 | ··-·PCI-DSS-Req-10.5.2 | 16349 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16687, 16 lines modified | Offset 16687, 16 lines modified | ||
| 16687 | ··-·reboot_required | 16687 | ··-·reboot_required |
| 16688 | ··-·restrict_strategy | 16688 | ··-·restrict_strategy |
| 16689 | -·name:·Set·architecture·for·audit·mount·tasks | 16689 | -·name:·Set·architecture·for·audit·mount·tasks |
| 16690 | ··set_fact: | 16690 | ··set_fact: |
| 16691 | ····audit_arch:·b64 | 16691 | ····audit_arch:·b64 |
| 16692 | ··when: | 16692 | ··when: |
| 16693 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16694 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16693 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16694 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16695 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 16695 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 16696 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 16696 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 16697 | ··tags: | 16697 | ··tags: |
| 16698 | ··-·CJIS-5.4.1.1 | 16698 | ··-·CJIS-5.4.1.1 |
| 16699 | ··-·NIST-800-171-3.1.7 | 16699 | ··-·NIST-800-171-3.1.7 |
| 16700 | ··-·NIST-800-53-AC-6(9) | 16700 | ··-·NIST-800-53-AC-6(9) |
| 16701 | ··-·NIST-800-53-AU-12(c) | 16701 | ··-·NIST-800-53-AU-12(c) |
| Offset 16827, 16 lines modified | Offset 16827, 16 lines modified | ||
| 16827 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 16827 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 16828 | ········-F·auid!=unset·-F·key=perm_mod | 16828 | ········-F·auid!=unset·-F·key=perm_mod |
| 16829 | ······create:·true | 16829 | ······create:·true |
| 16830 | ······mode:·o-rwx | 16830 | ······mode:·o-rwx |
| 16831 | ······state:·present | 16831 | ······state:·present |
| 16832 | ····when:·syscalls_found·|·length·==·0 | 16832 | ····when:·syscalls_found·|·length·==·0 |
| 16833 | ··when: | 16833 | ··when: |
| 16834 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16835 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16834 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16835 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16836 | ··tags: | 16836 | ··tags: |
| 16837 | ··-·CJIS-5.4.1.1 | 16837 | ··-·CJIS-5.4.1.1 |
| 16838 | ··-·NIST-800-171-3.1.7 | 16838 | ··-·NIST-800-171-3.1.7 |
| 16839 | ··-·NIST-800-53-AC-6(9) | 16839 | ··-·NIST-800-53-AC-6(9) |
| 16840 | ··-·NIST-800-53-AU-12(c) | 16840 | ··-·NIST-800-53-AU-12(c) |
| 16841 | ··-·NIST-800-53-AU-2(d) | 16841 | ··-·NIST-800-53-AU-2(d) |
| 16842 | ··-·NIST-800-53-CM-6(a) | 16842 | ··-·NIST-800-53-CM-6(a) |
| Offset 16965, 16 lines modified | Offset 16965, 16 lines modified | ||
| 16965 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 16965 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 16966 | ········-F·auid!=unset·-F·key=perm_mod | 16966 | ········-F·auid!=unset·-F·key=perm_mod |
| 16967 | ······create:·true | 16967 | ······create:·true |
| 16968 | ······mode:·o-rwx | 16968 | ······mode:·o-rwx |
| 16969 | ······state:·present | 16969 | ······state:·present |
| 16970 | ····when:·syscalls_found·|·length·==·0 | 16970 | ····when:·syscalls_found·|·length·==·0 |
| 16971 | ··when: | 16971 | ··when: |
| 16972 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16973 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16972 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16973 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16974 | ··-·audit_arch·==·"b64" | 16974 | ··-·audit_arch·==·"b64" |
| 16975 | ··tags: | 16975 | ··tags: |
| 16976 | ··-·CJIS-5.4.1.1 | 16976 | ··-·CJIS-5.4.1.1 |
| 16977 | ··-·NIST-800-171-3.1.7 | 16977 | ··-·NIST-800-171-3.1.7 |
| 16978 | ··-·NIST-800-53-AC-6(9) | 16978 | ··-·NIST-800-53-AC-6(9) |
| 16979 | ··-·NIST-800-53-AU-12(c) | 16979 | ··-·NIST-800-53-AU-12(c) |
| 16980 | ··-·NIST-800-53-AU-2(d) | 16980 | ··-·NIST-800-53-AU-2(d) |
| Offset 16983, 15 lines modified | Offset 16983, 15 lines modified | ||
| 16983 | ··-·audit_rules_media_export | 16983 | ··-·audit_rules_media_export |
| 16984 | ··-·low_complexity | 16984 | ··-·low_complexity |
| 16985 | ··-·low_disruption | 16985 | ··-·low_disruption |
| 16986 | ··-·medium_severity | 16986 | ··-·medium_severity |
| 16987 | ··-·reboot_required | 16987 | ··-·reboot_required |
| 16988 | ··-·restrict_strategy</xccdf-1.2:fix> | 16988 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 16989 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms | 16989 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms |
| 16990 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installe | 16990 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed;·then |
| 16991 | #·First·perform·the·remediation·of·the·syscall·rule | 16991 | #·First·perform·the·remediation·of·the·syscall·rule |
| 16992 | #·Retrieve·hardware·architecture·of·the·underlying·system | 16992 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 16993 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 16993 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 16994 | for·ARCH·in·"${RULE_ARCHS[@]}" | 16994 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 16995 | do | 16995 | do |
| Offset 17674, 15 lines modified | Offset 17674, 15 lines modified | ||
| 17674 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12(c)</xccdf-1.2:reference> | 17674 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12(c)</xccdf-1.2:reference> |
| 17675 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12.1(iv)</xccdf-1.2:reference> | 17675 | ··············<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12.1(iv)</xccdf-1.2:reference> |
| 17676 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000472-GPOS-00217</xccdf-1.2:reference> | 17676 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000472-GPOS-00217</xccdf-1.2:reference> |
| Max diff block lines reached; 267035/272556 bytes (97.97%) of diff not shown. | |||
| Offset 16180, 16 lines modified | Offset 16180, 16 lines modified | ||
| 16180 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 16180 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 16181 | ··find: | 16181 | ··find: |
| 16182 | ····paths:·/etc/audit/rules.d/ | 16182 | ····paths:·/etc/audit/rules.d/ |
| 16183 | ····patterns:·'*.rules' | 16183 | ····patterns:·'*.rules' |
| 16184 | ··register:·find_rules_d | 16184 | ··register:·find_rules_d |
| 16185 | ··when: | 16185 | ··when: |
| 16186 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16187 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16186 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16187 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16188 | ··tags: | 16188 | ··tags: |
| 16189 | ··-·CJIS-5.4.1.1 | 16189 | ··-·CJIS-5.4.1.1 |
| 16190 | ··-·NIST-800-171-3.3.1 | 16190 | ··-·NIST-800-171-3.3.1 |
| 16191 | ··-·NIST-800-171-3.4.3 | 16191 | ··-·NIST-800-171-3.4.3 |
| 16192 | ··-·NIST-800-53-AC-6(9) | 16192 | ··-·NIST-800-53-AC-6(9) |
| 16193 | ··-·NIST-800-53-CM-6(a) | 16193 | ··-·NIST-800-53-CM-6(a) |
| 16194 | ··-·PCI-DSS-Req-10.5.2 | 16194 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16204, 16 lines modified | Offset 16204, 16 lines modified | ||
| 16204 | ··lineinfile: | 16204 | ··lineinfile: |
| 16205 | ····path:·'{{·item·}}' | 16205 | ····path:·'{{·item·}}' |
| 16206 | ····regexp:·^\s*(?:-e)\s+.*$ | 16206 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 16207 | ····state:·absent | 16207 | ····state:·absent |
| 16208 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 16208 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 16209 | ····}}' | 16209 | ····}}' |
| 16210 | ··when: | 16210 | ··when: |
| 16211 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16212 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16211 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16212 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16213 | ··tags: | 16213 | ··tags: |
| 16214 | ··-·CJIS-5.4.1.1 | 16214 | ··-·CJIS-5.4.1.1 |
| 16215 | ··-·NIST-800-171-3.3.1 | 16215 | ··-·NIST-800-171-3.3.1 |
| 16216 | ··-·NIST-800-171-3.4.3 | 16216 | ··-·NIST-800-171-3.4.3 |
| 16217 | ··-·NIST-800-53-AC-6(9) | 16217 | ··-·NIST-800-53-AC-6(9) |
| 16218 | ··-·NIST-800-53-CM-6(a) | 16218 | ··-·NIST-800-53-CM-6(a) |
| 16219 | ··-·PCI-DSS-Req-10.5.2 | 16219 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16230, 16 lines modified | Offset 16230, 16 lines modified | ||
| 16230 | ····create:·true | 16230 | ····create:·true |
| 16231 | ····line:·-e·2 | 16231 | ····line:·-e·2 |
| 16232 | ····mode:·o-rwx | 16232 | ····mode:·o-rwx |
| 16233 | ··loop: | 16233 | ··loop: |
| 16234 | ··-·/etc/audit/audit.rules | 16234 | ··-·/etc/audit/audit.rules |
| 16235 | ··-·/etc/audit/rules.d/immutable.rules | 16235 | ··-·/etc/audit/rules.d/immutable.rules |
| 16236 | ··when: | 16236 | ··when: |
| 16237 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16238 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16237 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16238 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16239 | ··tags: | 16239 | ··tags: |
| 16240 | ··-·CJIS-5.4.1.1 | 16240 | ··-·CJIS-5.4.1.1 |
| 16241 | ··-·NIST-800-171-3.3.1 | 16241 | ··-·NIST-800-171-3.3.1 |
| 16242 | ··-·NIST-800-171-3.4.3 | 16242 | ··-·NIST-800-171-3.4.3 |
| 16243 | ··-·NIST-800-53-AC-6(9) | 16243 | ··-·NIST-800-53-AC-6(9) |
| 16244 | ··-·NIST-800-53-CM-6(a) | 16244 | ··-·NIST-800-53-CM-6(a) |
| 16245 | ··-·PCI-DSS-Req-10.5.2 | 16245 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 16583, 16 lines modified | Offset 16583, 16 lines modified | ||
| 16583 | ··-·reboot_required | 16583 | ··-·reboot_required |
| 16584 | ··-·restrict_strategy | 16584 | ··-·restrict_strategy |
| 16585 | -·name:·Set·architecture·for·audit·mount·tasks | 16585 | -·name:·Set·architecture·for·audit·mount·tasks |
| 16586 | ··set_fact: | 16586 | ··set_fact: |
| 16587 | ····audit_arch:·b64 | 16587 | ····audit_arch:·b64 |
| 16588 | ··when: | 16588 | ··when: |
| 16589 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16590 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16589 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16590 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16591 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 16591 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 16592 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 16592 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 16593 | ··tags: | 16593 | ··tags: |
| 16594 | ··-·CJIS-5.4.1.1 | 16594 | ··-·CJIS-5.4.1.1 |
| 16595 | ··-·NIST-800-171-3.1.7 | 16595 | ··-·NIST-800-171-3.1.7 |
| 16596 | ··-·NIST-800-53-AC-6(9) | 16596 | ··-·NIST-800-53-AC-6(9) |
| 16597 | ··-·NIST-800-53-AU-12(c) | 16597 | ··-·NIST-800-53-AU-12(c) |
| Offset 16723, 16 lines modified | Offset 16723, 16 lines modified | ||
| 16723 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 16723 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 16724 | ········-F·auid!=unset·-F·key=perm_mod | 16724 | ········-F·auid!=unset·-F·key=perm_mod |
| 16725 | ······create:·true | 16725 | ······create:·true |
| 16726 | ······mode:·o-rwx | 16726 | ······mode:·o-rwx |
| 16727 | ······state:·present | 16727 | ······state:·present |
| 16728 | ····when:·syscalls_found·|·length·==·0 | 16728 | ····when:·syscalls_found·|·length·==·0 |
| 16729 | ··when: | 16729 | ··when: |
| 16730 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16731 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16730 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16731 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16732 | ··tags: | 16732 | ··tags: |
| 16733 | ··-·CJIS-5.4.1.1 | 16733 | ··-·CJIS-5.4.1.1 |
| 16734 | ··-·NIST-800-171-3.1.7 | 16734 | ··-·NIST-800-171-3.1.7 |
| 16735 | ··-·NIST-800-53-AC-6(9) | 16735 | ··-·NIST-800-53-AC-6(9) |
| 16736 | ··-·NIST-800-53-AU-12(c) | 16736 | ··-·NIST-800-53-AU-12(c) |
| 16737 | ··-·NIST-800-53-AU-2(d) | 16737 | ··-·NIST-800-53-AU-2(d) |
| 16738 | ··-·NIST-800-53-CM-6(a) | 16738 | ··-·NIST-800-53-CM-6(a) |
| Offset 16861, 16 lines modified | Offset 16861, 16 lines modified | ||
| 16861 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 16861 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 16862 | ········-F·auid!=unset·-F·key=perm_mod | 16862 | ········-F·auid!=unset·-F·key=perm_mod |
| 16863 | ······create:·true | 16863 | ······create:·true |
| 16864 | ······mode:·o-rwx | 16864 | ······mode:·o-rwx |
| 16865 | ······state:·present | 16865 | ······state:·present |
| 16866 | ····when:·syscalls_found·|·length·==·0 | 16866 | ····when:·syscalls_found·|·length·==·0 |
| 16867 | ··when: | 16867 | ··when: |
| 16868 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16869 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 16868 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 16869 | ··-·'"auditd"·in·ansible_facts.packages' | ||
| 16870 | ··-·audit_arch·==·"b64" | 16870 | ··-·audit_arch·==·"b64" |
| 16871 | ··tags: | 16871 | ··tags: |
| 16872 | ··-·CJIS-5.4.1.1 | 16872 | ··-·CJIS-5.4.1.1 |
| 16873 | ··-·NIST-800-171-3.1.7 | 16873 | ··-·NIST-800-171-3.1.7 |
| 16874 | ··-·NIST-800-53-AC-6(9) | 16874 | ··-·NIST-800-53-AC-6(9) |
| 16875 | ··-·NIST-800-53-AU-12(c) | 16875 | ··-·NIST-800-53-AU-12(c) |
| 16876 | ··-·NIST-800-53-AU-2(d) | 16876 | ··-·NIST-800-53-AU-2(d) |
| Offset 16879, 15 lines modified | Offset 16879, 15 lines modified | ||
| 16879 | ··-·audit_rules_media_export | 16879 | ··-·audit_rules_media_export |
| 16880 | ··-·low_complexity | 16880 | ··-·low_complexity |
| 16881 | ··-·low_disruption | 16881 | ··-·low_disruption |
| 16882 | ··-·medium_severity | 16882 | ··-·medium_severity |
| 16883 | ··-·reboot_required | 16883 | ··-·reboot_required |
| 16884 | ··-·restrict_strategy</xccdf-1.2:fix> | 16884 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 16885 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms | 16885 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_media_export">#·Remediation·is·applicable·only·in·certain·platforms |
| 16886 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installe | 16886 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'auditd'·2>/dev/null·|·grep·-q·installed;·then |
| 16887 | #·First·perform·the·remediation·of·the·syscall·rule | 16887 | #·First·perform·the·remediation·of·the·syscall·rule |
| 16888 | #·Retrieve·hardware·architecture·of·the·underlying·system | 16888 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 16889 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 16889 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 16890 | for·ARCH·in·"${RULE_ARCHS[@]}" | 16890 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 16891 | do | 16891 | do |
| Offset 17570, 15 lines modified | Offset 17570, 15 lines modified | ||
| 17570 | ··········<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12(c)</xccdf-1.2:reference> | 17570 | ··········<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12(c)</xccdf-1.2:reference> |
| 17571 | ··········<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12.1(iv)</xccdf-1.2:reference> | 17571 | ··········<xccdf-1.2:reference·href="http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf">AU-12.1(iv)</xccdf-1.2:reference> |
| 17572 | ··········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000472-GPOS-00217</xccdf-1.2:reference> | 17572 | ··········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000472-GPOS-00217</xccdf-1.2:reference> |
| Max diff block lines reached; 266231/271732 bytes (97.98%) of diff not shown. | |||
| Offset 76545, 16 lines modified | Offset 76545, 16 lines modified | ||
| 76545 | ··-·no_reboot_needed | 76545 | ··-·no_reboot_needed |
| 76546 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 76546 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 76547 | ··stat: | 76547 | ··stat: |
| 76548 | ····path:·/boot/grub/grub.cfg | 76548 | ····path:·/boot/grub/grub.cfg |
| 76549 | ··register:·file_exists | 76549 | ··register:·file_exists |
| 76550 | ··when: | 76550 | ··when: |
| 76551 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76552 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76551 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76552 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76554 | ··tags: | 76554 | ··tags: |
| 76555 | ··-·CJIS-5.5.2.2 | 76555 | ··-·CJIS-5.5.2.2 |
| 76556 | ··-·NIST-800-171-3.4.5 | 76556 | ··-·NIST-800-171-3.4.5 |
| 76557 | ··-·NIST-800-53-AC-6(1) | 76557 | ··-·NIST-800-53-AC-6(1) |
| 76558 | ··-·NIST-800-53-CM-6(a) | 76558 | ··-·NIST-800-53-CM-6(a) |
| 76559 | ··-·PCI-DSS-Req-7.1 | 76559 | ··-·PCI-DSS-Req-7.1 |
| Offset 76566, 16 lines modified | Offset 76566, 16 lines modified | ||
| 76566 | ··-·no_reboot_needed | 76566 | ··-·no_reboot_needed |
| 76567 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 76567 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 76568 | ··file: | 76568 | ··file: |
| 76569 | ····path:·/boot/grub/grub.cfg | 76569 | ····path:·/boot/grub/grub.cfg |
| 76570 | ····owner:·'0' | 76570 | ····owner:·'0' |
| 76571 | ··when: | 76571 | ··when: |
| 76572 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76573 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76572 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76573 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76574 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76574 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76575 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 76575 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 76576 | ··tags: | 76576 | ··tags: |
| 76577 | ··-·CJIS-5.5.2.2 | 76577 | ··-·CJIS-5.5.2.2 |
| 76578 | ··-·NIST-800-171-3.4.5 | 76578 | ··-·NIST-800-171-3.4.5 |
| 76579 | ··-·NIST-800-53-AC-6(1) | 76579 | ··-·NIST-800-53-AC-6(1) |
| 76580 | ··-·NIST-800-53-CM-6(a) | 76580 | ··-·NIST-800-53-CM-6(a) |
| Offset 76583, 15 lines modified | Offset 76583, 15 lines modified | ||
| 76583 | ··-·configure_strategy | 76583 | ··-·configure_strategy |
| 76584 | ··-·file_owner_grub2_cfg | 76584 | ··-·file_owner_grub2_cfg |
| 76585 | ··-·low_complexity | 76585 | ··-·low_complexity |
| 76586 | ··-·low_disruption | 76586 | ··-·low_disruption |
| 76587 | ··-·medium_severity | 76587 | ··-·medium_severity |
| 76588 | ··-·no_reboot_needed</xccdf-1.2:fix> | 76588 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 76589 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 76589 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 76590 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed | 76590 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 76591 | chown·0·/boot/grub/grub.cfg | 76591 | chown·0·/boot/grub/grub.cfg |
| 76592 | else | 76592 | else |
| 76593 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 76593 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 76594 | fi</xccdf-1.2:fix> | 76594 | fi</xccdf-1.2:fix> |
| 76595 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 76595 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 76687, 16 lines modified | Offset 76687, 16 lines modified | ||
| 76687 | ··-·no_reboot_needed | 76687 | ··-·no_reboot_needed |
| 76688 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 76688 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 76689 | ··stat: | 76689 | ··stat: |
| 76690 | ····path:·/boot/grub/grub.cfg | 76690 | ····path:·/boot/grub/grub.cfg |
| 76691 | ··register:·file_exists | 76691 | ··register:·file_exists |
| 76692 | ··when: | 76692 | ··when: |
| 76693 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76694 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76693 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76694 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76696 | ··tags: | 76696 | ··tags: |
| 76697 | ··-·NIST-800-171-3.4.5 | 76697 | ··-·NIST-800-171-3.4.5 |
| 76698 | ··-·NIST-800-53-AC-6(1) | 76698 | ··-·NIST-800-53-AC-6(1) |
| 76699 | ··-·NIST-800-53-CM-6(a) | 76699 | ··-·NIST-800-53-CM-6(a) |
| 76700 | ··-·configure_strategy | 76700 | ··-·configure_strategy |
| 76701 | ··-·file_permissions_grub2_cfg | 76701 | ··-·file_permissions_grub2_cfg |
| Offset 76706, 30 lines modified | Offset 76706, 30 lines modified | ||
| 76706 | ··-·no_reboot_needed | 76706 | ··-·no_reboot_needed |
| 76707 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 76707 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 76708 | ··file: | 76708 | ··file: |
| 76709 | ····path:·/boot/grub/grub.cfg | 76709 | ····path:·/boot/grub/grub.cfg |
| 76710 | ····mode:·u-xs,g-xwrs,o-xwrt | 76710 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 76711 | ··when: | 76711 | ··when: |
| 76712 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76713 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76712 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76713 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76714 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76714 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76715 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 76715 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 76716 | ··tags: | 76716 | ··tags: |
| 76717 | ··-·NIST-800-171-3.4.5 | 76717 | ··-·NIST-800-171-3.4.5 |
| 76718 | ··-·NIST-800-53-AC-6(1) | 76718 | ··-·NIST-800-53-AC-6(1) |
| 76719 | ··-·NIST-800-53-CM-6(a) | 76719 | ··-·NIST-800-53-CM-6(a) |
| 76720 | ··-·configure_strategy | 76720 | ··-·configure_strategy |
| 76721 | ··-·file_permissions_grub2_cfg | 76721 | ··-·file_permissions_grub2_cfg |
| 76722 | ··-·low_complexity | 76722 | ··-·low_complexity |
| 76723 | ··-·low_disruption | 76723 | ··-·low_disruption |
| 76724 | ··-·medium_severity | 76724 | ··-·medium_severity |
| 76725 | ··-·no_reboot_needed</xccdf-1.2:fix> | 76725 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 76726 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_permissions_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 76726 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_permissions_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 76727 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed | 76727 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 76728 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 76728 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 76729 | else | 76729 | else |
| 76730 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 76730 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 76731 | fi</xccdf-1.2:fix> | 76731 | fi</xccdf-1.2:fix> |
| 76732 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 76732 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 76545, 16 lines modified | Offset 76545, 16 lines modified | ||
| 76545 | ··-·no_reboot_needed | 76545 | ··-·no_reboot_needed |
| 76546 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 76546 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 76547 | ··stat: | 76547 | ··stat: |
| 76548 | ····path:·/boot/grub/grub.cfg | 76548 | ····path:·/boot/grub/grub.cfg |
| 76549 | ··register:·file_exists | 76549 | ··register:·file_exists |
| 76550 | ··when: | 76550 | ··when: |
| 76551 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76552 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76551 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76552 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76554 | ··tags: | 76554 | ··tags: |
| 76555 | ··-·CJIS-5.5.2.2 | 76555 | ··-·CJIS-5.5.2.2 |
| 76556 | ··-·NIST-800-171-3.4.5 | 76556 | ··-·NIST-800-171-3.4.5 |
| 76557 | ··-·NIST-800-53-AC-6(1) | 76557 | ··-·NIST-800-53-AC-6(1) |
| 76558 | ··-·NIST-800-53-CM-6(a) | 76558 | ··-·NIST-800-53-CM-6(a) |
| 76559 | ··-·PCI-DSS-Req-7.1 | 76559 | ··-·PCI-DSS-Req-7.1 |
| Offset 76566, 16 lines modified | Offset 76566, 16 lines modified | ||
| 76566 | ··-·no_reboot_needed | 76566 | ··-·no_reboot_needed |
| 76567 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 76567 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 76568 | ··file: | 76568 | ··file: |
| 76569 | ····path:·/boot/grub/grub.cfg | 76569 | ····path:·/boot/grub/grub.cfg |
| 76570 | ····owner:·'0' | 76570 | ····owner:·'0' |
| 76571 | ··when: | 76571 | ··when: |
| 76572 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76573 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76572 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76573 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76574 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76574 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76575 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 76575 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 76576 | ··tags: | 76576 | ··tags: |
| 76577 | ··-·CJIS-5.5.2.2 | 76577 | ··-·CJIS-5.5.2.2 |
| 76578 | ··-·NIST-800-171-3.4.5 | 76578 | ··-·NIST-800-171-3.4.5 |
| 76579 | ··-·NIST-800-53-AC-6(1) | 76579 | ··-·NIST-800-53-AC-6(1) |
| 76580 | ··-·NIST-800-53-CM-6(a) | 76580 | ··-·NIST-800-53-CM-6(a) |
| Offset 76583, 15 lines modified | Offset 76583, 15 lines modified | ||
| 76583 | ··-·configure_strategy | 76583 | ··-·configure_strategy |
| 76584 | ··-·file_owner_grub2_cfg | 76584 | ··-·file_owner_grub2_cfg |
| 76585 | ··-·low_complexity | 76585 | ··-·low_complexity |
| 76586 | ··-·low_disruption | 76586 | ··-·low_disruption |
| 76587 | ··-·medium_severity | 76587 | ··-·medium_severity |
| 76588 | ··-·no_reboot_needed</xccdf-1.2:fix> | 76588 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 76589 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 76589 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 76590 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed | 76590 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 76591 | chown·0·/boot/grub/grub.cfg | 76591 | chown·0·/boot/grub/grub.cfg |
| 76592 | else | 76592 | else |
| 76593 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 76593 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 76594 | fi</xccdf-1.2:fix> | 76594 | fi</xccdf-1.2:fix> |
| 76595 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 76595 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 76687, 16 lines modified | Offset 76687, 16 lines modified | ||
| 76687 | ··-·no_reboot_needed | 76687 | ··-·no_reboot_needed |
| 76688 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 76688 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 76689 | ··stat: | 76689 | ··stat: |
| 76690 | ····path:·/boot/grub/grub.cfg | 76690 | ····path:·/boot/grub/grub.cfg |
| 76691 | ··register:·file_exists | 76691 | ··register:·file_exists |
| 76692 | ··when: | 76692 | ··when: |
| 76693 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76694 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76693 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76694 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76696 | ··tags: | 76696 | ··tags: |
| 76697 | ··-·NIST-800-171-3.4.5 | 76697 | ··-·NIST-800-171-3.4.5 |
| 76698 | ··-·NIST-800-53-AC-6(1) | 76698 | ··-·NIST-800-53-AC-6(1) |
| 76699 | ··-·NIST-800-53-CM-6(a) | 76699 | ··-·NIST-800-53-CM-6(a) |
| 76700 | ··-·configure_strategy | 76700 | ··-·configure_strategy |
| 76701 | ··-·file_permissions_grub2_cfg | 76701 | ··-·file_permissions_grub2_cfg |
| Offset 76706, 30 lines modified | Offset 76706, 30 lines modified | ||
| 76706 | ··-·no_reboot_needed | 76706 | ··-·no_reboot_needed |
| 76707 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 76707 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 76708 | ··file: | 76708 | ··file: |
| 76709 | ····path:·/boot/grub/grub.cfg | 76709 | ····path:·/boot/grub/grub.cfg |
| 76710 | ····mode:·u-xs,g-xwrs,o-xwrt | 76710 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 76711 | ··when: | 76711 | ··when: |
| 76712 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76713 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76712 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76713 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76714 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76714 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76715 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 76715 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 76716 | ··tags: | 76716 | ··tags: |
| 76717 | ··-·NIST-800-171-3.4.5 | 76717 | ··-·NIST-800-171-3.4.5 |
| 76718 | ··-·NIST-800-53-AC-6(1) | 76718 | ··-·NIST-800-53-AC-6(1) |
| 76719 | ··-·NIST-800-53-CM-6(a) | 76719 | ··-·NIST-800-53-CM-6(a) |
| 76720 | ··-·configure_strategy | 76720 | ··-·configure_strategy |
| 76721 | ··-·file_permissions_grub2_cfg | 76721 | ··-·file_permissions_grub2_cfg |
| 76722 | ··-·low_complexity | 76722 | ··-·low_complexity |
| 76723 | ··-·low_disruption | 76723 | ··-·low_disruption |
| 76724 | ··-·medium_severity | 76724 | ··-·medium_severity |
| 76725 | ··-·no_reboot_needed</xccdf-1.2:fix> | 76725 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 76726 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_permissions_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 76726 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_permissions_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 76727 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed | 76727 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 76728 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 76728 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 76729 | else | 76729 | else |
| 76730 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 76730 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 76731 | fi</xccdf-1.2:fix> | 76731 | fi</xccdf-1.2:fix> |
| 76732 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 76732 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 76441, 16 lines modified | Offset 76441, 16 lines modified | ||
| 76441 | ··-·no_reboot_needed | 76441 | ··-·no_reboot_needed |
| 76442 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 76442 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 76443 | ··stat: | 76443 | ··stat: |
| 76444 | ····path:·/boot/grub/grub.cfg | 76444 | ····path:·/boot/grub/grub.cfg |
| 76445 | ··register:·file_exists | 76445 | ··register:·file_exists |
| 76446 | ··when: | 76446 | ··when: |
| 76447 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76448 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76447 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76448 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76449 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76449 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76450 | ··tags: | 76450 | ··tags: |
| 76451 | ··-·CJIS-5.5.2.2 | 76451 | ··-·CJIS-5.5.2.2 |
| 76452 | ··-·NIST-800-171-3.4.5 | 76452 | ··-·NIST-800-171-3.4.5 |
| 76453 | ··-·NIST-800-53-AC-6(1) | 76453 | ··-·NIST-800-53-AC-6(1) |
| 76454 | ··-·NIST-800-53-CM-6(a) | 76454 | ··-·NIST-800-53-CM-6(a) |
| 76455 | ··-·PCI-DSS-Req-7.1 | 76455 | ··-·PCI-DSS-Req-7.1 |
| Offset 76462, 16 lines modified | Offset 76462, 16 lines modified | ||
| 76462 | ··-·no_reboot_needed | 76462 | ··-·no_reboot_needed |
| 76463 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg | 76463 | -·name:·Ensure·owner·0·on·/boot/grub/grub.cfg |
| 76464 | ··file: | 76464 | ··file: |
| 76465 | ····path:·/boot/grub/grub.cfg | 76465 | ····path:·/boot/grub/grub.cfg |
| 76466 | ····owner:·'0' | 76466 | ····owner:·'0' |
| 76467 | ··when: | 76467 | ··when: |
| 76468 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76469 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76468 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76469 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76470 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76470 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76471 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 76471 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 76472 | ··tags: | 76472 | ··tags: |
| 76473 | ··-·CJIS-5.5.2.2 | 76473 | ··-·CJIS-5.5.2.2 |
| 76474 | ··-·NIST-800-171-3.4.5 | 76474 | ··-·NIST-800-171-3.4.5 |
| 76475 | ··-·NIST-800-53-AC-6(1) | 76475 | ··-·NIST-800-53-AC-6(1) |
| 76476 | ··-·NIST-800-53-CM-6(a) | 76476 | ··-·NIST-800-53-CM-6(a) |
| Offset 76479, 15 lines modified | Offset 76479, 15 lines modified | ||
| 76479 | ··-·configure_strategy | 76479 | ··-·configure_strategy |
| 76480 | ··-·file_owner_grub2_cfg | 76480 | ··-·file_owner_grub2_cfg |
| 76481 | ··-·low_complexity | 76481 | ··-·low_complexity |
| 76482 | ··-·low_disruption | 76482 | ··-·low_disruption |
| 76483 | ··-·medium_severity | 76483 | ··-·medium_severity |
| 76484 | ··-·no_reboot_needed</xccdf-1.2:fix> | 76484 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 76485 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 76485 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 76486 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed | 76486 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 76487 | chown·0·/boot/grub/grub.cfg | 76487 | chown·0·/boot/grub/grub.cfg |
| 76488 | else | 76488 | else |
| 76489 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 76489 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 76490 | fi</xccdf-1.2:fix> | 76490 | fi</xccdf-1.2:fix> |
| 76491 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 76491 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 76583, 16 lines modified | Offset 76583, 16 lines modified | ||
| 76583 | ··-·no_reboot_needed | 76583 | ··-·no_reboot_needed |
| 76584 | -·name:·Test·for·existence·/boot/grub/grub.cfg | 76584 | -·name:·Test·for·existence·/boot/grub/grub.cfg |
| 76585 | ··stat: | 76585 | ··stat: |
| 76586 | ····path:·/boot/grub/grub.cfg | 76586 | ····path:·/boot/grub/grub.cfg |
| 76587 | ··register:·file_exists | 76587 | ··register:·file_exists |
| 76588 | ··when: | 76588 | ··when: |
| 76589 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76590 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76589 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76590 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76591 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76591 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76592 | ··tags: | 76592 | ··tags: |
| 76593 | ··-·NIST-800-171-3.4.5 | 76593 | ··-·NIST-800-171-3.4.5 |
| 76594 | ··-·NIST-800-53-AC-6(1) | 76594 | ··-·NIST-800-53-AC-6(1) |
| 76595 | ··-·NIST-800-53-CM-6(a) | 76595 | ··-·NIST-800-53-CM-6(a) |
| 76596 | ··-·configure_strategy | 76596 | ··-·configure_strategy |
| 76597 | ··-·file_permissions_grub2_cfg | 76597 | ··-·file_permissions_grub2_cfg |
| Offset 76602, 30 lines modified | Offset 76602, 30 lines modified | ||
| 76602 | ··-·no_reboot_needed | 76602 | ··-·no_reboot_needed |
| 76603 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg | 76603 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub/grub.cfg |
| 76604 | ··file: | 76604 | ··file: |
| 76605 | ····path:·/boot/grub/grub.cfg | 76605 | ····path:·/boot/grub/grub.cfg |
| 76606 | ····mode:·u-xs,g-xwrs,o-xwrt | 76606 | ····mode:·u-xs,g-xwrs,o-xwrt |
| 76607 | ··when: | 76607 | ··when: |
| 76608 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76609 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 76608 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 76609 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 76610 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 76610 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 76611 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 76611 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 76612 | ··tags: | 76612 | ··tags: |
| 76613 | ··-·NIST-800-171-3.4.5 | 76613 | ··-·NIST-800-171-3.4.5 |
| 76614 | ··-·NIST-800-53-AC-6(1) | 76614 | ··-·NIST-800-53-AC-6(1) |
| 76615 | ··-·NIST-800-53-CM-6(a) | 76615 | ··-·NIST-800-53-CM-6(a) |
| 76616 | ··-·configure_strategy | 76616 | ··-·configure_strategy |
| 76617 | ··-·file_permissions_grub2_cfg | 76617 | ··-·file_permissions_grub2_cfg |
| 76618 | ··-·low_complexity | 76618 | ··-·low_complexity |
| 76619 | ··-·low_disruption | 76619 | ··-·low_disruption |
| 76620 | ··-·medium_severity | 76620 | ··-·medium_severity |
| 76621 | ··-·no_reboot_needed</xccdf-1.2:fix> | 76621 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 76622 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_permissions_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 76622 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_permissions_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 76623 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed | 76623 | if·[·!·-f·/sys/firmware/efi·]·&&·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'grub2-common'·2>/dev/null·|·grep·-q·installed·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 76624 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg | 76624 | chmod·u-xs,g-xwrs,o-xwrt·/boot/grub/grub.cfg |
| 76625 | else | 76625 | else |
| 76626 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 76626 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 76627 | fi</xccdf-1.2:fix> | 76627 | fi</xccdf-1.2:fix> |
| 76628 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 76628 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····182 | 2 | -rw-r--r--···0········0········0·····1820·2022-12-20·09:54:05.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···826 | 3 | -rw-r--r--···0········0········0···826496·2022-12-20·09:54:05.000000·data.tar.xz |
| Offset 8329, 16 lines modified | Offset 8329, 16 lines modified | ||
| 8329 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 8329 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 8330 | ··find: | 8330 | ··find: |
| 8331 | ····paths:·/etc/audit/rules.d/ | 8331 | ····paths:·/etc/audit/rules.d/ |
| 8332 | ····patterns:·'*.rules' | 8332 | ····patterns:·'*.rules' |
| 8333 | ··register:·find_rules_d | 8333 | ··register:·find_rules_d |
| 8334 | ··when: | 8334 | ··when: |
| 8335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8336 | ··-·'"audit"·in·ansible_facts.packages' | 8335 | ··-·'"audit"·in·ansible_facts.packages' |
| 8336 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8337 | ··tags: | 8337 | ··tags: |
| 8338 | ··-·CJIS-5.4.1.1 | 8338 | ··-·CJIS-5.4.1.1 |
| 8339 | ··-·NIST-800-171-3.3.1 | 8339 | ··-·NIST-800-171-3.3.1 |
| 8340 | ··-·NIST-800-171-3.4.3 | 8340 | ··-·NIST-800-171-3.4.3 |
| 8341 | ··-·NIST-800-53-AC-6(9) | 8341 | ··-·NIST-800-53-AC-6(9) |
| 8342 | ··-·NIST-800-53-CM-6(a) | 8342 | ··-·NIST-800-53-CM-6(a) |
| 8343 | ··-·PCI-DSS-Req-10.5.2 | 8343 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8353, 16 lines modified | Offset 8353, 16 lines modified | ||
| 8353 | ··lineinfile: | 8353 | ··lineinfile: |
| 8354 | ····path:·'{{·item·}}' | 8354 | ····path:·'{{·item·}}' |
| 8355 | ····regexp:·^\s*(?:-e)\s+.*$ | 8355 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 8356 | ····state:·absent | 8356 | ····state:·absent |
| 8357 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 8357 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 8358 | ····}}' | 8358 | ····}}' |
| 8359 | ··when: | 8359 | ··when: |
| 8360 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8361 | ··-·'"audit"·in·ansible_facts.packages' | 8360 | ··-·'"audit"·in·ansible_facts.packages' |
| 8361 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8362 | ··tags: | 8362 | ··tags: |
| 8363 | ··-·CJIS-5.4.1.1 | 8363 | ··-·CJIS-5.4.1.1 |
| 8364 | ··-·NIST-800-171-3.3.1 | 8364 | ··-·NIST-800-171-3.3.1 |
| 8365 | ··-·NIST-800-171-3.4.3 | 8365 | ··-·NIST-800-171-3.4.3 |
| 8366 | ··-·NIST-800-53-AC-6(9) | 8366 | ··-·NIST-800-53-AC-6(9) |
| 8367 | ··-·NIST-800-53-CM-6(a) | 8367 | ··-·NIST-800-53-CM-6(a) |
| 8368 | ··-·PCI-DSS-Req-10.5.2 | 8368 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8379, 16 lines modified | Offset 8379, 16 lines modified | ||
| 8379 | ····create:·true | 8379 | ····create:·true |
| 8380 | ····line:·-e·2 | 8380 | ····line:·-e·2 |
| 8381 | ····mode:·o-rwx | 8381 | ····mode:·o-rwx |
| 8382 | ··loop: | 8382 | ··loop: |
| 8383 | ··-·/etc/audit/audit.rules | 8383 | ··-·/etc/audit/audit.rules |
| 8384 | ··-·/etc/audit/rules.d/immutable.rules | 8384 | ··-·/etc/audit/rules.d/immutable.rules |
| 8385 | ··when: | 8385 | ··when: |
| 8386 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8387 | ··-·'"audit"·in·ansible_facts.packages' | 8386 | ··-·'"audit"·in·ansible_facts.packages' |
| 8387 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8388 | ··tags: | 8388 | ··tags: |
| 8389 | ··-·CJIS-5.4.1.1 | 8389 | ··-·CJIS-5.4.1.1 |
| 8390 | ··-·NIST-800-171-3.3.1 | 8390 | ··-·NIST-800-171-3.3.1 |
| 8391 | ··-·NIST-800-171-3.4.3 | 8391 | ··-·NIST-800-171-3.4.3 |
| 8392 | ··-·NIST-800-53-AC-6(9) | 8392 | ··-·NIST-800-53-AC-6(9) |
| 8393 | ··-·NIST-800-53-CM-6(a) | 8393 | ··-·NIST-800-53-CM-6(a) |
| 8394 | ··-·PCI-DSS-Req-10.5.2 | 8394 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 9268, 16 lines modified | Offset 9268, 16 lines modified | ||
| 9268 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 9268 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 9269 | ··find: | 9269 | ··find: |
| 9270 | ····paths:·/etc/audit/rules.d | 9270 | ····paths:·/etc/audit/rules.d |
| 9271 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 9271 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 9272 | ····patterns:·'*.rules' | 9272 | ····patterns:·'*.rules' |
| 9273 | ··register:·find_existing_watch_rules_d | 9273 | ··register:·find_existing_watch_rules_d |
| 9274 | ··when: | 9274 | ··when: |
| 9275 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9276 | ··-·'"audit"·in·ansible_facts.packages' | 9275 | ··-·'"audit"·in·ansible_facts.packages' |
| 9276 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9277 | ··tags: | 9277 | ··tags: |
| 9278 | ··-·CJIS-5.4.1.1 | 9278 | ··-·CJIS-5.4.1.1 |
| 9279 | ··-·NIST-800-171-3.1.7 | 9279 | ··-·NIST-800-171-3.1.7 |
| 9280 | ··-·NIST-800-53-AC-2(7)(b) | 9280 | ··-·NIST-800-53-AC-2(7)(b) |
| 9281 | ··-·NIST-800-53-AC-6(9) | 9281 | ··-·NIST-800-53-AC-6(9) |
| 9282 | ··-·NIST-800-53-AU-12(c) | 9282 | ··-·NIST-800-53-AU-12(c) |
| 9283 | ··-·NIST-800-53-AU-2(d) | 9283 | ··-·NIST-800-53-AU-2(d) |
| Offset 9294, 16 lines modified | Offset 9294, 16 lines modified | ||
| 9294 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 9294 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 9295 | ··find: | 9295 | ··find: |
| 9296 | ····paths:·/etc/audit/rules.d | 9296 | ····paths:·/etc/audit/rules.d |
| 9297 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 9297 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 9298 | ····patterns:·'*.rules' | 9298 | ····patterns:·'*.rules' |
| 9299 | ··register:·find_watch_key | 9299 | ··register:·find_watch_key |
| 9300 | ··when: | 9300 | ··when: |
| 9301 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9302 | ··-·'"audit"·in·ansible_facts.packages' | 9301 | ··-·'"audit"·in·ansible_facts.packages' |
| 9302 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9303 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 9303 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 9304 | ····==·0 | 9304 | ····==·0 |
| 9305 | ··tags: | 9305 | ··tags: |
| 9306 | ··-·CJIS-5.4.1.1 | 9306 | ··-·CJIS-5.4.1.1 |
| 9307 | ··-·NIST-800-171-3.1.7 | 9307 | ··-·NIST-800-171-3.1.7 |
| 9308 | ··-·NIST-800-53-AC-2(7)(b) | 9308 | ··-·NIST-800-53-AC-2(7)(b) |
| 9309 | ··-·NIST-800-53-AC-6(9) | 9309 | ··-·NIST-800-53-AC-6(9) |
| Offset 9320, 16 lines modified | Offset 9320, 16 lines modified | ||
| 9320 | ··-·restrict_strategy | 9320 | ··-·restrict_strategy |
| 9321 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 9321 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 9322 | ··set_fact: | 9322 | ··set_fact: |
| 9323 | ····all_files: | 9323 | ····all_files: |
| 9324 | ····-·/etc/audit/rules.d/actions.rules | 9324 | ····-·/etc/audit/rules.d/actions.rules |
| 9325 | ··when: | 9325 | ··when: |
| 9326 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9327 | ··-·'"audit"·in·ansible_facts.packages' | 9326 | ··-·'"audit"·in·ansible_facts.packages' |
| 9327 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9328 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 9328 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 9329 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9329 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9330 | ··tags: | 9330 | ··tags: |
| 9331 | ··-·CJIS-5.4.1.1 | 9331 | ··-·CJIS-5.4.1.1 |
| 9332 | ··-·NIST-800-171-3.1.7 | 9332 | ··-·NIST-800-171-3.1.7 |
| 9333 | ··-·NIST-800-53-AC-2(7)(b) | 9333 | ··-·NIST-800-53-AC-2(7)(b) |
| 9334 | ··-·NIST-800-53-AC-6(9) | 9334 | ··-·NIST-800-53-AC-6(9) |
| Offset 9346, 16 lines modified | Offset 9346, 16 lines modified | ||
| 9346 | ··-·restrict_strategy | 9346 | ··-·restrict_strategy |
| 9347 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 9347 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 9348 | ··set_fact: | 9348 | ··set_fact: |
| 9349 | ····all_files: | 9349 | ····all_files: |
| 9350 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 9350 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 9351 | ··when: | 9351 | ··when: |
| 9352 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9353 | ··-·'"audit"·in·ansible_facts.packages' | 9352 | ··-·'"audit"·in·ansible_facts.packages' |
| 9353 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9354 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 9354 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 9355 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9355 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9356 | ··tags: | 9356 | ··tags: |
| 9357 | ··-·CJIS-5.4.1.1 | 9357 | ··-·CJIS-5.4.1.1 |
| 9358 | ··-·NIST-800-171-3.1.7 | 9358 | ··-·NIST-800-171-3.1.7 |
| 9359 | ··-·NIST-800-53-AC-2(7)(b) | 9359 | ··-·NIST-800-53-AC-2(7)(b) |
| 9360 | ··-·NIST-800-53-AC-6(9) | 9360 | ··-·NIST-800-53-AC-6(9) |
| Offset 9374, 16 lines modified | Offset 9374, 16 lines modified | ||
| 9374 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 9374 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 48555/53886 bytes (90.11%) of diff not shown. | |||
| Offset 8329, 16 lines modified | Offset 8329, 16 lines modified | ||
| 8329 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 8329 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 8330 | ··find: | 8330 | ··find: |
| 8331 | ····paths:·/etc/audit/rules.d/ | 8331 | ····paths:·/etc/audit/rules.d/ |
| 8332 | ····patterns:·'*.rules' | 8332 | ····patterns:·'*.rules' |
| 8333 | ··register:·find_rules_d | 8333 | ··register:·find_rules_d |
| 8334 | ··when: | 8334 | ··when: |
| 8335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8336 | ··-·'"audit"·in·ansible_facts.packages' | 8335 | ··-·'"audit"·in·ansible_facts.packages' |
| 8336 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8337 | ··tags: | 8337 | ··tags: |
| 8338 | ··-·CJIS-5.4.1.1 | 8338 | ··-·CJIS-5.4.1.1 |
| 8339 | ··-·NIST-800-171-3.3.1 | 8339 | ··-·NIST-800-171-3.3.1 |
| 8340 | ··-·NIST-800-171-3.4.3 | 8340 | ··-·NIST-800-171-3.4.3 |
| 8341 | ··-·NIST-800-53-AC-6(9) | 8341 | ··-·NIST-800-53-AC-6(9) |
| 8342 | ··-·NIST-800-53-CM-6(a) | 8342 | ··-·NIST-800-53-CM-6(a) |
| 8343 | ··-·PCI-DSS-Req-10.5.2 | 8343 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8353, 16 lines modified | Offset 8353, 16 lines modified | ||
| 8353 | ··lineinfile: | 8353 | ··lineinfile: |
| 8354 | ····path:·'{{·item·}}' | 8354 | ····path:·'{{·item·}}' |
| 8355 | ····regexp:·^\s*(?:-e)\s+.*$ | 8355 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 8356 | ····state:·absent | 8356 | ····state:·absent |
| 8357 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 8357 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 8358 | ····}}' | 8358 | ····}}' |
| 8359 | ··when: | 8359 | ··when: |
| 8360 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8361 | ··-·'"audit"·in·ansible_facts.packages' | 8360 | ··-·'"audit"·in·ansible_facts.packages' |
| 8361 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8362 | ··tags: | 8362 | ··tags: |
| 8363 | ··-·CJIS-5.4.1.1 | 8363 | ··-·CJIS-5.4.1.1 |
| 8364 | ··-·NIST-800-171-3.3.1 | 8364 | ··-·NIST-800-171-3.3.1 |
| 8365 | ··-·NIST-800-171-3.4.3 | 8365 | ··-·NIST-800-171-3.4.3 |
| 8366 | ··-·NIST-800-53-AC-6(9) | 8366 | ··-·NIST-800-53-AC-6(9) |
| 8367 | ··-·NIST-800-53-CM-6(a) | 8367 | ··-·NIST-800-53-CM-6(a) |
| 8368 | ··-·PCI-DSS-Req-10.5.2 | 8368 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8379, 16 lines modified | Offset 8379, 16 lines modified | ||
| 8379 | ····create:·true | 8379 | ····create:·true |
| 8380 | ····line:·-e·2 | 8380 | ····line:·-e·2 |
| 8381 | ····mode:·o-rwx | 8381 | ····mode:·o-rwx |
| 8382 | ··loop: | 8382 | ··loop: |
| 8383 | ··-·/etc/audit/audit.rules | 8383 | ··-·/etc/audit/audit.rules |
| 8384 | ··-·/etc/audit/rules.d/immutable.rules | 8384 | ··-·/etc/audit/rules.d/immutable.rules |
| 8385 | ··when: | 8385 | ··when: |
| 8386 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8387 | ··-·'"audit"·in·ansible_facts.packages' | 8386 | ··-·'"audit"·in·ansible_facts.packages' |
| 8387 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8388 | ··tags: | 8388 | ··tags: |
| 8389 | ··-·CJIS-5.4.1.1 | 8389 | ··-·CJIS-5.4.1.1 |
| 8390 | ··-·NIST-800-171-3.3.1 | 8390 | ··-·NIST-800-171-3.3.1 |
| 8391 | ··-·NIST-800-171-3.4.3 | 8391 | ··-·NIST-800-171-3.4.3 |
| 8392 | ··-·NIST-800-53-AC-6(9) | 8392 | ··-·NIST-800-53-AC-6(9) |
| 8393 | ··-·NIST-800-53-CM-6(a) | 8393 | ··-·NIST-800-53-CM-6(a) |
| 8394 | ··-·PCI-DSS-Req-10.5.2 | 8394 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 9268, 16 lines modified | Offset 9268, 16 lines modified | ||
| 9268 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 9268 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 9269 | ··find: | 9269 | ··find: |
| 9270 | ····paths:·/etc/audit/rules.d | 9270 | ····paths:·/etc/audit/rules.d |
| 9271 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 9271 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 9272 | ····patterns:·'*.rules' | 9272 | ····patterns:·'*.rules' |
| 9273 | ··register:·find_existing_watch_rules_d | 9273 | ··register:·find_existing_watch_rules_d |
| 9274 | ··when: | 9274 | ··when: |
| 9275 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9276 | ··-·'"audit"·in·ansible_facts.packages' | 9275 | ··-·'"audit"·in·ansible_facts.packages' |
| 9276 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9277 | ··tags: | 9277 | ··tags: |
| 9278 | ··-·CJIS-5.4.1.1 | 9278 | ··-·CJIS-5.4.1.1 |
| 9279 | ··-·NIST-800-171-3.1.7 | 9279 | ··-·NIST-800-171-3.1.7 |
| 9280 | ··-·NIST-800-53-AC-2(7)(b) | 9280 | ··-·NIST-800-53-AC-2(7)(b) |
| 9281 | ··-·NIST-800-53-AC-6(9) | 9281 | ··-·NIST-800-53-AC-6(9) |
| 9282 | ··-·NIST-800-53-AU-12(c) | 9282 | ··-·NIST-800-53-AU-12(c) |
| 9283 | ··-·NIST-800-53-AU-2(d) | 9283 | ··-·NIST-800-53-AU-2(d) |
| Offset 9294, 16 lines modified | Offset 9294, 16 lines modified | ||
| 9294 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 9294 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 9295 | ··find: | 9295 | ··find: |
| 9296 | ····paths:·/etc/audit/rules.d | 9296 | ····paths:·/etc/audit/rules.d |
| 9297 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 9297 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 9298 | ····patterns:·'*.rules' | 9298 | ····patterns:·'*.rules' |
| 9299 | ··register:·find_watch_key | 9299 | ··register:·find_watch_key |
| 9300 | ··when: | 9300 | ··when: |
| 9301 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9302 | ··-·'"audit"·in·ansible_facts.packages' | 9301 | ··-·'"audit"·in·ansible_facts.packages' |
| 9302 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9303 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 9303 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 9304 | ····==·0 | 9304 | ····==·0 |
| 9305 | ··tags: | 9305 | ··tags: |
| 9306 | ··-·CJIS-5.4.1.1 | 9306 | ··-·CJIS-5.4.1.1 |
| 9307 | ··-·NIST-800-171-3.1.7 | 9307 | ··-·NIST-800-171-3.1.7 |
| 9308 | ··-·NIST-800-53-AC-2(7)(b) | 9308 | ··-·NIST-800-53-AC-2(7)(b) |
| 9309 | ··-·NIST-800-53-AC-6(9) | 9309 | ··-·NIST-800-53-AC-6(9) |
| Offset 9320, 16 lines modified | Offset 9320, 16 lines modified | ||
| 9320 | ··-·restrict_strategy | 9320 | ··-·restrict_strategy |
| 9321 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 9321 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 9322 | ··set_fact: | 9322 | ··set_fact: |
| 9323 | ····all_files: | 9323 | ····all_files: |
| 9324 | ····-·/etc/audit/rules.d/actions.rules | 9324 | ····-·/etc/audit/rules.d/actions.rules |
| 9325 | ··when: | 9325 | ··when: |
| 9326 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9327 | ··-·'"audit"·in·ansible_facts.packages' | 9326 | ··-·'"audit"·in·ansible_facts.packages' |
| 9327 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9328 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 9328 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 9329 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9329 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9330 | ··tags: | 9330 | ··tags: |
| 9331 | ··-·CJIS-5.4.1.1 | 9331 | ··-·CJIS-5.4.1.1 |
| 9332 | ··-·NIST-800-171-3.1.7 | 9332 | ··-·NIST-800-171-3.1.7 |
| 9333 | ··-·NIST-800-53-AC-2(7)(b) | 9333 | ··-·NIST-800-53-AC-2(7)(b) |
| 9334 | ··-·NIST-800-53-AC-6(9) | 9334 | ··-·NIST-800-53-AC-6(9) |
| Offset 9346, 16 lines modified | Offset 9346, 16 lines modified | ||
| 9346 | ··-·restrict_strategy | 9346 | ··-·restrict_strategy |
| 9347 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 9347 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 9348 | ··set_fact: | 9348 | ··set_fact: |
| 9349 | ····all_files: | 9349 | ····all_files: |
| 9350 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 9350 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 9351 | ··when: | 9351 | ··when: |
| 9352 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9353 | ··-·'"audit"·in·ansible_facts.packages' | 9352 | ··-·'"audit"·in·ansible_facts.packages' |
| 9353 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9354 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 9354 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 9355 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9355 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9356 | ··tags: | 9356 | ··tags: |
| 9357 | ··-·CJIS-5.4.1.1 | 9357 | ··-·CJIS-5.4.1.1 |
| 9358 | ··-·NIST-800-171-3.1.7 | 9358 | ··-·NIST-800-171-3.1.7 |
| 9359 | ··-·NIST-800-53-AC-2(7)(b) | 9359 | ··-·NIST-800-53-AC-2(7)(b) |
| 9360 | ··-·NIST-800-53-AC-6(9) | 9360 | ··-·NIST-800-53-AC-6(9) |
| Offset 9374, 16 lines modified | Offset 9374, 16 lines modified | ||
| 9374 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 9374 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 48555/53886 bytes (90.11%) of diff not shown. | |||
| Offset 8229, 16 lines modified | Offset 8229, 16 lines modified | ||
| 8229 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 8229 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 8230 | ··find: | 8230 | ··find: |
| 8231 | ····paths:·/etc/audit/rules.d/ | 8231 | ····paths:·/etc/audit/rules.d/ |
| 8232 | ····patterns:·'*.rules' | 8232 | ····patterns:·'*.rules' |
| 8233 | ··register:·find_rules_d | 8233 | ··register:·find_rules_d |
| 8234 | ··when: | 8234 | ··when: |
| 8235 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8236 | ··-·'"audit"·in·ansible_facts.packages' | 8235 | ··-·'"audit"·in·ansible_facts.packages' |
| 8236 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8237 | ··tags: | 8237 | ··tags: |
| 8238 | ··-·CJIS-5.4.1.1 | 8238 | ··-·CJIS-5.4.1.1 |
| 8239 | ··-·NIST-800-171-3.3.1 | 8239 | ··-·NIST-800-171-3.3.1 |
| 8240 | ··-·NIST-800-171-3.4.3 | 8240 | ··-·NIST-800-171-3.4.3 |
| 8241 | ··-·NIST-800-53-AC-6(9) | 8241 | ··-·NIST-800-53-AC-6(9) |
| 8242 | ··-·NIST-800-53-CM-6(a) | 8242 | ··-·NIST-800-53-CM-6(a) |
| 8243 | ··-·PCI-DSS-Req-10.5.2 | 8243 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8253, 16 lines modified | Offset 8253, 16 lines modified | ||
| 8253 | ··lineinfile: | 8253 | ··lineinfile: |
| 8254 | ····path:·'{{·item·}}' | 8254 | ····path:·'{{·item·}}' |
| 8255 | ····regexp:·^\s*(?:-e)\s+.*$ | 8255 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 8256 | ····state:·absent | 8256 | ····state:·absent |
| 8257 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 8257 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 8258 | ····}}' | 8258 | ····}}' |
| 8259 | ··when: | 8259 | ··when: |
| 8260 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8261 | ··-·'"audit"·in·ansible_facts.packages' | 8260 | ··-·'"audit"·in·ansible_facts.packages' |
| 8261 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8262 | ··tags: | 8262 | ··tags: |
| 8263 | ··-·CJIS-5.4.1.1 | 8263 | ··-·CJIS-5.4.1.1 |
| 8264 | ··-·NIST-800-171-3.3.1 | 8264 | ··-·NIST-800-171-3.3.1 |
| 8265 | ··-·NIST-800-171-3.4.3 | 8265 | ··-·NIST-800-171-3.4.3 |
| 8266 | ··-·NIST-800-53-AC-6(9) | 8266 | ··-·NIST-800-53-AC-6(9) |
| 8267 | ··-·NIST-800-53-CM-6(a) | 8267 | ··-·NIST-800-53-CM-6(a) |
| 8268 | ··-·PCI-DSS-Req-10.5.2 | 8268 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 8279, 16 lines modified | Offset 8279, 16 lines modified | ||
| 8279 | ····create:·true | 8279 | ····create:·true |
| 8280 | ····line:·-e·2 | 8280 | ····line:·-e·2 |
| 8281 | ····mode:·o-rwx | 8281 | ····mode:·o-rwx |
| 8282 | ··loop: | 8282 | ··loop: |
| 8283 | ··-·/etc/audit/audit.rules | 8283 | ··-·/etc/audit/audit.rules |
| 8284 | ··-·/etc/audit/rules.d/immutable.rules | 8284 | ··-·/etc/audit/rules.d/immutable.rules |
| 8285 | ··when: | 8285 | ··when: |
| 8286 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8287 | ··-·'"audit"·in·ansible_facts.packages' | 8286 | ··-·'"audit"·in·ansible_facts.packages' |
| 8287 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8288 | ··tags: | 8288 | ··tags: |
| 8289 | ··-·CJIS-5.4.1.1 | 8289 | ··-·CJIS-5.4.1.1 |
| 8290 | ··-·NIST-800-171-3.3.1 | 8290 | ··-·NIST-800-171-3.3.1 |
| 8291 | ··-·NIST-800-171-3.4.3 | 8291 | ··-·NIST-800-171-3.4.3 |
| 8292 | ··-·NIST-800-53-AC-6(9) | 8292 | ··-·NIST-800-53-AC-6(9) |
| 8293 | ··-·NIST-800-53-CM-6(a) | 8293 | ··-·NIST-800-53-CM-6(a) |
| 8294 | ··-·PCI-DSS-Req-10.5.2 | 8294 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 9168, 16 lines modified | Offset 9168, 16 lines modified | ||
| 9168 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 9168 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 9169 | ··find: | 9169 | ··find: |
| 9170 | ····paths:·/etc/audit/rules.d | 9170 | ····paths:·/etc/audit/rules.d |
| 9171 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 9171 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 9172 | ····patterns:·'*.rules' | 9172 | ····patterns:·'*.rules' |
| 9173 | ··register:·find_existing_watch_rules_d | 9173 | ··register:·find_existing_watch_rules_d |
| 9174 | ··when: | 9174 | ··when: |
| 9175 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9176 | ··-·'"audit"·in·ansible_facts.packages' | 9175 | ··-·'"audit"·in·ansible_facts.packages' |
| 9176 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9177 | ··tags: | 9177 | ··tags: |
| 9178 | ··-·CJIS-5.4.1.1 | 9178 | ··-·CJIS-5.4.1.1 |
| 9179 | ··-·NIST-800-171-3.1.7 | 9179 | ··-·NIST-800-171-3.1.7 |
| 9180 | ··-·NIST-800-53-AC-2(7)(b) | 9180 | ··-·NIST-800-53-AC-2(7)(b) |
| 9181 | ··-·NIST-800-53-AC-6(9) | 9181 | ··-·NIST-800-53-AC-6(9) |
| 9182 | ··-·NIST-800-53-AU-12(c) | 9182 | ··-·NIST-800-53-AU-12(c) |
| 9183 | ··-·NIST-800-53-AU-2(d) | 9183 | ··-·NIST-800-53-AU-2(d) |
| Offset 9194, 16 lines modified | Offset 9194, 16 lines modified | ||
| 9194 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 9194 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 9195 | ··find: | 9195 | ··find: |
| 9196 | ····paths:·/etc/audit/rules.d | 9196 | ····paths:·/etc/audit/rules.d |
| 9197 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 9197 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 9198 | ····patterns:·'*.rules' | 9198 | ····patterns:·'*.rules' |
| 9199 | ··register:·find_watch_key | 9199 | ··register:·find_watch_key |
| 9200 | ··when: | 9200 | ··when: |
| 9201 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9202 | ··-·'"audit"·in·ansible_facts.packages' | 9201 | ··-·'"audit"·in·ansible_facts.packages' |
| 9202 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9203 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 9203 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 9204 | ····==·0 | 9204 | ····==·0 |
| 9205 | ··tags: | 9205 | ··tags: |
| 9206 | ··-·CJIS-5.4.1.1 | 9206 | ··-·CJIS-5.4.1.1 |
| 9207 | ··-·NIST-800-171-3.1.7 | 9207 | ··-·NIST-800-171-3.1.7 |
| 9208 | ··-·NIST-800-53-AC-2(7)(b) | 9208 | ··-·NIST-800-53-AC-2(7)(b) |
| 9209 | ··-·NIST-800-53-AC-6(9) | 9209 | ··-·NIST-800-53-AC-6(9) |
| Offset 9220, 16 lines modified | Offset 9220, 16 lines modified | ||
| 9220 | ··-·restrict_strategy | 9220 | ··-·restrict_strategy |
| 9221 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 9221 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 9222 | ··set_fact: | 9222 | ··set_fact: |
| 9223 | ····all_files: | 9223 | ····all_files: |
| 9224 | ····-·/etc/audit/rules.d/actions.rules | 9224 | ····-·/etc/audit/rules.d/actions.rules |
| 9225 | ··when: | 9225 | ··when: |
| 9226 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9227 | ··-·'"audit"·in·ansible_facts.packages' | 9226 | ··-·'"audit"·in·ansible_facts.packages' |
| 9227 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9228 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 9228 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 9229 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9229 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9230 | ··tags: | 9230 | ··tags: |
| 9231 | ··-·CJIS-5.4.1.1 | 9231 | ··-·CJIS-5.4.1.1 |
| 9232 | ··-·NIST-800-171-3.1.7 | 9232 | ··-·NIST-800-171-3.1.7 |
| 9233 | ··-·NIST-800-53-AC-2(7)(b) | 9233 | ··-·NIST-800-53-AC-2(7)(b) |
| 9234 | ··-·NIST-800-53-AC-6(9) | 9234 | ··-·NIST-800-53-AC-6(9) |
| Offset 9246, 16 lines modified | Offset 9246, 16 lines modified | ||
| 9246 | ··-·restrict_strategy | 9246 | ··-·restrict_strategy |
| 9247 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 9247 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 9248 | ··set_fact: | 9248 | ··set_fact: |
| 9249 | ····all_files: | 9249 | ····all_files: |
| 9250 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 9250 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 9251 | ··when: | 9251 | ··when: |
| 9252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9253 | ··-·'"audit"·in·ansible_facts.packages' | 9252 | ··-·'"audit"·in·ansible_facts.packages' |
| 9253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9254 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 9254 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 9255 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9255 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9256 | ··tags: | 9256 | ··tags: |
| 9257 | ··-·CJIS-5.4.1.1 | 9257 | ··-·CJIS-5.4.1.1 |
| 9258 | ··-·NIST-800-171-3.1.7 | 9258 | ··-·NIST-800-171-3.1.7 |
| 9259 | ··-·NIST-800-53-AC-2(7)(b) | 9259 | ··-·NIST-800-53-AC-2(7)(b) |
| 9260 | ··-·NIST-800-53-AC-6(9) | 9260 | ··-·NIST-800-53-AC-6(9) |
| Offset 9274, 16 lines modified | Offset 9274, 16 lines modified | ||
| 9274 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 9274 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 48367/53698 bytes (90.07%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····154 | 2 | -rw-r--r--···0········0········0····15448·2022-12-20·09:54:05.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·4020 | 3 | -rw-r--r--···0········0········0·40203060·2022-12-20·09:54:05.000000·data.tar.xz |
| Offset 55089, 21 lines modified | Offset 55089, 21 lines modified | ||
| 000d7300:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | 000d7300:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 000d7310:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | 000d7310:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 000d7320:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | 000d7320:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 000d7330:·6964·6d31·3437·3033·223e·3c70·7265·3e3c··idm14703"><pre>< | 000d7330:·6964·6d31·3437·3033·223e·3c70·7265·3e3c··idm14703"><pre>< | ||
| 000d7340:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 000d7340:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 000d7350:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 000d7350:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 000d7360:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 000d7360:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 000d7370:·2070·6c61·7466·6f72·6d73·0a69·6620· | 000d7370:·2070·6c61·7466·6f72·6d73·0a69·6620·5b20···platforms.if·[· | ||
| 000d7380:·6d20·2d2d·7175·6965·7420·2d71·2061·7564··m·--quiet·-q·aud | |||
| 000d7390:·6974·2026·616d·703b·2661·6d70·3b20·5b20··it·&&·[· | |||
| 000d73 | 000d7380:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 000d73 | 000d7390:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 000d73 | 000d73a0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 000d73 | 000d73b0:·696e·6572·656e·7620·5d20·2661·6d70·3b26··inerenv·]·&& | ||
| 000d73c0:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 000d73d0:·202d·7120·6175·6469·743b·2074·6865·6e0a···-q·audit;·then. | |||
| 000d73e0:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | 000d73e0:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | ||
| 000d73f0:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | 000d73f0:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | ||
| 000d7400:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | 000d7400:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | ||
| 000d7410:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | 000d7410:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | ||
| 000d7420:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | 000d7420:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | ||
| 000d7430:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | 000d7430:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | ||
| 000d7440:·6572·6c79·696e·6720·7379·7374·656d·0a23··erlying·system.# | 000d7440:·6572·6c79·696e·6720·7379·7374·656d·0a23··erlying·system.# | ||
| Offset 56791, 20 lines modified | Offset 56791, 20 lines modified | ||
| 000ddd60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 000ddd60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 000ddd70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 000ddd70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 000ddd80:·3d22·6964·6d31·3530·3033·223e·3c70·7265··="idm15003"><pre | 000ddd80:·3d22·6964·6d31·3530·3033·223e·3c70·7265··="idm15003"><pre | ||
| 000ddd90:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 000ddd90:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 000ddda0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 000ddda0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 000dddb0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 000dddb0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 000dddc0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 000dddc0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 000dddd0:·7270·6d20·2d2d·7175·6965·7420·2d71·2061··rpm·--quiet·-q·a | |||
| 000ddde0:·7564·6974·2026·616d·703b·2661·6d70·3b20··udit·&&· | |||
| 000ddd | 000dddd0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 000dd | 000ddde0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 000dd | 000dddf0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 000dde | 000dde00:·7461·696e·6572·656e·7620·5d20·2661·6d70··tainerenv·]·& | ||
| 000dde10:·3b26·616d·703b·2072·706d·202d·2d71·7569··;&·rpm·--qui | |||
| 000dde20:·6574·202d·7120·6175·6469·743b·2074·6865··et·-q·audit;·the | |||
| 000dde30:·6e0a·0a23·2046·6972·7374·2070·6572·666f··n..#·First·perfo | 000dde30:·6e0a·0a23·2046·6972·7374·2070·6572·666f··n..#·First·perfo | ||
| 000dde40:·726d·2074·6865·2072·656d·6564·6961·7469··rm·the·remediati | 000dde40:·726d·2074·6865·2072·656d·6564·6961·7469··rm·the·remediati | ||
| 000dde50:·6f6e·206f·6620·7468·6520·7379·7363·616c··on·of·the·syscal | 000dde50:·6f6e·206f·6620·7468·6520·7379·7363·616c··on·of·the·syscal | ||
| 000dde60:·6c20·7275·6c65·0a23·2052·6574·7269·6576··l·rule.#·Retriev | 000dde60:·6c20·7275·6c65·0a23·2052·6574·7269·6576··l·rule.#·Retriev | ||
| 000dde70:·6520·6861·7264·7761·7265·2061·7263·6869··e·hardware·archi | 000dde70:·6520·6861·7264·7761·7265·2061·7263·6869··e·hardware·archi | ||
| 000dde80:·7465·6374·7572·6520·6f66·2074·6865·2075··tecture·of·the·u | 000dde80:·7465·6374·7572·6520·6f66·2074·6865·2075··tecture·of·the·u | ||
| 000dde90:·6e64·6572·6c79·696e·6720·7379·7374·656d··nderlying·system | 000dde90:·6e64·6572·6c79·696e·6720·7379·7374·656d··nderlying·system | ||
| Offset 61153, 23 lines modified | Offset 61153, 23 lines modified | ||
| 000eee00:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | 000eee00:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 000eee10:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | 000eee10:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 000eee20:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | 000eee20:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | ||
| 000eee30:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | 000eee30:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | ||
| 000eee40:·6f72·2061·7564·6974·2074·6173·6b73·0a20··or·audit·tasks.· | 000eee40:·6f72·2061·7564·6974·2074·6173·6b73·0a20··or·audit·tasks.· | ||
| 000eee50:·2073·6574·5f66·6163·743a·0a20·2020·2061···set_fact:.····a | 000eee50:·2073·6574·5f66·6163·743a·0a20·2020·2061···set_fact:.····a | ||
| 000eee60:·7564·6974·5f61·7263·683a·2062·3634·0a20··udit_arch:·b64.· | 000eee60:·7564·6974·5f61·7263·683a·2062·3634·0a20··udit_arch:·b64.· | ||
| 000eee70:·2077·6865·6e3a·0a20·202d·20 | 000eee70:·2077·6865·6e3a·0a20·202d·2061·6e73·6962···when:.··-·ansib | ||
| 000eee80:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | |||
| 000eee90:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 000eeea0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 000eeeb0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000eeec0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000eeed0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000eeee0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000eee | 000eee80:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 000eee90:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000eeea0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000eeeb0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000eeec0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000eeed0:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | |||
| 000eeee0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000eeef0:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 000eef00:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | 000eef00:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 000eef10:·6520·3d3d·2022·6161·7263·6836·3422·206f··e·==·"aarch64"·o | 000eef10:·6520·3d3d·2022·6161·7263·6836·3422·206f··e·==·"aarch64"·o | ||
| 000eef20:·7220·616e·7369·626c·655f·6172·6368·6974··r·ansible_archit | 000eef20:·7220·616e·7369·626c·655f·6172·6368·6974··r·ansible_archit | ||
| 000eef30:·6563·7475·7265·203d·3d20·2270·7063·3634··ecture·==·"ppc64 | 000eef30:·6563·7475·7265·203d·3d20·2270·7063·3634··ecture·==·"ppc64 | ||
| 000eef40:·2220·6f72·2061·6e73·6962·6c65·5f61·7263··"·or·ansible_arc | 000eef40:·2220·6f72·2061·6e73·6962·6c65·5f61·7263··"·or·ansible_arc | ||
| 000eef50:·6869·7465·6374·7572·650a·2020·2020·3d3d··hitecture.····== | 000eef50:·6869·7465·6374·7572·650a·2020·2020·3d3d··hitecture.····== | ||
| 000eef60:·2022·7070·6336·346c·6522·206f·7220·616e···"ppc64le"·or·an | 000eef60:·2022·7070·6336·346c·6522·206f·7220·616e···"ppc64le"·or·an | ||
| Offset 61465, 23 lines modified | Offset 61465, 23 lines modified | ||
| 000f0180:·6175·6469·745f·7469·6d65·5f72·756c·6573··audit_time_rules | 000f0180:·6175·6469·745f·7469·6d65·5f72·756c·6573··audit_time_rules | ||
| 000f0190:·0a20·2020·2020·2063·7265·6174·653a·2074··.······create:·t | 000f0190:·0a20·2020·2020·2063·7265·6174·653a·2074··.······create:·t | ||
| 000f01a0:·7275·650a·2020·2020·2020·6d6f·6465·3a20··rue.······mode:· | 000f01a0:·7275·650a·2020·2020·2020·6d6f·6465·3a20··rue.······mode:· | ||
| 000f01b0:·6f2d·7277·780a·2020·2020·2020·7374·6174··o-rwx.······stat | 000f01b0:·6f2d·7277·780a·2020·2020·2020·7374·6174··o-rwx.······stat | ||
| 000f01c0:·653a·2070·7265·7365·6e74·0a20·2020·2077··e:·present.····w | 000f01c0:·653a·2070·7265·7365·6e74·0a20·2020·2077··e:·present.····w | ||
| 000f01d0:·6865·6e3a·2073·7973·6361·6c6c·735f·666f··hen:·syscalls_fo | 000f01d0:·6865·6e3a·2073·7973·6361·6c6c·735f·666f··hen:·syscalls_fo | ||
| 000f01e0:·756e·6420·7c20·6c65·6e67·7468·203d·3d20··und·|·length·==· | 000f01e0:·756e·6420·7c20·6c65·6e67·7468·203d·3d20··und·|·length·==· | ||
| 000f01f0:·300a·2020·7768·656e·3a0a·2020·2d20· | 000f01f0:·300a·2020·7768·656e·3a0a·2020·2d20·616e··0.··when:.··-·an | ||
| 000f0200:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | |||
| 000f0210:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 000f0220:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | |||
| 000f0230:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000f0240:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000f0250:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000f0260:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000f02 | 000f0200:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 000f0210:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000f0220:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000f0230:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000f0240:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000f0250:·7222·5d0a·2020·2d20·2722·6175·6469·7422··r"].··-·'"audit" | |||
| 000f0260:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000f0270:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 000f0280:·6773·3a0a·2020·2d20·434a·4953·2d35·2e34··gs:.··-·CJIS-5.4 | 000f0280:·6773·3a0a·2020·2d20·434a·4953·2d35·2e34··gs:.··-·CJIS-5.4 | ||
| 000f0290:·2e31·2e31·0a20·202d·204e·4953·542d·3830··.1.1.··-·NIST-80 | 000f0290:·2e31·2e31·0a20·202d·204e·4953·542d·3830··.1.1.··-·NIST-80 | ||
| 000f02a0:·302d·3137·312d·332e·312e·370a·2020·2d20··0-171-3.1.7.··-· | 000f02a0:·302d·3137·312d·332e·312e·370a·2020·2d20··0-171-3.1.7.··-· | ||
| 000f02b0:·4e49·5354·2d38·3030·2d35·332d·4143·2d36··NIST-800-53-AC-6 | 000f02b0:·4e49·5354·2d38·3030·2d35·332d·4143·2d36··NIST-800-53-AC-6 | ||
| 000f02c0:·2839·290a·2020·2d20·4e49·5354·2d38·3030··(9).··-·NIST-800 | 000f02c0:·2839·290a·2020·2d20·4e49·5354·2d38·3030··(9).··-·NIST-800 | ||
| 000f02d0:·2d35·332d·4155·2d31·3228·6329·0a20·202d··-53-AU-12(c).··- | 000f02d0:·2d35·332d·4155·2d31·3228·6329·0a20·202d··-53-AU-12(c).··- | ||
| 000f02e0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | 000f02e0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| Offset 61765, 23 lines modified | Offset 61765, 23 lines modified | ||
| 000f1440:·745f·7469·6d65·5f72·756c·6573·0a20·2020··t_time_rules.··· | 000f1440:·745f·7469·6d65·5f72·756c·6573·0a20·2020··t_time_rules.··· | ||
| 000f1450:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | 000f1450:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | ||
| 000f1460:·2020·2020·2020·6d6f·6465·3a20·6f2d·7277········mode:·o-rw | 000f1460:·2020·2020·2020·6d6f·6465·3a20·6f2d·7277········mode:·o-rw | ||
| 000f1470:·780a·2020·2020·2020·7374·6174·653a·2070··x.······state:·p | 000f1470:·780a·2020·2020·2020·7374·6174·653a·2070··x.······state:·p | ||
| 000f1480:·7265·7365·6e74·0a20·2020·2077·6865·6e3a··resent.····when: | 000f1480:·7265·7365·6e74·0a20·2020·2077·6865·6e3a··resent.····when: | ||
| 000f1490:·2073·7973·6361·6c6c·735f·666f·756e·6420···syscalls_found· | 000f1490:·2073·7973·6361·6c6c·735f·666f·756e·6420···syscalls_found· | ||
| 000f14a0:·7c20·6c65·6e67·7468·203d·3d20·300a·2020··|·length·==·0.·· | 000f14a0:·7c20·6c65·6e67·7468·203d·3d20·300a·2020··|·length·==·0.·· | ||
| 000f14b0:·7768·656e·3a0a·2020·2d20· | 000f14b0:·7768·656e·3a0a·2020·2d20·616e·7369·626c··when:.··-·ansibl | ||
| 000f14c0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 000f14d0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 000f14e0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000f14f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000f1500:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000f1510:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 000f1 | 000f14c0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 000f14d0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 000f14e0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 000f14f0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| Max diff block lines reached; 79208/89274 bytes (88.72%) of diff not shown. | |||
| Offset 3169, 15 lines modified | Offset 3169, 15 lines modified | ||
| 3169 | ············A.16.1.5,·A.16.1.7,·A.6.2.1,·A.6.2.2,·AU-2(d),·AU-12(c),·AC-6(9),·CM-6(a),·DE.AE-3,·DE.AE-5,·DE.CM-1,·DE.CM- | 3169 | ············A.16.1.5,·A.16.1.7,·A.6.2.1,·A.6.2.2,·AU-2(d),·AU-12(c),·AC-6(9),·CM-6(a),·DE.AE-3,·DE.AE-5,·DE.CM-1,·DE.CM- |
| 3170 | ············3,·DE.CM-7,·ID.SC-4,·PR.AC-3,·PR.PT-1,·PR.PT-4,·RS.AN-1,·RS.AN-4,·FAU_GEN.1.1.c,·Req-10.2.7,·SRG-OS-000037- | 3170 | ············3,·DE.CM-7,·ID.SC-4,·PR.AC-3,·PR.PT-1,·PR.PT-4,·RS.AN-1,·RS.AN-4,·FAU_GEN.1.1.c,·Req-10.2.7,·SRG-OS-000037- |
| 3171 | ············GPOS-00015,·SRG-OS-000042-GPOS-00020,·SRG-OS-000062-GPOS-00031,·SRG-OS-000392-GPOS-00172,·SRG-OS-000462- | 3171 | ············GPOS-00015,·SRG-OS-000042-GPOS-00020,·SRG-OS-000062-GPOS-00031,·SRG-OS-000392-GPOS-00172,·SRG-OS-000462- |
| 3172 | ············GPOS-00206,·SRG-OS-000471-GPOS-00215,·SRG-OS-000471-GPOS-00216,·SRG-OS-000477-GPOS-00222,·SRG-OS-000477-VMM- | 3172 | ············GPOS-00206,·SRG-OS-000471-GPOS-00215,·SRG-OS-000471-GPOS-00216,·SRG-OS-000477-GPOS-00222,·SRG-OS-000477-VMM- |
| 3173 | ············001970,·4.1.17 | 3173 | ············001970,·4.1.17 |
| 3174 | Remediation_Shell_script_⇲ | 3174 | Remediation_Shell_script_⇲ |
| 3175 | #·Remediation·is·applicable·only·in·certain·platforms | 3175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3176 | if· | 3176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·audit;·then |
| 3177 | #·First·perform·the·remediation·of·the·syscall·rule | 3177 | #·First·perform·the·remediation·of·the·syscall·rule |
| 3178 | #·Retrieve·hardware·architecture·of·the·underlying·system | 3178 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 3179 | #·Note:·32-bit·and·64-bit·kernel·syscall·numbers·not·always·line·up·=> | 3179 | #·Note:·32-bit·and·64-bit·kernel·syscall·numbers·not·always·line·up·=> |
| 3180 | #·······it's·required·on·a·64-bit·system·to·check·also·for·the·presence | 3180 | #·······it's·required·on·a·64-bit·system·to·check·also·for·the·presence |
| 3181 | #·······of·32-bit's·equivalent·of·the·corresponding·rule. | 3181 | #·······of·32-bit's·equivalent·of·the·corresponding·rule. |
| 3182 | #·······(See·`man·7·audit.rules`·for·details·) | 3182 | #·······(See·`man·7·audit.rules`·for·details·) |
| Offset 3535, 15 lines modified | Offset 3535, 15 lines modified | ||
| 3535 | ············A.16.1.5,·A.16.1.7,·A.6.2.1,·A.6.2.2,·AU-2(d),·AU-12(c),·AC-6(9),·CM-6(a),·DE.AE-3,·DE.AE-5,·DE.CM-1,·DE.CM- | 3535 | ············A.16.1.5,·A.16.1.7,·A.6.2.1,·A.6.2.2,·AU-2(d),·AU-12(c),·AC-6(9),·CM-6(a),·DE.AE-3,·DE.AE-5,·DE.CM-1,·DE.CM- |
| 3536 | ············3,·DE.CM-7,·ID.SC-4,·PR.AC-3,·PR.PT-1,·PR.PT-4,·RS.AN-1,·RS.AN-4,·FAU_GEN.1.1.c,·Req-10.2.7,·SRG-OS-000037- | 3536 | ············3,·DE.CM-7,·ID.SC-4,·PR.AC-3,·PR.PT-1,·PR.PT-4,·RS.AN-1,·RS.AN-4,·FAU_GEN.1.1.c,·Req-10.2.7,·SRG-OS-000037- |
| 3537 | ············GPOS-00015,·SRG-OS-000042-GPOS-00020,·SRG-OS-000062-GPOS-00031,·SRG-OS-000392-GPOS-00172,·SRG-OS-000462- | 3537 | ············GPOS-00015,·SRG-OS-000042-GPOS-00020,·SRG-OS-000062-GPOS-00031,·SRG-OS-000392-GPOS-00172,·SRG-OS-000462- |
| 3538 | ············GPOS-00206,·SRG-OS-000471-GPOS-00215,·SRG-OS-000471-GPOS-00216,·SRG-OS-000477-GPOS-00222,·SRG-OS-000477-VMM- | 3538 | ············GPOS-00206,·SRG-OS-000471-GPOS-00215,·SRG-OS-000471-GPOS-00216,·SRG-OS-000477-GPOS-00222,·SRG-OS-000477-VMM- |
| 3539 | ············001970,·4.1.17 | 3539 | ············001970,·4.1.17 |
| 3540 | Remediation_Shell_script_⇲ | 3540 | Remediation_Shell_script_⇲ |
| 3541 | #·Remediation·is·applicable·only·in·certain·platforms | 3541 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3542 | if· | 3542 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·audit;·then |
| 3543 | #·First·perform·the·remediation·of·the·syscall·rule | 3543 | #·First·perform·the·remediation·of·the·syscall·rule |
| 3544 | #·Retrieve·hardware·architecture·of·the·underlying·system | 3544 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 3545 | #·Note:·32-bit·and·64-bit·kernel·syscall·numbers·not·always·line·up·=> | 3545 | #·Note:·32-bit·and·64-bit·kernel·syscall·numbers·not·always·line·up·=> |
| 3546 | #·······it's·required·on·a·64-bit·system·to·check·also·for·the·presence | 3546 | #·······it's·required·on·a·64-bit·system·to·check·also·for·the·presence |
| 3547 | #·······of·32-bit's·equivalent·of·the·corresponding·rule. | 3547 | #·······of·32-bit's·equivalent·of·the·corresponding·rule. |
| 3548 | #·······(See·`man·7·audit.rules`·for·details·) | 3548 | #·······(See·`man·7·audit.rules`·for·details·) |
| Offset 4062, 16 lines modified | Offset 4062, 16 lines modified | ||
| 4062 | ··-·no_reboot_needed | 4062 | ··-·no_reboot_needed |
| 4063 | ··-·restrict_strategy | 4063 | ··-·restrict_strategy |
| 4064 | -·name:·Set·architecture·for·audit·tasks | 4064 | -·name:·Set·architecture·for·audit·tasks |
| 4065 | ··set_fact: | 4065 | ··set_fact: |
| 4066 | ····audit_arch:·b64 | 4066 | ····audit_arch:·b64 |
| 4067 | ··when: | 4067 | ··when: |
| 4068 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4069 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4068 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4069 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4070 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4070 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4071 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4071 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4072 | ··tags: | 4072 | ··tags: |
| 4073 | ··-·CJIS-5.4.1.1 | 4073 | ··-·CJIS-5.4.1.1 |
| 4074 | ··-·NIST-800-171-3.1.7 | 4074 | ··-·NIST-800-171-3.1.7 |
| 4075 | ··-·NIST-800-53-AC-6(9) | 4075 | ··-·NIST-800-53-AC-6(9) |
| 4076 | ··-·NIST-800-53-AU-12(c) | 4076 | ··-·NIST-800-53-AU-12(c) |
| Offset 4204, 16 lines modified | Offset 4204, 16 lines modified | ||
| 4204 | ······path:·'{{·audit_file·}}' | 4204 | ······path:·'{{·audit_file·}}' |
| 4205 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules | 4205 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules |
| 4206 | ······create:·true | 4206 | ······create:·true |
| 4207 | ······mode:·o-rwx | 4207 | ······mode:·o-rwx |
| 4208 | ······state:·present | 4208 | ······state:·present |
| 4209 | ····when:·syscalls_found·|·length·==·0 | 4209 | ····when:·syscalls_found·|·length·==·0 |
| 4210 | ··when: | 4210 | ··when: |
| 4211 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4212 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4211 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4212 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4213 | ··tags: | 4213 | ··tags: |
| 4214 | ··-·CJIS-5.4.1.1 | 4214 | ··-·CJIS-5.4.1.1 |
| 4215 | ··-·NIST-800-171-3.1.7 | 4215 | ··-·NIST-800-171-3.1.7 |
| 4216 | ··-·NIST-800-53-AC-6(9) | 4216 | ··-·NIST-800-53-AC-6(9) |
| 4217 | ··-·NIST-800-53-AU-12(c) | 4217 | ··-·NIST-800-53-AU-12(c) |
| 4218 | ··-·NIST-800-53-AU-2(d) | 4218 | ··-·NIST-800-53-AU-2(d) |
| 4219 | ··-·NIST-800-53-CM-6(a) | 4219 | ··-·NIST-800-53-CM-6(a) |
| Offset 4343, 16 lines modified | Offset 4343, 16 lines modified | ||
| 4343 | ······path:·'{{·audit_file·}}' | 4343 | ······path:·'{{·audit_file·}}' |
| 4344 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules | 4344 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules |
| 4345 | ······create:·true | 4345 | ······create:·true |
| 4346 | ······mode:·o-rwx | 4346 | ······mode:·o-rwx |
| 4347 | ······state:·present | 4347 | ······state:·present |
| 4348 | ····when:·syscalls_found·|·length·==·0 | 4348 | ····when:·syscalls_found·|·length·==·0 |
| 4349 | ··when: | 4349 | ··when: |
| 4350 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4351 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4350 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4351 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4352 | ··-·audit_arch·==·"b64" | 4352 | ··-·audit_arch·==·"b64" |
| 4353 | ··tags: | 4353 | ··tags: |
| 4354 | ··-·CJIS-5.4.1.1 | 4354 | ··-·CJIS-5.4.1.1 |
| 4355 | ··-·NIST-800-171-3.1.7 | 4355 | ··-·NIST-800-171-3.1.7 |
| 4356 | ··-·NIST-800-53-AC-6(9) | 4356 | ··-·NIST-800-53-AC-6(9) |
| 4357 | ··-·NIST-800-53-AU-12(c) | 4357 | ··-·NIST-800-53-AU-12(c) |
| 4358 | ··-·NIST-800-53-AU-2(d) | 4358 | ··-·NIST-800-53-AU-2(d) |
| Offset 4417, 16 lines modified | Offset 4417, 16 lines modified | ||
| 4417 | ··-·no_reboot_needed | 4417 | ··-·no_reboot_needed |
| 4418 | ··-·restrict_strategy | 4418 | ··-·restrict_strategy |
| 4419 | -·name:·Set·architecture·for·audit·tasks | 4419 | -·name:·Set·architecture·for·audit·tasks |
| 4420 | ··set_fact: | 4420 | ··set_fact: |
| 4421 | ····audit_arch:·b64 | 4421 | ····audit_arch:·b64 |
| 4422 | ··when: | 4422 | ··when: |
| 4423 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4424 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4423 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4424 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4425 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4425 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4426 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4426 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4427 | ··tags: | 4427 | ··tags: |
| 4428 | ··-·CJIS-5.4.1.1 | 4428 | ··-·CJIS-5.4.1.1 |
| 4429 | ··-·NIST-800-171-3.1.7 | 4429 | ··-·NIST-800-171-3.1.7 |
| 4430 | ··-·NIST-800-53-AC-6(9) | 4430 | ··-·NIST-800-53-AC-6(9) |
| 4431 | ··-·NIST-800-53-AU-12(c) | 4431 | ··-·NIST-800-53-AU-12(c) |
| Offset 4559, 16 lines modified | Offset 4559, 16 lines modified | ||
| 4559 | ······path:·'{{·audit_file·}}' | 4559 | ······path:·'{{·audit_file·}}' |
| 4560 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules | 4560 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules |
| 4561 | ······create:·true | 4561 | ······create:·true |
| 4562 | ······mode:·o-rwx | 4562 | ······mode:·o-rwx |
| 4563 | ······state:·present | 4563 | ······state:·present |
| 4564 | ····when:·syscalls_found·|·length·==·0 | 4564 | ····when:·syscalls_found·|·length·==·0 |
| 4565 | ··when: | 4565 | ··when: |
| 4566 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4567 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4566 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4567 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 4568 | ··tags: | 4568 | ··tags: |
| 4569 | ··-·CJIS-5.4.1.1 | 4569 | ··-·CJIS-5.4.1.1 |
| 4570 | ··-·NIST-800-171-3.1.7 | 4570 | ··-·NIST-800-171-3.1.7 |
| 4571 | ··-·NIST-800-53-AC-6(9) | 4571 | ··-·NIST-800-53-AC-6(9) |
| 4572 | ··-·NIST-800-53-AU-12(c) | 4572 | ··-·NIST-800-53-AU-12(c) |
| 4573 | ··-·NIST-800-53-AU-2(d) | 4573 | ··-·NIST-800-53-AU-2(d) |
| 4574 | ··-·NIST-800-53-CM-6(a) | 4574 | ··-·NIST-800-53-CM-6(a) |
| Offset 4699, 16 lines modified | Offset 4699, 16 lines modified | ||
| 4699 | ······path:·'{{·audit_file·}}' | 4699 | ······path:·'{{·audit_file·}}' |
| 4700 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules | 4700 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_time_rules |
| 4701 | ······create:·true | 4701 | ······create:·true |
| 4702 | ······mode:·o-rwx | 4702 | ······mode:·o-rwx |
| 4703 | ······state:·present | 4703 | ······state:·present |
| Max diff block lines reached; 20768/26322 bytes (78.90%) of diff not shown. | |||
| Offset 38584, 22 lines modified | Offset 38584, 22 lines modified | ||
| 00096b70:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | 00096b70:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | ||
| 00096b80:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | 00096b80:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | ||
| 00096b90:·6232·2f67·7275·622e·6366·670a·2020·7374··b2/grub.cfg.··st | 00096b90:·6232·2f67·7275·622e·6366·670a·2020·7374··b2/grub.cfg.··st | ||
| 00096ba0:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | 00096ba0:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | ||
| 00096bb0:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 00096bb0:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 00096bc0:·6667·0a20·2072·6567·6973·7465·723a·2066··fg.··register:·f | 00096bc0:·6667·0a20·2072·6567·6973·7465·723a·2066··fg.··register:·f | ||
| 00096bd0:·696c·655f·6578·6973·7473·0a20·2077·6865··ile_exists.··whe | 00096bd0:·696c·655f·6578·6973·7473·0a20·2077·6865··ile_exists.··whe | ||
| 00096be0:·6e3a·0a20·202d·2027·22 | 00096be0:·6e3a·0a20·202d·2027·222f·626f·6f74·2f65··n:.··-·'"/boot/e | ||
| 00096bf0:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 00096c00:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 00096c10:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 00096c20:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 00096 | 00096c30:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 00096c | 00096c40:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 00096c10:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 00096c20:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 00096c30:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 00096c40:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 00096c50:·6 | 00096c50:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | ||
| 00096c60:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 00096c60:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 00096c70:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 00096c70:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 00096c80:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 00096c80:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 00096c90:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 00096c90:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 00096ca0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | 00096ca0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 00096cb0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | 00096cb0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 00096cc0:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | 00096cc0:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | ||
| Offset 38620, 22 lines modified | Offset 38620, 22 lines modified | ||
| 00096db0:·616d·653a·2045·6e73·7572·6520·6772·6f75··ame:·Ensure·grou | 00096db0:·616d·653a·2045·6e73·7572·6520·6772·6f75··ame:·Ensure·grou | ||
| 00096dc0:·7020·6f77·6e65·7220·3020·6f6e·202f·626f··p·owner·0·on·/bo | 00096dc0:·7020·6f77·6e65·7220·3020·6f6e·202f·626f··p·owner·0·on·/bo | ||
| 00096dd0:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 00096dd0:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 00096de0:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | 00096de0:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | ||
| 00096df0:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 00096df0:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 00096e00:·6772·7562·2e63·6667·0a20·2020·2067·726f··grub.cfg.····gro | 00096e00:·6772·7562·2e63·6667·0a20·2020·2067·726f··grub.cfg.····gro | ||
| 00096e10:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | 00096e10:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | ||
| 00096e20:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 00096e30:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 00096e40:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 00096e50:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 00096e20 | 00096e60:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | ||
| 00096e | 00096e70:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 00096e | 00096e80:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 00096e50:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 00096e60:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 00096e70:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 00096e80:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 00096e90:·7 | 00096e90:·7327·0a20·202d·2061·6e73·6962·6c65·5f76··s'.··-·ansible_v | ||
| 00096ea0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 00096ea0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 00096eb0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 00096eb0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 00096ec0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 00096ec0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 00096ed0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 00096ed0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 00096ee0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | 00096ee0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | ||
| 00096ef0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | 00096ef0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | ||
| 00096f00:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | 00096f00:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | ||
| Offset 38685, 19 lines modified | Offset 38685, 19 lines modified | ||
| 000971c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | 000971c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 000971d0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | 000971d0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | ||
| 000971e0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | 000971e0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | ||
| 000971f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | 000971f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 00097200:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 00097200:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 00097210:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 00097210:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 00097220:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 00097220:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 00097230:·6c61·7466·6f72·6d73·0a69·6620· | 00097230:·6c61·7466·6f72·6d73·0a69·6620·5b20·2d66··latforms.if·[·-f | ||
| 00097240:·202f·7379·732f·6669·726d·7761·7265·2f65···/sys/firmware/e | |||
| 00097250:·6669·205d·2026·616d·703b·2661·6d70·3b20··fi·]·&&· | |||
| 000972 | 00097260:·7270·6d20·2d2d·7175·6965·7420·2d71·2067··rpm·--quiet·-q·g | ||
| 000972 | 00097270:·7275·6232·2d63·6f6d·6d6f·6e20·2661·6d70··rub2-common·& | ||
| 00097260:·703b·205b·202d·6620·2f73·7973·2f66·6972··p;·[·-f·/sys/fir | |||
| 00097270:·6d77·6172·652f·6566·6920·5d20·2661·6d70··mware/efi·]·& | |||
| 00097280:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | 00097280:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | ||
| 00097290:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | 00097290:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | ||
| 000972a0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | 000972a0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | ||
| 000972b0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | 000972b0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | ||
| 000972c0:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a63··nv·];·};·then..c | 000972c0:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a63··nv·];·};·then..c | ||
| 000972d0:·6867·7270·2030·202f·626f·6f74·2f67·7275··hgrp·0·/boot/gru | 000972d0:·6867·7270·2030·202f·626f·6f74·2f67·7275··hgrp·0·/boot/gru | ||
| 000972e0:·6232·2f67·7275·622e·6366·670a·0a65·6c73··b2/grub.cfg..els | 000972e0:·6232·2f67·7275·622e·6366·670a·0a65·6c73··b2/grub.cfg..els | ||
| Offset 39077, 21 lines modified | Offset 39077, 21 lines modified | ||
| 00098a40:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 00098a40:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 00098a50:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 00098a50:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 00098a60:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 00098a60:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 00098a70:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 00098a70:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 00098a80:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | 00098a80:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | ||
| 00098a90:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 00098a90:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 00098aa0:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 00098aa0:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 00098ab0:·2722·2f62·6f6f·742f·6566·6922·2069·6e20··'"/boot/efi"·in· | |||
| 00098ac0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 00098ad0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 00098ae0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 00098a | 00098af0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 00098 | 00098b00:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 00098 | 00098b10:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 00098ae0:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 00098af0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 00098b00:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 00098b10:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 00098b20:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 00098b20:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 00098b30:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 00098b30:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 00098b40:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | 00098b40:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 00098b50:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | 00098b50:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 00098b60:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | 00098b60:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 00098b70:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | 00098b70:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 00098b80:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | 00098b80:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | ||
| Offset 39112, 21 lines modified | Offset 39112, 21 lines modified | ||
| 00098c70:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | 00098c70:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 00098c80:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 00098c80:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 00098c90:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 00098c90:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 00098ca0:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | 00098ca0:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | ||
| 00098cb0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 00098cb0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 00098cc0:·7562·2e63·6667·0a20·2020·206f·776e·6572··ub.cfg.····owner | 00098cc0:·7562·2e63·6667·0a20·2020·206f·776e·6572··ub.cfg.····owner | ||
| 00098cd0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | 00098cd0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | ||
| 00098ce0:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 00098cf0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 00098d00:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 00098d10:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 00098 | 00098d20:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | ||
| 00098 | 00098d30:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | ||
| 00098d | 00098d40:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 00098d10:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 00098d20:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 00098d30:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 00098d40:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 00098d50:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 00098d50:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 00098d60:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 00098d60:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 00098d70:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 00098d70:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 00098d80:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 00098d80:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 00098d90:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 00098d90:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 00098da0:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 00098da0:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 00098db0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 00098db0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Max diff block lines reached; 7530/17346 bytes (43.41%) of diff not shown. | |||
| Offset 2682, 16 lines modified | Offset 2682, 16 lines modified | ||
| 2682 | ··-·no_reboot_needed | 2682 | ··-·no_reboot_needed |
| 2683 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 2683 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2684 | ··stat: | 2684 | ··stat: |
| 2685 | ····path:·/boot/grub2/grub.cfg | 2685 | ····path:·/boot/grub2/grub.cfg |
| 2686 | ··register:·file_exists | 2686 | ··register:·file_exists |
| 2687 | ··when: | 2687 | ··when: |
| 2688 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2689 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 2688 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 2689 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2690 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2690 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2691 | ··tags: | 2691 | ··tags: |
| 2692 | ··-·CJIS-5.5.2.2 | 2692 | ··-·CJIS-5.5.2.2 |
| 2693 | ··-·NIST-800-171-3.4.5 | 2693 | ··-·NIST-800-171-3.4.5 |
| 2694 | ··-·NIST-800-53-AC-6(1) | 2694 | ··-·NIST-800-53-AC-6(1) |
| 2695 | ··-·NIST-800-53-CM-6(a) | 2695 | ··-·NIST-800-53-CM-6(a) |
| 2696 | ··-·PCI-DSS-Req-7.1 | 2696 | ··-·PCI-DSS-Req-7.1 |
| Offset 2703, 16 lines modified | Offset 2703, 16 lines modified | ||
| 2703 | ··-·no_reboot_needed | 2703 | ··-·no_reboot_needed |
| 2704 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 2704 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 2705 | ··file: | 2705 | ··file: |
| 2706 | ····path:·/boot/grub2/grub.cfg | 2706 | ····path:·/boot/grub2/grub.cfg |
| 2707 | ····group:·'0' | 2707 | ····group:·'0' |
| 2708 | ··when: | 2708 | ··when: |
| 2709 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2710 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 2709 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 2710 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2711 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2711 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2712 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2712 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2713 | ··tags: | 2713 | ··tags: |
| 2714 | ··-·CJIS-5.5.2.2 | 2714 | ··-·CJIS-5.5.2.2 |
| 2715 | ··-·NIST-800-171-3.4.5 | 2715 | ··-·NIST-800-171-3.4.5 |
| 2716 | ··-·NIST-800-53-AC-6(1) | 2716 | ··-·NIST-800-53-AC-6(1) |
| 2717 | ··-·NIST-800-53-CM-6(a) | 2717 | ··-·NIST-800-53-CM-6(a) |
| Offset 2724, 15 lines modified | Offset 2724, 15 lines modified | ||
| 2724 | ··-·medium_severity | 2724 | ··-·medium_severity |
| 2725 | ··-·no_reboot_needed | 2725 | ··-·no_reboot_needed |
| 2726 | Remediation_Shell_script_⇲ | 2726 | Remediation_Shell_script_⇲ |
| 2727 | Complexity:·low | 2727 | Complexity:·low |
| 2728 | Disruption:·low | 2728 | Disruption:·low |
| 2729 | Strategy:···configure | 2729 | Strategy:···configure |
| 2730 | #·Remediation·is·applicable·only·in·certain·platforms | 2730 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2731 | if· | 2731 | if·[·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 2732 | then | 2732 | then |
| 2733 | chgrp·0·/boot/grub2/grub.cfg | 2733 | chgrp·0·/boot/grub2/grub.cfg |
| 2734 | else | 2734 | else |
| 2735 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2735 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2736 | fi | 2736 | fi |
| Offset 2768, 16 lines modified | Offset 2768, 16 lines modified | ||
| 2768 | ··-·no_reboot_needed | 2768 | ··-·no_reboot_needed |
| 2769 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 2769 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2770 | ··stat: | 2770 | ··stat: |
| 2771 | ····path:·/boot/grub2/grub.cfg | 2771 | ····path:·/boot/grub2/grub.cfg |
| 2772 | ··register:·file_exists | 2772 | ··register:·file_exists |
| 2773 | ··when: | 2773 | ··when: |
| 2774 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2775 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 2774 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 2775 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2776 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2776 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2777 | ··tags: | 2777 | ··tags: |
| 2778 | ··-·CJIS-5.5.2.2 | 2778 | ··-·CJIS-5.5.2.2 |
| 2779 | ··-·NIST-800-171-3.4.5 | 2779 | ··-·NIST-800-171-3.4.5 |
| 2780 | ··-·NIST-800-53-AC-6(1) | 2780 | ··-·NIST-800-53-AC-6(1) |
| 2781 | ··-·NIST-800-53-CM-6(a) | 2781 | ··-·NIST-800-53-CM-6(a) |
| 2782 | ··-·PCI-DSS-Req-7.1 | 2782 | ··-·PCI-DSS-Req-7.1 |
| Offset 2789, 16 lines modified | Offset 2789, 16 lines modified | ||
| 2789 | ··-·no_reboot_needed | 2789 | ··-·no_reboot_needed |
| 2790 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 2790 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 2791 | ··file: | 2791 | ··file: |
| 2792 | ····path:·/boot/grub2/grub.cfg | 2792 | ····path:·/boot/grub2/grub.cfg |
| 2793 | ····owner:·'0' | 2793 | ····owner:·'0' |
| 2794 | ··when: | 2794 | ··when: |
| 2795 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2796 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 2795 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 2796 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2797 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2797 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2798 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2798 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2799 | ··tags: | 2799 | ··tags: |
| 2800 | ··-·CJIS-5.5.2.2 | 2800 | ··-·CJIS-5.5.2.2 |
| 2801 | ··-·NIST-800-171-3.4.5 | 2801 | ··-·NIST-800-171-3.4.5 |
| 2802 | ··-·NIST-800-53-AC-6(1) | 2802 | ··-·NIST-800-53-AC-6(1) |
| 2803 | ··-·NIST-800-53-CM-6(a) | 2803 | ··-·NIST-800-53-CM-6(a) |
| Offset 2810, 15 lines modified | Offset 2810, 15 lines modified | ||
| 2810 | ··-·medium_severity | 2810 | ··-·medium_severity |
| 2811 | ··-·no_reboot_needed | 2811 | ··-·no_reboot_needed |
| 2812 | Remediation_Shell_script_⇲ | 2812 | Remediation_Shell_script_⇲ |
| 2813 | Complexity:·low | 2813 | Complexity:·low |
| 2814 | Disruption:·low | 2814 | Disruption:·low |
| 2815 | Strategy:···configure | 2815 | Strategy:···configure |
| 2816 | #·Remediation·is·applicable·only·in·certain·platforms | 2816 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2817 | if· | 2817 | if·[·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 2818 | then | 2818 | then |
| 2819 | chown·0·/boot/grub2/grub.cfg | 2819 | chown·0·/boot/grub2/grub.cfg |
| 2820 | else | 2820 | else |
| 2821 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 2821 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 2822 | fi | 2822 | fi |
| Offset 2852, 16 lines modified | Offset 2852, 16 lines modified | ||
| 2852 | ··-·no_reboot_needed | 2852 | ··-·no_reboot_needed |
| 2853 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 2853 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2854 | ··stat: | 2854 | ··stat: |
| 2855 | ····path:·/boot/grub2/grub.cfg | 2855 | ····path:·/boot/grub2/grub.cfg |
| 2856 | ··register:·file_exists | 2856 | ··register:·file_exists |
| 2857 | ··when: | 2857 | ··when: |
| 2858 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2859 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 2858 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 2859 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 2860 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2860 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2861 | ··tags: | 2861 | ··tags: |
| 2862 | ··-·NIST-800-171-3.4.5 | 2862 | ··-·NIST-800-171-3.4.5 |
| 2863 | ··-·NIST-800-53-AC-6(1) | 2863 | ··-·NIST-800-53-AC-6(1) |
| 2864 | ··-·NIST-800-53-CM-6(a) | 2864 | ··-·NIST-800-53-CM-6(a) |
| 2865 | ··-·configure_strategy | 2865 | ··-·configure_strategy |
| 2866 | ··-·file_permissions_efi_grub2_cfg | 2866 | ··-·file_permissions_efi_grub2_cfg |
| Offset 2871, 16 lines modified | Offset 2871, 16 lines modified | ||
| 2871 | ··-·no_reboot_needed | 2871 | ··-·no_reboot_needed |
| 2872 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 2872 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 2873 | ··file: | 2873 | ··file: |
| 2874 | ····path:·/boot/grub2/grub.cfg | 2874 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1080/5230 bytes (20.65%) of diff not shown. | |||
| Offset 23175, 21 lines modified | Offset 23175, 21 lines modified | ||
| 0005a860:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 0005a860:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0005a870:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 0005a870:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0005a880:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 0005a880:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0005a890:·646d·3134·3535·3422·3e3c·7072·653e·3c63··dm14554"><pre><c | 0005a890:·646d·3134·3535·3422·3e3c·7072·653e·3c63··dm14554"><pre><c | ||
| 0005a8a0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 0005a8a0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0005a8b0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 0005a8b0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 0005a8c0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 0005a8c0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 0005a8d0:·706c·6174·666f·726d·730a·6966·20 | 0005a8d0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | ||
| 0005a8e0:·202d·2d71·7569·6574·202d·7120·6175·6469···--quiet·-q·audi | |||
| 0005a8f0:·7420·2661·6d70·3b26·616d·703b·205b·2021··t·&&·[·! | |||
| 0005a | 0005a8e0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 0005a | 0005a8f0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 0005a9 | 0005a900:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 0005a9 | 0005a910:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | ||
| 0005a920:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 0005a930:·2d71·2061·7564·6974·3b20·7468·656e·0a0a··-q·audit;·then.. | |||
| 0005a940:·2320·4669·7273·7420·7065·7266·6f72·6d20··#·First·perform· | 0005a940:·2320·4669·7273·7420·7065·7266·6f72·6d20··#·First·perform· | ||
| 0005a950:·7468·6520·7265·6d65·6469·6174·696f·6e20··the·remediation· | 0005a950:·7468·6520·7265·6d65·6469·6174·696f·6e20··the·remediation· | ||
| 0005a960:·6f66·2074·6865·2073·7973·6361·6c6c·2072··of·the·syscall·r | 0005a960:·6f66·2074·6865·2073·7973·6361·6c6c·2072··of·the·syscall·r | ||
| 0005a970:·756c·650a·2320·5265·7472·6965·7665·2068··ule.#·Retrieve·h | 0005a970:·756c·650a·2320·5265·7472·6965·7665·2068··ule.#·Retrieve·h | ||
| 0005a980:·6172·6477·6172·6520·6172·6368·6974·6563··ardware·architec | 0005a980:·6172·6477·6172·6520·6172·6368·6974·6563··ardware·architec | ||
| 0005a990:·7475·7265·206f·6620·7468·6520·756e·6465··ture·of·the·unde | 0005a990:·7475·7265·206f·6620·7468·6520·756e·6465··ture·of·the·unde | ||
| 0005a9a0:·726c·7969·6e67·2073·7973·7465·6d0a·2320··rlying·system.#· | 0005a9a0:·726c·7969·6e67·2073·7973·7465·6d0a·2320··rlying·system.#· |
| Offset 996, 15 lines modified | Offset 996, 15 lines modified | ||
| 996 | ············4.1,·SR_4.3,·SR_5.1,·SR_5.2,·SR_5.3,·SR_6.1,·SR_6.2,·SR_7.1,·SR_7.6,·A.11.2.6, | 996 | ············4.1,·SR_4.3,·SR_5.1,·SR_5.2,·SR_5.3,·SR_6.1,·SR_6.2,·SR_7.1,·SR_7.6,·A.11.2.6, |
| 997 | ············A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.13.1.1,·A.13.2.1,·A.14.1.3, | 997 | ············A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.13.1.1,·A.13.2.1,·A.14.1.3, |
| 998 | ············A.14.2.7,·A.15.2.1,·A.15.2.2,·A.16.1.4,·A.16.1.5,·A.16.1.7,·A.6.2.1,·A.6.2.2,·AU-2(d), | 998 | ············A.14.2.7,·A.15.2.1,·A.15.2.2,·A.16.1.4,·A.16.1.5,·A.16.1.7,·A.6.2.1,·A.6.2.2,·AU-2(d), |
| 999 | ············AU-12(c),·AC-6(9),·CM-6(a),·DE.AE-3,·DE.AE-5,·DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4, | 999 | ············AU-12(c),·AC-6(9),·CM-6(a),·DE.AE-3,·DE.AE-5,·DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4, |
| 1000 | ············PR.AC-3,·PR.PT-1,·PR.PT-4,·RS.AN-1,·RS.AN-4,·Req-10.2.7 | 1000 | ············PR.AC-3,·PR.PT-1,·PR.PT-4,·RS.AN-1,·RS.AN-4,·Req-10.2.7 |
| 1001 | Remediation_Shell_script_⇲ | 1001 | Remediation_Shell_script_⇲ |
| 1002 | #·Remediation·is·applicable·only·in·certain·platforms | 1002 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1003 | if· | 1003 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·audit;·then |
| 1004 | #·First·perform·the·remediation·of·the·syscall·rule | 1004 | #·First·perform·the·remediation·of·the·syscall·rule |
| 1005 | #·Retrieve·hardware·architecture·of·the·underlying·system | 1005 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 1006 | #·Note:·32-bit·and·64-bit·kernel·syscall·numbers·not·always·line·up·=> | 1006 | #·Note:·32-bit·and·64-bit·kernel·syscall·numbers·not·always·line·up·=> |
| 1007 | #·······it's·required·on·a·64-bit·system·to·check·also·for·the·presence | 1007 | #·······it's·required·on·a·64-bit·system·to·check·also·for·the·presence |
| 1008 | #·······of·32-bit's·equivalent·of·the·corresponding·rule. | 1008 | #·······of·32-bit's·equivalent·of·the·corresponding·rule. |
| 1009 | #·······(See·`man·7·audit.rules`·for·details·) | 1009 | #·······(See·`man·7·audit.rules`·for·details·) |
| Offset 66360, 22 lines modified | Offset 66360, 22 lines modified | ||
| 00103370:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | 00103370:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | ||
| 00103380:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | 00103380:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | ||
| 00103390:·6232·2f67·7275·622e·6366·670a·2020·7374··b2/grub.cfg.··st | 00103390:·6232·2f67·7275·622e·6366·670a·2020·7374··b2/grub.cfg.··st | ||
| 001033a0:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | 001033a0:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | ||
| 001033b0:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 001033b0:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 001033c0:·6667·0a20·2072·6567·6973·7465·723a·2066··fg.··register:·f | 001033c0:·6667·0a20·2072·6567·6973·7465·723a·2066··fg.··register:·f | ||
| 001033d0:·696c·655f·6578·6973·7473·0a20·2077·6865··ile_exists.··whe | 001033d0:·696c·655f·6578·6973·7473·0a20·2077·6865··ile_exists.··whe | ||
| 001033e0:·6e3a·0a20·202d·2027·22 | 001033e0:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 001033f0:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 00103400:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 00103410:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 00103420:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 00103 | 001033f0:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 001034 | 00103400:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 00103410:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 00103420:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 00103430:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 00103440:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 00103450:·6 | 00103450:·6c69·7374·270a·2020·2d20·616e·7369·626c··list'.··-·ansibl | ||
| 00103460:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 00103460:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 00103470:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 00103470:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 00103480:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 00103480:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 00103490:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 00103490:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 001034a0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | 001034a0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 001034b0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | 001034b0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 001034c0:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | 001034c0:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | ||
| Offset 66396, 22 lines modified | Offset 66396, 22 lines modified | ||
| 001035b0:·616d·653a·2045·6e73·7572·6520·6772·6f75··ame:·Ensure·grou | 001035b0:·616d·653a·2045·6e73·7572·6520·6772·6f75··ame:·Ensure·grou | ||
| 001035c0:·7020·6f77·6e65·7220·3020·6f6e·202f·626f··p·owner·0·on·/bo | 001035c0:·7020·6f77·6e65·7220·3020·6f6e·202f·626f··p·owner·0·on·/bo | ||
| 001035d0:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 001035d0:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 001035e0:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | 001035e0:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | ||
| 001035f0:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 001035f0:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 00103600:·6772·7562·2e63·6667·0a20·2020·2067·726f··grub.cfg.····gro | 00103600:·6772·7562·2e63·6667·0a20·2020·2067·726f··grub.cfg.····gro | ||
| 00103610:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | 00103610:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | ||
| 00103620:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 00103630:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 00103640:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 00103650:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 001036 | 00103620:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 001036 | 00103630:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 001036 | 00103640:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 00103650:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 00103660:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 00103670:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 00103680:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 00103690:·7 | 00103690:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 001036a0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 001036a0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 001036b0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 001036b0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 001036c0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 001036c0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 001036d0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 001036d0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 001036e0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | 001036e0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | ||
| 001036f0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | 001036f0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | ||
| 00103700:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | 00103700:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | ||
| Offset 66461, 19 lines modified | Offset 66461, 19 lines modified | ||
| 001039c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | 001039c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 001039d0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | 001039d0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | ||
| 001039e0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | 001039e0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | ||
| 001039f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | 001039f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 00103a00:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 00103a00:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 00103a10:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 00103a10:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 00103a20:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 00103a20:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 00103a30:·6c61·7466·6f72·6d73·0a69·6620· | 00103a30:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | ||
| 00103a40:·202f·7379·732f·6669·726d·7761·7265·2f65···/sys/firmware/e | |||
| 00103a50:·6669·205d·2026·616d·703b·2661·6d70·3b20··fi·]·&&· | |||
| 00103a | 00103a40:·2d2d·7175·6965·7420·2d71·2067·7275·6232··--quiet·-q·grub2 | ||
| 00103a | 00103a50:·2d63·6f6d·6d6f·6e20·2661·6d70·3b26·616d··-common·&&am | ||
| 00103a60:·703b·205b·202d·6620·2f73·7973·2f66·6972··p;·[·-f·/sys/fir | |||
| 00103a70:·6d77·6172·652f·6566·6920·5d20·2661·6d70··mware/efi·]·& | |||
| 00103a80:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | 00103a80:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | ||
| 00103a90:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | 00103a90:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | ||
| 00103aa0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | 00103aa0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | ||
| 00103ab0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | 00103ab0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | ||
| 00103ac0:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a63··nv·];·};·then..c | 00103ac0:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a63··nv·];·};·then..c | ||
| 00103ad0:·6867·7270·2030·202f·626f·6f74·2f67·7275··hgrp·0·/boot/gru | 00103ad0:·6867·7270·2030·202f·626f·6f74·2f67·7275··hgrp·0·/boot/gru | ||
| 00103ae0:·6232·2f67·7275·622e·6366·670a·0a65·6c73··b2/grub.cfg..els | 00103ae0:·6232·2f67·7275·622e·6366·670a·0a65·6c73··b2/grub.cfg..els | ||
| Offset 66853, 21 lines modified | Offset 66853, 21 lines modified | ||
| 00105240:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 00105240:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 00105250:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 00105250:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 00105260:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 00105260:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 00105270:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 00105270:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 00105280:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | 00105280:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | ||
| 00105290:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 00105290:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 001052a0:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 001052a0:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 001052b0:·2722·2f62·6f6f·742f·6566·6922·2069·6e20··'"/boot/efi"·in· | |||
| 001052c0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 001052d0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 001052e0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 001052 | 001052b0:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | ||
| 00105 | 001052c0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 00105 | 001052d0:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | ||
| 001052e0:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 001052f0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 00105300:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 00105310:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 00105320:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 00105320:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 00105330:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 00105330:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 00105340:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | 00105340:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 00105350:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | 00105350:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 00105360:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | 00105360:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 00105370:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | 00105370:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 00105380:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | 00105380:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | ||
| Offset 66888, 21 lines modified | Offset 66888, 21 lines modified | ||
| 00105470:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | 00105470:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 00105480:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 00105480:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 00105490:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 00105490:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 001054a0:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | 001054a0:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | ||
| 001054b0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 001054b0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 001054c0:·7562·2e63·6667·0a20·2020·206f·776e·6572··ub.cfg.····owner | 001054c0:·7562·2e63·6667·0a20·2020·206f·776e·6572··ub.cfg.····owner | ||
| 001054d0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | 001054d0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | ||
| 001054e0:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 001054f0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 00105500:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 00105510:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 00105 | 001054e0:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 00105 | 001054f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 001055 | 00105500:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | ||
| 00105510:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 00105520:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 00105530:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 00105540:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 00105550:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 00105550:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 00105560:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 00105560:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 00105570:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 00105570:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 00105580:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 00105580:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 00105590:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 00105590:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 001055a0:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 001055a0:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 001055b0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 001055b0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Max diff block lines reached; 7530/17346 bytes (43.41%) of diff not shown. | |||
| Offset 5671, 16 lines modified | Offset 5671, 16 lines modified | ||
| 5671 | ··-·no_reboot_needed | 5671 | ··-·no_reboot_needed |
| 5672 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5672 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5673 | ··stat: | 5673 | ··stat: |
| 5674 | ····path:·/boot/grub2/grub.cfg | 5674 | ····path:·/boot/grub2/grub.cfg |
| 5675 | ··register:·file_exists | 5675 | ··register:·file_exists |
| 5676 | ··when: | 5676 | ··when: |
| 5677 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5678 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5677 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5678 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5679 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5679 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5680 | ··tags: | 5680 | ··tags: |
| 5681 | ··-·CJIS-5.5.2.2 | 5681 | ··-·CJIS-5.5.2.2 |
| 5682 | ··-·NIST-800-171-3.4.5 | 5682 | ··-·NIST-800-171-3.4.5 |
| 5683 | ··-·NIST-800-53-AC-6(1) | 5683 | ··-·NIST-800-53-AC-6(1) |
| 5684 | ··-·NIST-800-53-CM-6(a) | 5684 | ··-·NIST-800-53-CM-6(a) |
| 5685 | ··-·PCI-DSS-Req-7.1 | 5685 | ··-·PCI-DSS-Req-7.1 |
| Offset 5692, 16 lines modified | Offset 5692, 16 lines modified | ||
| 5692 | ··-·no_reboot_needed | 5692 | ··-·no_reboot_needed |
| 5693 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5693 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5694 | ··file: | 5694 | ··file: |
| 5695 | ····path:·/boot/grub2/grub.cfg | 5695 | ····path:·/boot/grub2/grub.cfg |
| 5696 | ····group:·'0' | 5696 | ····group:·'0' |
| 5697 | ··when: | 5697 | ··when: |
| 5698 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5699 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5698 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5699 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5700 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5700 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5701 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5701 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5702 | ··tags: | 5702 | ··tags: |
| 5703 | ··-·CJIS-5.5.2.2 | 5703 | ··-·CJIS-5.5.2.2 |
| 5704 | ··-·NIST-800-171-3.4.5 | 5704 | ··-·NIST-800-171-3.4.5 |
| 5705 | ··-·NIST-800-53-AC-6(1) | 5705 | ··-·NIST-800-53-AC-6(1) |
| 5706 | ··-·NIST-800-53-CM-6(a) | 5706 | ··-·NIST-800-53-CM-6(a) |
| Offset 5713, 15 lines modified | Offset 5713, 15 lines modified | ||
| 5713 | ··-·medium_severity | 5713 | ··-·medium_severity |
| 5714 | ··-·no_reboot_needed | 5714 | ··-·no_reboot_needed |
| 5715 | Remediation_Shell_script_⇲ | 5715 | Remediation_Shell_script_⇲ |
| 5716 | Complexity:·low | 5716 | Complexity:·low |
| 5717 | Disruption:·low | 5717 | Disruption:·low |
| 5718 | Strategy:···configure | 5718 | Strategy:···configure |
| 5719 | #·Remediation·is·applicable·only·in·certain·platforms | 5719 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5720 | if· | 5720 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ |
| 5721 | run/.containerenv·];·};·then | 5721 | run/.containerenv·];·};·then |
| 5722 | chgrp·0·/boot/grub2/grub.cfg | 5722 | chgrp·0·/boot/grub2/grub.cfg |
| 5723 | else | 5723 | else |
| 5724 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5724 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5725 | fi | 5725 | fi |
| Offset 5758, 16 lines modified | Offset 5758, 16 lines modified | ||
| 5758 | ··-·no_reboot_needed | 5758 | ··-·no_reboot_needed |
| 5759 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5759 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5760 | ··stat: | 5760 | ··stat: |
| 5761 | ····path:·/boot/grub2/grub.cfg | 5761 | ····path:·/boot/grub2/grub.cfg |
| 5762 | ··register:·file_exists | 5762 | ··register:·file_exists |
| 5763 | ··when: | 5763 | ··when: |
| 5764 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5765 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5764 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5765 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5767 | ··tags: | 5767 | ··tags: |
| 5768 | ··-·CJIS-5.5.2.2 | 5768 | ··-·CJIS-5.5.2.2 |
| 5769 | ··-·NIST-800-171-3.4.5 | 5769 | ··-·NIST-800-171-3.4.5 |
| 5770 | ··-·NIST-800-53-AC-6(1) | 5770 | ··-·NIST-800-53-AC-6(1) |
| 5771 | ··-·NIST-800-53-CM-6(a) | 5771 | ··-·NIST-800-53-CM-6(a) |
| 5772 | ··-·PCI-DSS-Req-7.1 | 5772 | ··-·PCI-DSS-Req-7.1 |
| Offset 5779, 16 lines modified | Offset 5779, 16 lines modified | ||
| 5779 | ··-·no_reboot_needed | 5779 | ··-·no_reboot_needed |
| 5780 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5780 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5781 | ··file: | 5781 | ··file: |
| 5782 | ····path:·/boot/grub2/grub.cfg | 5782 | ····path:·/boot/grub2/grub.cfg |
| 5783 | ····owner:·'0' | 5783 | ····owner:·'0' |
| 5784 | ··when: | 5784 | ··when: |
| 5785 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5786 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5785 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5786 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5787 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5787 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5788 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5788 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5789 | ··tags: | 5789 | ··tags: |
| 5790 | ··-·CJIS-5.5.2.2 | 5790 | ··-·CJIS-5.5.2.2 |
| 5791 | ··-·NIST-800-171-3.4.5 | 5791 | ··-·NIST-800-171-3.4.5 |
| 5792 | ··-·NIST-800-53-AC-6(1) | 5792 | ··-·NIST-800-53-AC-6(1) |
| 5793 | ··-·NIST-800-53-CM-6(a) | 5793 | ··-·NIST-800-53-CM-6(a) |
| Offset 5800, 15 lines modified | Offset 5800, 15 lines modified | ||
| 5800 | ··-·medium_severity | 5800 | ··-·medium_severity |
| 5801 | ··-·no_reboot_needed | 5801 | ··-·no_reboot_needed |
| 5802 | Remediation_Shell_script_⇲ | 5802 | Remediation_Shell_script_⇲ |
| 5803 | Complexity:·low | 5803 | Complexity:·low |
| 5804 | Disruption:·low | 5804 | Disruption:·low |
| 5805 | Strategy:···configure | 5805 | Strategy:···configure |
| 5806 | #·Remediation·is·applicable·only·in·certain·platforms | 5806 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5807 | if· | 5807 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ |
| 5808 | run/.containerenv·];·};·then | 5808 | run/.containerenv·];·};·then |
| 5809 | chown·0·/boot/grub2/grub.cfg | 5809 | chown·0·/boot/grub2/grub.cfg |
| 5810 | else | 5810 | else |
| 5811 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5811 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5812 | fi | 5812 | fi |
| Offset 5843, 16 lines modified | Offset 5843, 16 lines modified | ||
| 5843 | ··-·no_reboot_needed | 5843 | ··-·no_reboot_needed |
| 5844 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5844 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5845 | ··stat: | 5845 | ··stat: |
| 5846 | ····path:·/boot/grub2/grub.cfg | 5846 | ····path:·/boot/grub2/grub.cfg |
| 5847 | ··register:·file_exists | 5847 | ··register:·file_exists |
| 5848 | ··when: | 5848 | ··when: |
| 5849 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5850 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5849 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5850 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5851 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5851 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5852 | ··tags: | 5852 | ··tags: |
| 5853 | ··-·NIST-800-171-3.4.5 | 5853 | ··-·NIST-800-171-3.4.5 |
| 5854 | ··-·NIST-800-53-AC-6(1) | 5854 | ··-·NIST-800-53-AC-6(1) |
| 5855 | ··-·NIST-800-53-CM-6(a) | 5855 | ··-·NIST-800-53-CM-6(a) |
| 5856 | ··-·configure_strategy | 5856 | ··-·configure_strategy |
| 5857 | ··-·file_permissions_efi_grub2_cfg | 5857 | ··-·file_permissions_efi_grub2_cfg |
| Offset 5862, 16 lines modified | Offset 5862, 16 lines modified | ||
| 5862 | ··-·no_reboot_needed | 5862 | ··-·no_reboot_needed |
| 5863 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5863 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5864 | ··file: | 5864 | ··file: |
| 5865 | ····path:·/boot/grub2/grub.cfg | 5865 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1011/5222 bytes (19.36%) of diff not shown. | |||
| Offset 40145, 21 lines modified | Offset 40145, 21 lines modified | ||
| 0009cd00:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 0009cd00:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 0009cd10:·6520·2f62·6f6f·742f·6772·7562·322f·6772··e·/boot/grub2/gr | 0009cd10:·6520·2f62·6f6f·742f·6772·7562·322f·6772··e·/boot/grub2/gr | ||
| 0009cd20:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | 0009cd20:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | ||
| 0009cd30:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 0009cd30:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 0009cd40:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 0009cd40:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 0009cd50:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 0009cd50:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 0009cd60:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 0009cd60:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 0009cd70:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 0009cd80:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 0009cd90:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 0009cda0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 0009cd | 0009cd70:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 0009cd | 0009cd80:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 0009cd | 0009cd90:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | ||
| 0009cda0:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 0009cdb0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 0009cdc0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 0009cdd0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 0009cde0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 0009cde0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 0009cdf0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 0009cdf0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 0009ce00:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 0009ce00:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 0009ce10:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 0009ce10:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 0009ce20:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 0009ce20:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 0009ce30:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | 0009ce30:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | ||
| 0009ce40:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | 0009ce40:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | ||
| Offset 40181, 21 lines modified | Offset 40181, 21 lines modified | ||
| 0009cf40:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | 0009cf40:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | ||
| 0009cf50:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | 0009cf50:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | ||
| 0009cf60:·7562·322f·6772·7562·2e63·6667·0a20·2066··ub2/grub.cfg.··f | 0009cf60:·7562·322f·6772·7562·2e63·6667·0a20·2066··ub2/grub.cfg.··f | ||
| 0009cf70:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | 0009cf70:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | ||
| 0009cf80:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 0009cf80:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 0009cf90:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | 0009cf90:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | ||
| 0009cfa0:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | 0009cfa0:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | ||
| 0009cfb0:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 0009cfc0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 0009cfd0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 0009cfe0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 0009cf | 0009cfb0:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 0009 | 0009cfc0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 0009 | 0009cfd0:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 0009cfe0:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 0009cff0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 0009d000:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 0009d010:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 0009d020:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 0009d020:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 0009d030:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 0009d030:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 0009d040:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 0009d040:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 0009d050:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 0009d050:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 0009d060:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 0009d060:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 0009d070:·6169·6e65·7222·5d0a·2020·2d20·6669·6c65··ainer"].··-·file | 0009d070:·6169·6e65·7222·5d0a·2020·2d20·6669·6c65··ainer"].··-·file | ||
| 0009d080:·5f65·7869·7374·732e·7374·6174·2069·7320··_exists.stat·is· | 0009d080:·5f65·7869·7374·732e·7374·6174·2069·7320··_exists.stat·is· | ||
| Offset 40246, 19 lines modified | Offset 40246, 19 lines modified | ||
| 0009d350:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | 0009d350:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0009d360:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | 0009d360:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 0009d370:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | 0009d370:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0009d380:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | 0009d380:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0009d390:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 0009d390:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0009d3a0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 0009d3a0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0009d3b0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 0009d3b0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0009d3c0:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 0009d3c0:·726d·730a·6966·205b·202d·6620·2f73·7973··rms.if·[·-f·/sys | |||
| 0009d3d0:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 0009d3e0:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 0009d3 | 0009d3d0:·6574·202d·7120·6772·7562·322d·636f·6d6d··et·-q·grub2-comm | ||
| 0009d | 0009d3e0:·6f6e·2026·616d·703b·2661·6d70·3b20·5b20··on·&&·[· | ||
| 0009d3f0:·2d66·202f·7379·732f·6669·726d·7761·7265··-f·/sys/firmware | |||
| 0009d400:·2f65·6669·205d·2026·616d·703b·2661·6d70··/efi·]·&& | |||
| 0009d410:·3b20·7b20·5b20·2120·2d66·202f·2e64·6f63··;·{·[·!·-f·/.doc | 0009d410:·3b20·7b20·5b20·2120·2d66·202f·2e64·6f63··;·{·[·!·-f·/.doc | ||
| 0009d420:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | 0009d420:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 0009d430:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | 0009d430:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 0009d440:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | 0009d440:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | ||
| 0009d450:·207d·3b20·7468·656e·0a0a·6368·6772·7020···};·then..chgrp· | 0009d450:·207d·3b20·7468·656e·0a0a·6368·6772·7020···};·then..chgrp· | ||
| 0009d460:·3020·2f62·6f6f·742f·6772·7562·322f·6772··0·/boot/grub2/gr | 0009d460:·3020·2f62·6f6f·742f·6772·7562·322f·6772··0·/boot/grub2/gr | ||
| 0009d470:·7562·2e63·6667·0a0a·656c·7365·0a20·2020··ub.cfg..else.··· | 0009d470:·7562·2e63·6667·0a0a·656c·7365·0a20·2020··ub.cfg..else.··· | ||
| Offset 40637, 22 lines modified | Offset 40637, 22 lines modified | ||
| 0009ebc0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | 0009ebc0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | ||
| 0009ebd0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | 0009ebd0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | ||
| 0009ebe0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 0009ebe0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 0009ebf0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 0009ebf0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 0009ec00:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 0009ec00:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 0009ec10:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | 0009ec10:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | ||
| 0009ec20:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | 0009ec20:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | ||
| 0009ec30:·2077·6865·6e3a·0a20·202d·2027·22 | 0009ec30:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 0009ec40:·6f74·2f65·6669·2220·696e·2061·6e73·6962··ot/efi"·in·ansib | |||
| 0009ec50:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 0009ec60:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 0009ec70:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 0009ec | 0009ec40:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 0009ec | 0009ec50:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 0009ec | 0009ec60:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | ||
| 0009ec70:·742f·6566·6922·2069·6e20·616e·7369·626c··t/efi"·in·ansibl | |||
| 0009ec80:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 0009ec90:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 0009eca0:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 0009ecb0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 0009ecb0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 0009ecc0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 0009ecc0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 0009ecd0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 0009ecd0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 0009ece0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 0009ece0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 0009ecf0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 0009ecf0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 0009ed00:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | 0009ed00:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 0009ed10:·434a·4953·2d35·2e35·2e32·2e32·0a20·202d··CJIS-5.5.2.2.··- | 0009ed10:·434a·4953·2d35·2e35·2e32·2e32·0a20·202d··CJIS-5.5.2.2.··- | ||
| Offset 40672, 22 lines modified | Offset 40672, 22 lines modified | ||
| 0009edf0:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | 0009edf0:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | ||
| 0009ee00:·6d65·3a20·456e·7375·7265·206f·776e·6572··me:·Ensure·owner | 0009ee00:·6d65·3a20·456e·7375·7265·206f·776e·6572··me:·Ensure·owner | ||
| 0009ee10:·2030·206f·6e20·2f62·6f6f·742f·6772·7562···0·on·/boot/grub | 0009ee10:·2030·206f·6e20·2f62·6f6f·742f·6772·7562···0·on·/boot/grub | ||
| 0009ee20:·322f·6772·7562·2e63·6667·0a20·2066·696c··2/grub.cfg.··fil | 0009ee20:·322f·6772·7562·2e63·6667·0a20·2066·696c··2/grub.cfg.··fil | ||
| 0009ee30:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | 0009ee30:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | ||
| 0009ee40:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 0009ee40:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 0009ee50:·670a·2020·2020·6f77·6e65·723a·2027·3027··g.····owner:·'0' | 0009ee50:·670a·2020·2020·6f77·6e65·723a·2027·3027··g.····owner:·'0' | ||
| 0009ee60:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 0009ee60:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 0009ee70:·626f·6f74·2f65·6669·2220·696e·2061·6e73··boot/efi"·in·ans | |||
| 0009ee80:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 0009ee90:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 0009eea0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 0009ee | 0009ee70:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 0009ee | 0009ee80:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 0009ee | 0009ee90:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | ||
| 0009eea0:·6f6f·742f·6566·6922·2069·6e20·616e·7369··oot/efi"·in·ansi | |||
| 0009eeb0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 0009eec0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 0009eed0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 0009eee0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 0009eee0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 0009eef0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 0009eef0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 0009ef00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 0009ef00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 0009ef10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 0009ef10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 0009ef20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 0009ef20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 0009ef30:·6e65·7222·5d0a·2020·2d20·6669·6c65·5f65··ner"].··-·file_e | 0009ef30:·6e65·7222·5d0a·2020·2d20·6669·6c65·5f65··ner"].··-·file_e | ||
| Max diff block lines reached; 7280/17070 bytes (42.65%) of diff not shown. | |||
| Offset 3075, 16 lines modified | Offset 3075, 16 lines modified | ||
| 3075 | ··-·no_reboot_needed | 3075 | ··-·no_reboot_needed |
| 3076 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 3076 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3077 | ··stat: | 3077 | ··stat: |
| 3078 | ····path:·/boot/grub2/grub.cfg | 3078 | ····path:·/boot/grub2/grub.cfg |
| 3079 | ··register:·file_exists | 3079 | ··register:·file_exists |
| 3080 | ··when: | 3080 | ··when: |
| 3081 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3082 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3081 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3082 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3083 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3083 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3084 | ··tags: | 3084 | ··tags: |
| 3085 | ··-·CJIS-5.5.2.2 | 3085 | ··-·CJIS-5.5.2.2 |
| 3086 | ··-·NIST-800-171-3.4.5 | 3086 | ··-·NIST-800-171-3.4.5 |
| 3087 | ··-·NIST-800-53-AC-6(1) | 3087 | ··-·NIST-800-53-AC-6(1) |
| 3088 | ··-·NIST-800-53-CM-6(a) | 3088 | ··-·NIST-800-53-CM-6(a) |
| 3089 | ··-·PCI-DSS-Req-7.1 | 3089 | ··-·PCI-DSS-Req-7.1 |
| Offset 3096, 16 lines modified | Offset 3096, 16 lines modified | ||
| 3096 | ··-·no_reboot_needed | 3096 | ··-·no_reboot_needed |
| 3097 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 3097 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 3098 | ··file: | 3098 | ··file: |
| 3099 | ····path:·/boot/grub2/grub.cfg | 3099 | ····path:·/boot/grub2/grub.cfg |
| 3100 | ····group:·'0' | 3100 | ····group:·'0' |
| 3101 | ··when: | 3101 | ··when: |
| 3102 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3103 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3102 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3103 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3104 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3104 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3105 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3105 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3106 | ··tags: | 3106 | ··tags: |
| 3107 | ··-·CJIS-5.5.2.2 | 3107 | ··-·CJIS-5.5.2.2 |
| 3108 | ··-·NIST-800-171-3.4.5 | 3108 | ··-·NIST-800-171-3.4.5 |
| 3109 | ··-·NIST-800-53-AC-6(1) | 3109 | ··-·NIST-800-53-AC-6(1) |
| 3110 | ··-·NIST-800-53-CM-6(a) | 3110 | ··-·NIST-800-53-CM-6(a) |
| Offset 3117, 15 lines modified | Offset 3117, 15 lines modified | ||
| 3117 | ··-·medium_severity | 3117 | ··-·medium_severity |
| 3118 | ··-·no_reboot_needed | 3118 | ··-·no_reboot_needed |
| 3119 | Remediation_Shell_script_⇲ | 3119 | Remediation_Shell_script_⇲ |
| 3120 | Complexity:·low | 3120 | Complexity:·low |
| 3121 | Disruption:·low | 3121 | Disruption:·low |
| 3122 | Strategy:···configure | 3122 | Strategy:···configure |
| 3123 | #·Remediation·is·applicable·only·in·certain·platforms | 3123 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3124 | if· | 3124 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ |
| 3125 | run/.containerenv·];·};·then | 3125 | run/.containerenv·];·};·then |
| 3126 | chgrp·0·/boot/grub2/grub.cfg | 3126 | chgrp·0·/boot/grub2/grub.cfg |
| 3127 | else | 3127 | else |
| 3128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3129 | fi | 3129 | fi |
| Offset 3162, 16 lines modified | Offset 3162, 16 lines modified | ||
| 3162 | ··-·no_reboot_needed | 3162 | ··-·no_reboot_needed |
| 3163 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 3163 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3164 | ··stat: | 3164 | ··stat: |
| 3165 | ····path:·/boot/grub2/grub.cfg | 3165 | ····path:·/boot/grub2/grub.cfg |
| 3166 | ··register:·file_exists | 3166 | ··register:·file_exists |
| 3167 | ··when: | 3167 | ··when: |
| 3168 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3169 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3168 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3169 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3170 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3170 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3171 | ··tags: | 3171 | ··tags: |
| 3172 | ··-·CJIS-5.5.2.2 | 3172 | ··-·CJIS-5.5.2.2 |
| 3173 | ··-·NIST-800-171-3.4.5 | 3173 | ··-·NIST-800-171-3.4.5 |
| 3174 | ··-·NIST-800-53-AC-6(1) | 3174 | ··-·NIST-800-53-AC-6(1) |
| 3175 | ··-·NIST-800-53-CM-6(a) | 3175 | ··-·NIST-800-53-CM-6(a) |
| 3176 | ··-·PCI-DSS-Req-7.1 | 3176 | ··-·PCI-DSS-Req-7.1 |
| Offset 3183, 16 lines modified | Offset 3183, 16 lines modified | ||
| 3183 | ··-·no_reboot_needed | 3183 | ··-·no_reboot_needed |
| 3184 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 3184 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 3185 | ··file: | 3185 | ··file: |
| 3186 | ····path:·/boot/grub2/grub.cfg | 3186 | ····path:·/boot/grub2/grub.cfg |
| 3187 | ····owner:·'0' | 3187 | ····owner:·'0' |
| 3188 | ··when: | 3188 | ··when: |
| 3189 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3190 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3189 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3190 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3191 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3191 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3192 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3192 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3193 | ··tags: | 3193 | ··tags: |
| 3194 | ··-·CJIS-5.5.2.2 | 3194 | ··-·CJIS-5.5.2.2 |
| 3195 | ··-·NIST-800-171-3.4.5 | 3195 | ··-·NIST-800-171-3.4.5 |
| 3196 | ··-·NIST-800-53-AC-6(1) | 3196 | ··-·NIST-800-53-AC-6(1) |
| 3197 | ··-·NIST-800-53-CM-6(a) | 3197 | ··-·NIST-800-53-CM-6(a) |
| Offset 3204, 15 lines modified | Offset 3204, 15 lines modified | ||
| 3204 | ··-·medium_severity | 3204 | ··-·medium_severity |
| 3205 | ··-·no_reboot_needed | 3205 | ··-·no_reboot_needed |
| 3206 | Remediation_Shell_script_⇲ | 3206 | Remediation_Shell_script_⇲ |
| 3207 | Complexity:·low | 3207 | Complexity:·low |
| 3208 | Disruption:·low | 3208 | Disruption:·low |
| 3209 | Strategy:···configure | 3209 | Strategy:···configure |
| 3210 | #·Remediation·is·applicable·only·in·certain·platforms | 3210 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3211 | if· | 3211 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/ |
| 3212 | run/.containerenv·];·};·then | 3212 | run/.containerenv·];·};·then |
| 3213 | chown·0·/boot/grub2/grub.cfg | 3213 | chown·0·/boot/grub2/grub.cfg |
| 3214 | else | 3214 | else |
| 3215 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3215 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3216 | fi | 3216 | fi |
| Offset 3247, 16 lines modified | Offset 3247, 16 lines modified | ||
| 3247 | ··-·no_reboot_needed | 3247 | ··-·no_reboot_needed |
| 3248 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 3248 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3249 | ··stat: | 3249 | ··stat: |
| 3250 | ····path:·/boot/grub2/grub.cfg | 3250 | ····path:·/boot/grub2/grub.cfg |
| 3251 | ··register:·file_exists | 3251 | ··register:·file_exists |
| 3252 | ··when: | 3252 | ··when: |
| 3253 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3254 | ··-·'"grub2-common"·in·ansible_facts.packages' | 3253 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 3254 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3255 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3255 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3256 | ··tags: | 3256 | ··tags: |
| 3257 | ··-·NIST-800-171-3.4.5 | 3257 | ··-·NIST-800-171-3.4.5 |
| 3258 | ··-·NIST-800-53-AC-6(1) | 3258 | ··-·NIST-800-53-AC-6(1) |
| 3259 | ··-·NIST-800-53-CM-6(a) | 3259 | ··-·NIST-800-53-CM-6(a) |
| 3260 | ··-·configure_strategy | 3260 | ··-·configure_strategy |
| 3261 | ··-·file_permissions_efi_grub2_cfg | 3261 | ··-·file_permissions_efi_grub2_cfg |
| Offset 3266, 16 lines modified | Offset 3266, 16 lines modified | ||
| 3266 | ··-·no_reboot_needed | 3266 | ··-·no_reboot_needed |
| 3267 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 3267 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 3268 | ··file: | 3268 | ··file: |
| 3269 | ····path:·/boot/grub2/grub.cfg | 3269 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1011/5222 bytes (19.36%) of diff not shown. | |||
| Offset 185605, 22 lines modified | Offset 185605, 22 lines modified | ||
| 002d5040:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 002d5040:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 002d5050:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 002d5050:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 002d5060:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002d5060:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002d5070:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 002d5070:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 002d5080:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002d5080:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002d5090:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 002d5090:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 002d50a0:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 002d50a0:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 002d50b0:·7768·656e·3a0a·2020·2d20·2722· | 002d50b0:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 002d50c0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 002d50d0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002d50e0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002d50f0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002d5100:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 002d5110:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 002d5 | 002d50c0:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 002d50d0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 002d50e0:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 002d50f0:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 002d5100:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002d5110:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002d5120:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002d5130:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 002d5130:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 002d5140:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 002d5140:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 002d5150:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 002d5150:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 002d5160:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 002d5160:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 002d5170:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 002d5170:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 002d5180:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 002d5180:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 002d5190:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | 002d5190:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | ||
| Offset 185641, 22 lines modified | Offset 185641, 22 lines modified | ||
| 002d5280:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | 002d5280:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | ||
| 002d5290:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | 002d5290:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | ||
| 002d52a0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 002d52a0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 002d52b0:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 002d52b0:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 002d52c0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 002d52c0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 002d52d0:·6232·2f67·7275·622e·6366·670a·2020·2020··b2/grub.cfg.···· | 002d52d0:·6232·2f67·7275·622e·6366·670a·2020·2020··b2/grub.cfg.···· | ||
| 002d52e0:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | 002d52e0:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | ||
| 002d52f0:·6e3a·0a20·202d·2027·22 | 002d52f0:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 002d5300:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 002d5310:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 002d5320:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002d5330:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 002d5340:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | |||
| 002d5350:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 002d53 | 002d5300:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 002d5310:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 002d5320:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 002d5330:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 002d5340:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002d5350:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002d5360:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 002d5370:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 002d5370:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 002d5380:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 002d5380:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 002d5390:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 002d5390:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 002d53a0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 002d53a0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 002d53b0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 002d53b0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 002d53c0:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | 002d53c0:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | ||
| 002d53d0:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | 002d53d0:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | ||
| Offset 185706, 19 lines modified | Offset 185706, 19 lines modified | ||
| 002d5690:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | 002d5690:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 002d56a0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | 002d56a0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 002d56b0:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | 002d56b0:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | ||
| 002d56c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | 002d56c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 002d56d0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | 002d56d0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 002d56e0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | 002d56e0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 002d56f0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | 002d56f0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 002d5700:·6e20·706c·6174·666f·726d·730a·6966·20 | 002d5700:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | ||
| 002d5710:·2021·202d·6620·2f73·7973·2f66·6972·6d77···!·-f·/sys/firmw | |||
| 002d5720:·6172·652f·6566·6920·5d20·2661·6d70·3b26··are/efi·]·&& | |||
| 002d5730:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 002d57 | 002d5710:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | ||
| 002d5720:·7562·322d·636f·6d6d·6f6e·2026·616d·703b··ub2-common·& | |||
| 002d5730:·2661·6d70·3b20·5b20·2120·2d66·202f·7379··&·[·!·-f·/sy | |||
| 002d5740:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 002d5750:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | 002d5750:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 002d5760:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | 002d5760:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 002d5770:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | 002d5770:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 002d5780:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | 002d5780:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 002d5790:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | 002d5790:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 002d57a0:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | 002d57a0:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | ||
| 002d57b0:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 002d57b0:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| Offset 186209, 22 lines modified | Offset 186209, 22 lines modified | ||
| 002d7600:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 002d7600:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 002d7610:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 002d7610:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 002d7620:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 002d7620:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 002d7630:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 002d7630:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 002d7640:·6232·2f75·7365·722e·6366·670a·2020·7265··b2/user.cfg.··re | 002d7640:·6232·2f75·7365·722e·6366·670a·2020·7265··b2/user.cfg.··re | ||
| 002d7650:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 002d7650:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 002d7660:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 002d7660:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 002d7670:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002d7680:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002d7690:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002d76a0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002d76b0:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | |||
| 002d76c0:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | |||
| 002d76 | 002d7670:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | ||
| 002d7680:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 002d7690:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | |||
| 002d76a0:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 002d76b0:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 002d76c0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 002d76d0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 002d76e0:·7 | 002d76e0:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 002d76f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 002d76f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 002d7700:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 002d7700:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 002d7710:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 002d7710:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 002d7720:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 002d7720:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 002d7730:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 002d7730:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 002d7740:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 002d7740:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 002d7750:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | 002d7750:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | ||
| Offset 186244, 22 lines modified | Offset 186244, 22 lines modified | ||
| 002d7830:·6465·640a·0a2d·206e·616d·653a·2045·6e73··ded..-·name:·Ens | 002d7830:·6465·640a·0a2d·206e·616d·653a·2045·6e73··ded..-·name:·Ens | ||
| 002d7840:·7572·6520·6772·6f75·7020·6f77·6e65·7220··ure·group·owner· | 002d7840:·7572·6520·6772·6f75·7020·6f77·6e65·7220··ure·group·owner· | ||
| 002d7850:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 002d7850:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 002d7860:·2f75·7365·722e·6366·670a·2020·6669·6c65··/user.cfg.··file | 002d7860:·2f75·7365·722e·6366·670a·2020·6669·6c65··/user.cfg.··file | ||
| 002d7870:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 002d7870:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 002d7880:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | 002d7880:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | ||
| 002d7890:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | 002d7890:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | ||
| 002d78a0:·2020·7768·656e·3a0a·2020·2d20·2722· | 002d78a0:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 002d78b0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 002d78c0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 002d78d0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 002d78e0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 002d78f0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 002d7900:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002d7 | 002d78b0:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 002d78c0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 002d78d0:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | |||
| Max diff block lines reached; 60208/69870 bytes (86.17%) of diff not shown. | |||
| Offset 41793, 16 lines modified | Offset 41793, 16 lines modified | ||
| 41793 | ··-·no_reboot_needed | 41793 | ··-·no_reboot_needed |
| 41794 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 41794 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 41795 | ··stat: | 41795 | ··stat: |
| 41796 | ····path:·/boot/grub2/grub.cfg | 41796 | ····path:·/boot/grub2/grub.cfg |
| 41797 | ··register:·file_exists | 41797 | ··register:·file_exists |
| 41798 | ··when: | 41798 | ··when: |
| 41799 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41800 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41799 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41800 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41801 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41801 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41802 | ··tags: | 41802 | ··tags: |
| 41803 | ··-·CJIS-5.5.2.2 | 41803 | ··-·CJIS-5.5.2.2 |
| 41804 | ··-·NIST-800-171-3.4.5 | 41804 | ··-·NIST-800-171-3.4.5 |
| 41805 | ··-·NIST-800-53-AC-6(1) | 41805 | ··-·NIST-800-53-AC-6(1) |
| 41806 | ··-·NIST-800-53-CM-6(a) | 41806 | ··-·NIST-800-53-CM-6(a) |
| 41807 | ··-·PCI-DSS-Req-7.1 | 41807 | ··-·PCI-DSS-Req-7.1 |
| Offset 41814, 16 lines modified | Offset 41814, 16 lines modified | ||
| 41814 | ··-·no_reboot_needed | 41814 | ··-·no_reboot_needed |
| 41815 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 41815 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 41816 | ··file: | 41816 | ··file: |
| 41817 | ····path:·/boot/grub2/grub.cfg | 41817 | ····path:·/boot/grub2/grub.cfg |
| 41818 | ····group:·'0' | 41818 | ····group:·'0' |
| 41819 | ··when: | 41819 | ··when: |
| 41820 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41821 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41820 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41821 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41823 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41823 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41824 | ··tags: | 41824 | ··tags: |
| 41825 | ··-·CJIS-5.5.2.2 | 41825 | ··-·CJIS-5.5.2.2 |
| 41826 | ··-·NIST-800-171-3.4.5 | 41826 | ··-·NIST-800-171-3.4.5 |
| 41827 | ··-·NIST-800-53-AC-6(1) | 41827 | ··-·NIST-800-53-AC-6(1) |
| 41828 | ··-·NIST-800-53-CM-6(a) | 41828 | ··-·NIST-800-53-CM-6(a) |
| Offset 41835, 15 lines modified | Offset 41835, 15 lines modified | ||
| 41835 | ··-·medium_severity | 41835 | ··-·medium_severity |
| 41836 | ··-·no_reboot_needed | 41836 | ··-·no_reboot_needed |
| 41837 | Remediation_Shell_script_⇲ | 41837 | Remediation_Shell_script_⇲ |
| 41838 | Complexity:·low | 41838 | Complexity:·low |
| 41839 | Disruption:·low | 41839 | Disruption:·low |
| 41840 | Strategy:···configure | 41840 | Strategy:···configure |
| 41841 | #·Remediation·is·applicable·only·in·certain·platforms | 41841 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41842 | if· | 41842 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41843 | chgrp·0·/boot/grub2/grub.cfg | 41843 | chgrp·0·/boot/grub2/grub.cfg |
| 41844 | else | 41844 | else |
| 41845 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41845 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41846 | fi | 41846 | fi |
| 41847 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 41847 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 41874, 16 lines modified | Offset 41874, 16 lines modified | ||
| 41874 | ··-·no_reboot_needed | 41874 | ··-·no_reboot_needed |
| 41875 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 41875 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 41876 | ··stat: | 41876 | ··stat: |
| 41877 | ····path:·/boot/grub2/user.cfg | 41877 | ····path:·/boot/grub2/user.cfg |
| 41878 | ··register:·file_exists | 41878 | ··register:·file_exists |
| 41879 | ··when: | 41879 | ··when: |
| 41880 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41881 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41880 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41881 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41882 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41882 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41883 | ··tags: | 41883 | ··tags: |
| 41884 | ··-·CJIS-5.5.2.2 | 41884 | ··-·CJIS-5.5.2.2 |
| 41885 | ··-·NIST-800-171-3.4.5 | 41885 | ··-·NIST-800-171-3.4.5 |
| 41886 | ··-·NIST-800-53-AC-6(1) | 41886 | ··-·NIST-800-53-AC-6(1) |
| 41887 | ··-·NIST-800-53-CM-6(a) | 41887 | ··-·NIST-800-53-CM-6(a) |
| 41888 | ··-·PCI-DSS-Req-7.1 | 41888 | ··-·PCI-DSS-Req-7.1 |
| Offset 41895, 16 lines modified | Offset 41895, 16 lines modified | ||
| 41895 | ··-·no_reboot_needed | 41895 | ··-·no_reboot_needed |
| 41896 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 41896 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 41897 | ··file: | 41897 | ··file: |
| 41898 | ····path:·/boot/grub2/user.cfg | 41898 | ····path:·/boot/grub2/user.cfg |
| 41899 | ····group:·'0' | 41899 | ····group:·'0' |
| 41900 | ··when: | 41900 | ··when: |
| 41901 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41902 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41901 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41902 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41903 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41903 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41904 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41904 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41905 | ··tags: | 41905 | ··tags: |
| 41906 | ··-·CJIS-5.5.2.2 | 41906 | ··-·CJIS-5.5.2.2 |
| 41907 | ··-·NIST-800-171-3.4.5 | 41907 | ··-·NIST-800-171-3.4.5 |
| 41908 | ··-·NIST-800-53-AC-6(1) | 41908 | ··-·NIST-800-53-AC-6(1) |
| 41909 | ··-·NIST-800-53-CM-6(a) | 41909 | ··-·NIST-800-53-CM-6(a) |
| Offset 41916, 15 lines modified | Offset 41916, 15 lines modified | ||
| 41916 | ··-·medium_severity | 41916 | ··-·medium_severity |
| 41917 | ··-·no_reboot_needed | 41917 | ··-·no_reboot_needed |
| 41918 | Remediation_Shell_script_⇲ | 41918 | Remediation_Shell_script_⇲ |
| 41919 | Complexity:·low | 41919 | Complexity:·low |
| 41920 | Disruption:·low | 41920 | Disruption:·low |
| 41921 | Strategy:···configure | 41921 | Strategy:···configure |
| 41922 | #·Remediation·is·applicable·only·in·certain·platforms | 41922 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41923 | if· | 41923 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41924 | chgrp·0·/boot/grub2/user.cfg | 41924 | chgrp·0·/boot/grub2/user.cfg |
| 41925 | else | 41925 | else |
| 41926 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41926 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41927 | fi | 41927 | fi |
| 41928 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 41928 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 41955, 16 lines modified | Offset 41955, 16 lines modified | ||
| 41955 | ··-·no_reboot_needed | 41955 | ··-·no_reboot_needed |
| 41956 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 41956 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 41957 | ··stat: | 41957 | ··stat: |
| 41958 | ····path:·/boot/grub2/grub.cfg | 41958 | ····path:·/boot/grub2/grub.cfg |
| 41959 | ··register:·file_exists | 41959 | ··register:·file_exists |
| 41960 | ··when: | 41960 | ··when: |
| 41961 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41962 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41961 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41962 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41964 | ··tags: | 41964 | ··tags: |
| 41965 | ··-·CJIS-5.5.2.2 | 41965 | ··-·CJIS-5.5.2.2 |
| 41966 | ··-·NIST-800-171-3.4.5 | 41966 | ··-·NIST-800-171-3.4.5 |
| 41967 | ··-·NIST-800-53-AC-6(1) | 41967 | ··-·NIST-800-53-AC-6(1) |
| 41968 | ··-·NIST-800-53-CM-6(a) | 41968 | ··-·NIST-800-53-CM-6(a) |
| 41969 | ··-·PCI-DSS-Req-7.1 | 41969 | ··-·PCI-DSS-Req-7.1 |
| Offset 41976, 16 lines modified | Offset 41976, 16 lines modified | ||
| 41976 | ··-·no_reboot_needed | 41976 | ··-·no_reboot_needed |
| 41977 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 41977 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 41978 | ··file: | 41978 | ··file: |
| 41979 | ····path:·/boot/grub2/grub.cfg | 41979 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 18069/22482 bytes (80.37%) of diff not shown. | |||
| Offset 59536, 22 lines modified | Offset 59536, 22 lines modified | ||
| 000e88f0:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 000e88f0:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 000e8900:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 000e8900:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 000e8910:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 000e8910:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 000e8920:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 000e8920:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 000e8930:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 000e8930:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 000e8940:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 000e8940:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 000e8950:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 000e8950:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 000e8960:·6865·6e3a·0a20·202d·2027·22 | 000e8960:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 000e8970:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 000e8980:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 000e8990:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 000e89a0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 000e89b0:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 000e89c0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000e89 | 000e8970:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 000e8980:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 000e8990:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000e89a0:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000e89b0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000e89c0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000e89d0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000e89e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 000e89e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 000e89f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 000e89f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 000e8a00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 000e8a00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 000e8a10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 000e8a10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 000e8a20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 000e8a20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 000e8a30:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 000e8a30:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 000e8a40:·2d20·434a·4953·2d35·2e35·2e32·2e32·0a20··-·CJIS-5.5.2.2.· | 000e8a40:·2d20·434a·4953·2d35·2e35·2e32·2e32·0a20··-·CJIS-5.5.2.2.· | ||
| Offset 59572, 22 lines modified | Offset 59572, 22 lines modified | ||
| 000e8b30:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 000e8b30:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 000e8b40:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 000e8b40:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 000e8b50:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 000e8b50:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 000e8b60:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 000e8b60:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 000e8b70:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 000e8b70:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 000e8b80:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | 000e8b80:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | ||
| 000e8b90:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 000e8b90:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 000e8ba0:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000e8bb0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 000e8bc0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000e8bd0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000e8be0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 000e8bf0:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 000e8c00:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000e8 | 000e8ba0:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 000e8bb0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 000e8bc0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 000e8bd0:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000e8be0:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 000e8bf0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000e8c00:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000e8c10:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 000e8c20:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 000e8c20:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 000e8c30:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 000e8c30:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 000e8c40:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 000e8c40:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 000e8c50:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 000e8c50:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 000e8c60:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 000e8c60:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 000e8c70:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | 000e8c70:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | ||
| 000e8c80:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | 000e8c80:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | ||
| Offset 59637, 19 lines modified | Offset 59637, 19 lines modified | ||
| 000e8f40:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | 000e8f40:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 000e8f50:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | 000e8f50:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | ||
| 000e8f60:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | 000e8f60:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | ||
| 000e8f70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | 000e8f70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 000e8f80:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 000e8f80:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 000e8f90:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 000e8f90:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 000e8fa0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 000e8fa0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 000e8fb0:·2070·6c61·7466·6f72·6d73·0a69·6620· | 000e8fb0:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 000e8fc0:·2120·2d66·202f·7379·732f·6669·726d·7761··!·-f·/sys/firmwa | |||
| 000e8fd0:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 000e8fe0:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 000e8f | 000e8fc0:·6d20·2d2d·7175·6965·7420·2d71·2067·7275··m·--quiet·-q·gru | ||
| 000e8fd0:·6232·2d63·6f6d·6d6f·6e20·2661·6d70·3b26··b2-common·&& | |||
| 000e8fe0:·616d·703b·205b·2021·202d·6620·2f73·7973··amp;·[·!·-f·/sys | |||
| 000e8ff0:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 000e9000:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | 000e9000:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | ||
| 000e9010:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | 000e9010:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 000e9020:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | 000e9020:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 000e9030:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | 000e9030:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 000e9040:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | 000e9040:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | ||
| 000e9050:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | 000e9050:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | ||
| 000e9060:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 000e9060:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| Offset 60140, 21 lines modified | Offset 60140, 21 lines modified | ||
| 000eaeb0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | 000eaeb0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | ||
| 000eaec0:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000eaec0:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000eaed0:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | 000eaed0:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | ||
| 000eaee0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 000eaee0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 000eaef0:·322f·7573·6572·2e63·6667·0a20·2072·6567··2/user.cfg.··reg | 000eaef0:·322f·7573·6572·2e63·6667·0a20·2072·6567··2/user.cfg.··reg | ||
| 000eaf00:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 000eaf00:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 000eaf10:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 000eaf10:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 000eaf20:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 000eaf30:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000eaf40:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000eaf50:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000eaf60:·7427·0a20·202d·2027·2267·7275·6232·2d63··t'.··-·'"grub2-c | |||
| 000eaf70:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | |||
| 000eaf | 000eaf20:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 000eaf30:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000eaf40:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 000eaf50:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 000eaf60:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 000eaf70:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 000eaf80:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 000eaf90:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 000eaf90:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 000eafa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 000eafa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 000eafb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 000eafb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 000eafc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 000eafc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 000eafd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 000eafd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 000eafe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | 000eafe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | ||
| 000eaff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | 000eaff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | ||
| Offset 60175, 22 lines modified | Offset 60175, 22 lines modified | ||
| 000eb0e0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | 000eb0e0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | ||
| 000eb0f0:·7265·2067·726f·7570·206f·776e·6572·2030··re·group·owner·0 | 000eb0f0:·7265·2067·726f·7570·206f·776e·6572·2030··re·group·owner·0 | ||
| 000eb100:·206f·6e20·2f62·6f6f·742f·6772·7562·322f···on·/boot/grub2/ | 000eb100:·206f·6e20·2f62·6f6f·742f·6772·7562·322f···on·/boot/grub2/ | ||
| 000eb110:·7573·6572·2e63·6667·0a20·2066·696c·653a··user.cfg.··file: | 000eb110:·7573·6572·2e63·6667·0a20·2066·696c·653a··user.cfg.··file: | ||
| 000eb120:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000eb120:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000eb130:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 000eb130:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 000eb140:·2020·2020·6772·6f75·703a·2027·3027·0a20······group:·'0'.· | 000eb140:·2020·2020·6772·6f75·703a·2027·3027·0a20······group:·'0'.· | ||
| 000eb150:·2077·6865·6e3a·0a20·202d·2027·22 | 000eb150:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 000eb160:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 000eb170:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 000eb180:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 000eb190:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 000eb1a0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | |||
| 000eb1b0:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 000eb1 | 000eb160:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 000eb170:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000eb180:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | |||
| Max diff block lines reached; 60008/69522 bytes (86.32%) of diff not shown. | |||
| Offset 8118, 16 lines modified | Offset 8118, 16 lines modified | ||
| 8118 | ··-·no_reboot_needed | 8118 | ··-·no_reboot_needed |
| 8119 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8119 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8120 | ··stat: | 8120 | ··stat: |
| 8121 | ····path:·/boot/grub2/grub.cfg | 8121 | ····path:·/boot/grub2/grub.cfg |
| 8122 | ··register:·file_exists | 8122 | ··register:·file_exists |
| 8123 | ··when: | 8123 | ··when: |
| 8124 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8125 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8124 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8125 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8126 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8126 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8127 | ··tags: | 8127 | ··tags: |
| 8128 | ··-·CJIS-5.5.2.2 | 8128 | ··-·CJIS-5.5.2.2 |
| 8129 | ··-·NIST-800-171-3.4.5 | 8129 | ··-·NIST-800-171-3.4.5 |
| 8130 | ··-·NIST-800-53-AC-6(1) | 8130 | ··-·NIST-800-53-AC-6(1) |
| 8131 | ··-·NIST-800-53-CM-6(a) | 8131 | ··-·NIST-800-53-CM-6(a) |
| 8132 | ··-·PCI-DSS-Req-7.1 | 8132 | ··-·PCI-DSS-Req-7.1 |
| Offset 8139, 16 lines modified | Offset 8139, 16 lines modified | ||
| 8139 | ··-·no_reboot_needed | 8139 | ··-·no_reboot_needed |
| 8140 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 8140 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 8141 | ··file: | 8141 | ··file: |
| 8142 | ····path:·/boot/grub2/grub.cfg | 8142 | ····path:·/boot/grub2/grub.cfg |
| 8143 | ····group:·'0' | 8143 | ····group:·'0' |
| 8144 | ··when: | 8144 | ··when: |
| 8145 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8146 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8145 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8146 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8147 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8147 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8148 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8148 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8149 | ··tags: | 8149 | ··tags: |
| 8150 | ··-·CJIS-5.5.2.2 | 8150 | ··-·CJIS-5.5.2.2 |
| 8151 | ··-·NIST-800-171-3.4.5 | 8151 | ··-·NIST-800-171-3.4.5 |
| 8152 | ··-·NIST-800-53-AC-6(1) | 8152 | ··-·NIST-800-53-AC-6(1) |
| 8153 | ··-·NIST-800-53-CM-6(a) | 8153 | ··-·NIST-800-53-CM-6(a) |
| Offset 8160, 15 lines modified | Offset 8160, 15 lines modified | ||
| 8160 | ··-·medium_severity | 8160 | ··-·medium_severity |
| 8161 | ··-·no_reboot_needed | 8161 | ··-·no_reboot_needed |
| 8162 | Remediation_Shell_script_⇲ | 8162 | Remediation_Shell_script_⇲ |
| 8163 | Complexity:·low | 8163 | Complexity:·low |
| 8164 | Disruption:·low | 8164 | Disruption:·low |
| 8165 | Strategy:···configure | 8165 | Strategy:···configure |
| 8166 | #·Remediation·is·applicable·only·in·certain·platforms | 8166 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8167 | if· | 8167 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8168 | chgrp·0·/boot/grub2/grub.cfg | 8168 | chgrp·0·/boot/grub2/grub.cfg |
| 8169 | else | 8169 | else |
| 8170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8171 | fi | 8171 | fi |
| 8172 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 8172 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 8199, 16 lines modified | Offset 8199, 16 lines modified | ||
| 8199 | ··-·no_reboot_needed | 8199 | ··-·no_reboot_needed |
| 8200 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8200 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8201 | ··stat: | 8201 | ··stat: |
| 8202 | ····path:·/boot/grub2/user.cfg | 8202 | ····path:·/boot/grub2/user.cfg |
| 8203 | ··register:·file_exists | 8203 | ··register:·file_exists |
| 8204 | ··when: | 8204 | ··when: |
| 8205 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8206 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8205 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8206 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8207 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8207 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8208 | ··tags: | 8208 | ··tags: |
| 8209 | ··-·CJIS-5.5.2.2 | 8209 | ··-·CJIS-5.5.2.2 |
| 8210 | ··-·NIST-800-171-3.4.5 | 8210 | ··-·NIST-800-171-3.4.5 |
| 8211 | ··-·NIST-800-53-AC-6(1) | 8211 | ··-·NIST-800-53-AC-6(1) |
| 8212 | ··-·NIST-800-53-CM-6(a) | 8212 | ··-·NIST-800-53-CM-6(a) |
| 8213 | ··-·PCI-DSS-Req-7.1 | 8213 | ··-·PCI-DSS-Req-7.1 |
| Offset 8220, 16 lines modified | Offset 8220, 16 lines modified | ||
| 8220 | ··-·no_reboot_needed | 8220 | ··-·no_reboot_needed |
| 8221 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8221 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8222 | ··file: | 8222 | ··file: |
| 8223 | ····path:·/boot/grub2/user.cfg | 8223 | ····path:·/boot/grub2/user.cfg |
| 8224 | ····group:·'0' | 8224 | ····group:·'0' |
| 8225 | ··when: | 8225 | ··when: |
| 8226 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8227 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8226 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8227 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8228 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8228 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8229 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8229 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8230 | ··tags: | 8230 | ··tags: |
| 8231 | ··-·CJIS-5.5.2.2 | 8231 | ··-·CJIS-5.5.2.2 |
| 8232 | ··-·NIST-800-171-3.4.5 | 8232 | ··-·NIST-800-171-3.4.5 |
| 8233 | ··-·NIST-800-53-AC-6(1) | 8233 | ··-·NIST-800-53-AC-6(1) |
| 8234 | ··-·NIST-800-53-CM-6(a) | 8234 | ··-·NIST-800-53-CM-6(a) |
| Offset 8241, 15 lines modified | Offset 8241, 15 lines modified | ||
| 8241 | ··-·medium_severity | 8241 | ··-·medium_severity |
| 8242 | ··-·no_reboot_needed | 8242 | ··-·no_reboot_needed |
| 8243 | Remediation_Shell_script_⇲ | 8243 | Remediation_Shell_script_⇲ |
| 8244 | Complexity:·low | 8244 | Complexity:·low |
| 8245 | Disruption:·low | 8245 | Disruption:·low |
| 8246 | Strategy:···configure | 8246 | Strategy:···configure |
| 8247 | #·Remediation·is·applicable·only·in·certain·platforms | 8247 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8248 | if· | 8248 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8249 | chgrp·0·/boot/grub2/user.cfg | 8249 | chgrp·0·/boot/grub2/user.cfg |
| 8250 | else | 8250 | else |
| 8251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8252 | fi | 8252 | fi |
| 8253 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 8253 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 8280, 16 lines modified | Offset 8280, 16 lines modified | ||
| 8280 | ··-·no_reboot_needed | 8280 | ··-·no_reboot_needed |
| 8281 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8281 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8282 | ··stat: | 8282 | ··stat: |
| 8283 | ····path:·/boot/grub2/grub.cfg | 8283 | ····path:·/boot/grub2/grub.cfg |
| 8284 | ··register:·file_exists | 8284 | ··register:·file_exists |
| 8285 | ··when: | 8285 | ··when: |
| 8286 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8287 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8286 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8287 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8288 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8288 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8289 | ··tags: | 8289 | ··tags: |
| 8290 | ··-·CJIS-5.5.2.2 | 8290 | ··-·CJIS-5.5.2.2 |
| 8291 | ··-·NIST-800-171-3.4.5 | 8291 | ··-·NIST-800-171-3.4.5 |
| 8292 | ··-·NIST-800-53-AC-6(1) | 8292 | ··-·NIST-800-53-AC-6(1) |
| 8293 | ··-·NIST-800-53-CM-6(a) | 8293 | ··-·NIST-800-53-CM-6(a) |
| 8294 | ··-·PCI-DSS-Req-7.1 | 8294 | ··-·PCI-DSS-Req-7.1 |
| Offset 8301, 16 lines modified | Offset 8301, 16 lines modified | ||
| 8301 | ··-·no_reboot_needed | 8301 | ··-·no_reboot_needed |
| 8302 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 8302 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 8303 | ··file: | 8303 | ··file: |
| 8304 | ····path:·/boot/grub2/grub.cfg | 8304 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 18013/22410 bytes (80.38%) of diff not shown. | |||
| Offset 59532, 22 lines modified | Offset 59532, 22 lines modified | ||
| 000e88b0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 000e88b0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 000e88c0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 000e88c0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 000e88d0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 000e88d0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 000e88e0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 000e88e0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 000e88f0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 000e88f0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 000e8900:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 000e8900:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 000e8910:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 000e8910:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 000e8920:·7768·656e·3a0a·2020·2d20·2722· | 000e8920:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 000e8930:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 000e8940:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 000e8950:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 000e8960:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 000e8970:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 000e8980:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 000e89 | 000e8930:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 000e8940:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 000e8950:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 000e8960:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 000e8970:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 000e8980:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 000e8990:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 000e89a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 000e89a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 000e89b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 000e89b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 000e89c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 000e89c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 000e89d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 000e89d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 000e89e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 000e89e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 000e89f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 000e89f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 000e8a00:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | 000e8a00:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | ||
| Offset 59568, 22 lines modified | Offset 59568, 22 lines modified | ||
| 000e8af0:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | 000e8af0:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | ||
| 000e8b00:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | 000e8b00:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | ||
| 000e8b10:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 000e8b10:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 000e8b20:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 000e8b20:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 000e8b30:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 000e8b30:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 000e8b40:·6232·2f67·7275·622e·6366·670a·2020·2020··b2/grub.cfg.···· | 000e8b40:·6232·2f67·7275·622e·6366·670a·2020·2020··b2/grub.cfg.···· | ||
| 000e8b50:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | 000e8b50:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | ||
| 000e8b60:·6e3a·0a20·202d·2027·22 | 000e8b60:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 000e8b70:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 000e8b80:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 000e8b90:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 000e8ba0:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 000e8bb0:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | |||
| 000e8bc0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000e8b | 000e8b70:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 000e8b80:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 000e8b90:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 000e8ba0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 000e8bb0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000e8bc0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000e8bd0:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 000e8be0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 000e8be0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 000e8bf0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 000e8bf0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 000e8c00:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 000e8c00:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 000e8c10:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 000e8c10:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 000e8c20:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 000e8c20:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 000e8c30:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | 000e8c30:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | ||
| 000e8c40:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | 000e8c40:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | ||
| Offset 59633, 19 lines modified | Offset 59633, 19 lines modified | ||
| 000e8f00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | 000e8f00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 000e8f10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | 000e8f10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 000e8f20:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | 000e8f20:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | ||
| 000e8f30:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | 000e8f30:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 000e8f40:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | 000e8f40:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 000e8f50:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | 000e8f50:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 000e8f60:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | 000e8f60:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 000e8f70:·6e20·706c·6174·666f·726d·730a·6966·20 | 000e8f70:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | ||
| 000e8f80:·2021·202d·6620·2f73·7973·2f66·6972·6d77···!·-f·/sys/firmw | |||
| 000e8f90:·6172·652f·6566·6920·5d20·2661·6d70·3b26··are/efi·]·&& | |||
| 000e8fa0:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 000e8f | 000e8f80:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | ||
| 000e8f90:·7562·322d·636f·6d6d·6f6e·2026·616d·703b··ub2-common·& | |||
| 000e8fa0:·2661·6d70·3b20·5b20·2120·2d66·202f·7379··&·[·!·-f·/sy | |||
| 000e8fb0:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 000e8fc0:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | 000e8fc0:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 000e8fd0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | 000e8fd0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 000e8fe0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | 000e8fe0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 000e8ff0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | 000e8ff0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 000e9000:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | 000e9000:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 000e9010:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | 000e9010:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | ||
| 000e9020:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 000e9020:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| Offset 60136, 22 lines modified | Offset 60136, 22 lines modified | ||
| 000eae70:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 000eae70:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 000eae80:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 000eae80:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 000eae90:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 000eae90:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 000eaea0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 000eaea0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 000eaeb0:·6232·2f75·7365·722e·6366·670a·2020·7265··b2/user.cfg.··re | 000eaeb0:·6232·2f75·7365·722e·6366·670a·2020·7265··b2/user.cfg.··re | ||
| 000eaec0:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 000eaec0:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 000eaed0:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 000eaed0:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 000eaee0:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 000eaef0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000eaf00:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000eaf10:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000eaf20:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | |||
| 000eaf30:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | |||
| 000ea | 000eaee0:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | ||
| 000eaef0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 000eaf00:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | |||
| 000eaf10:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 000eaf20:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000eaf30:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000eaf40:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000eaf50:·7 | 000eaf50:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000eaf60:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000eaf60:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000eaf70:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000eaf70:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000eaf80:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000eaf80:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000eaf90:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000eaf90:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000eafa0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 000eafa0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 000eafb0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 000eafb0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 000eafc0:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | 000eafc0:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | ||
| Offset 60171, 22 lines modified | Offset 60171, 22 lines modified | ||
| 000eb0a0:·6465·640a·0a2d·206e·616d·653a·2045·6e73··ded..-·name:·Ens | 000eb0a0:·6465·640a·0a2d·206e·616d·653a·2045·6e73··ded..-·name:·Ens | ||
| 000eb0b0:·7572·6520·6772·6f75·7020·6f77·6e65·7220··ure·group·owner· | 000eb0b0:·7572·6520·6772·6f75·7020·6f77·6e65·7220··ure·group·owner· | ||
| 000eb0c0:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 000eb0c0:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 000eb0d0:·2f75·7365·722e·6366·670a·2020·6669·6c65··/user.cfg.··file | 000eb0d0:·2f75·7365·722e·6366·670a·2020·6669·6c65··/user.cfg.··file | ||
| 000eb0e0:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 000eb0e0:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 000eb0f0:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | 000eb0f0:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | ||
| 000eb100:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | 000eb100:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | ||
| 000eb110:·2020·7768·656e·3a0a·2020·2d20·2722· | 000eb110:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 000eb120:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 000eb130:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 000eb140:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 000eb150:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 000eb160:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 000eb170:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 000eb1 | 000eb120:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 000eb130:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 000eb140:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | |||
| Max diff block lines reached; 60146/69798 bytes (86.17%) of diff not shown. | |||
| Offset 8118, 16 lines modified | Offset 8118, 16 lines modified | ||
| 8118 | ··-·no_reboot_needed | 8118 | ··-·no_reboot_needed |
| 8119 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8119 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8120 | ··stat: | 8120 | ··stat: |
| 8121 | ····path:·/boot/grub2/grub.cfg | 8121 | ····path:·/boot/grub2/grub.cfg |
| 8122 | ··register:·file_exists | 8122 | ··register:·file_exists |
| 8123 | ··when: | 8123 | ··when: |
| 8124 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8125 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8124 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8125 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8126 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8126 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8127 | ··tags: | 8127 | ··tags: |
| 8128 | ··-·CJIS-5.5.2.2 | 8128 | ··-·CJIS-5.5.2.2 |
| 8129 | ··-·NIST-800-171-3.4.5 | 8129 | ··-·NIST-800-171-3.4.5 |
| 8130 | ··-·NIST-800-53-AC-6(1) | 8130 | ··-·NIST-800-53-AC-6(1) |
| 8131 | ··-·NIST-800-53-CM-6(a) | 8131 | ··-·NIST-800-53-CM-6(a) |
| 8132 | ··-·PCI-DSS-Req-7.1 | 8132 | ··-·PCI-DSS-Req-7.1 |
| Offset 8139, 16 lines modified | Offset 8139, 16 lines modified | ||
| 8139 | ··-·no_reboot_needed | 8139 | ··-·no_reboot_needed |
| 8140 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 8140 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 8141 | ··file: | 8141 | ··file: |
| 8142 | ····path:·/boot/grub2/grub.cfg | 8142 | ····path:·/boot/grub2/grub.cfg |
| 8143 | ····group:·'0' | 8143 | ····group:·'0' |
| 8144 | ··when: | 8144 | ··when: |
| 8145 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8146 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8145 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8146 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8147 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8147 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8148 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8148 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8149 | ··tags: | 8149 | ··tags: |
| 8150 | ··-·CJIS-5.5.2.2 | 8150 | ··-·CJIS-5.5.2.2 |
| 8151 | ··-·NIST-800-171-3.4.5 | 8151 | ··-·NIST-800-171-3.4.5 |
| 8152 | ··-·NIST-800-53-AC-6(1) | 8152 | ··-·NIST-800-53-AC-6(1) |
| 8153 | ··-·NIST-800-53-CM-6(a) | 8153 | ··-·NIST-800-53-CM-6(a) |
| Offset 8160, 15 lines modified | Offset 8160, 15 lines modified | ||
| 8160 | ··-·medium_severity | 8160 | ··-·medium_severity |
| 8161 | ··-·no_reboot_needed | 8161 | ··-·no_reboot_needed |
| 8162 | Remediation_Shell_script_⇲ | 8162 | Remediation_Shell_script_⇲ |
| 8163 | Complexity:·low | 8163 | Complexity:·low |
| 8164 | Disruption:·low | 8164 | Disruption:·low |
| 8165 | Strategy:···configure | 8165 | Strategy:···configure |
| 8166 | #·Remediation·is·applicable·only·in·certain·platforms | 8166 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8167 | if· | 8167 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8168 | chgrp·0·/boot/grub2/grub.cfg | 8168 | chgrp·0·/boot/grub2/grub.cfg |
| 8169 | else | 8169 | else |
| 8170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8171 | fi | 8171 | fi |
| 8172 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 8172 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 8199, 16 lines modified | Offset 8199, 16 lines modified | ||
| 8199 | ··-·no_reboot_needed | 8199 | ··-·no_reboot_needed |
| 8200 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8200 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8201 | ··stat: | 8201 | ··stat: |
| 8202 | ····path:·/boot/grub2/user.cfg | 8202 | ····path:·/boot/grub2/user.cfg |
| 8203 | ··register:·file_exists | 8203 | ··register:·file_exists |
| 8204 | ··when: | 8204 | ··when: |
| 8205 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8206 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8205 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8206 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8207 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8207 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8208 | ··tags: | 8208 | ··tags: |
| 8209 | ··-·CJIS-5.5.2.2 | 8209 | ··-·CJIS-5.5.2.2 |
| 8210 | ··-·NIST-800-171-3.4.5 | 8210 | ··-·NIST-800-171-3.4.5 |
| 8211 | ··-·NIST-800-53-AC-6(1) | 8211 | ··-·NIST-800-53-AC-6(1) |
| 8212 | ··-·NIST-800-53-CM-6(a) | 8212 | ··-·NIST-800-53-CM-6(a) |
| 8213 | ··-·PCI-DSS-Req-7.1 | 8213 | ··-·PCI-DSS-Req-7.1 |
| Offset 8220, 16 lines modified | Offset 8220, 16 lines modified | ||
| 8220 | ··-·no_reboot_needed | 8220 | ··-·no_reboot_needed |
| 8221 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8221 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8222 | ··file: | 8222 | ··file: |
| 8223 | ····path:·/boot/grub2/user.cfg | 8223 | ····path:·/boot/grub2/user.cfg |
| 8224 | ····group:·'0' | 8224 | ····group:·'0' |
| 8225 | ··when: | 8225 | ··when: |
| 8226 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8227 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8226 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8227 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8228 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8228 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8229 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8229 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8230 | ··tags: | 8230 | ··tags: |
| 8231 | ··-·CJIS-5.5.2.2 | 8231 | ··-·CJIS-5.5.2.2 |
| 8232 | ··-·NIST-800-171-3.4.5 | 8232 | ··-·NIST-800-171-3.4.5 |
| 8233 | ··-·NIST-800-53-AC-6(1) | 8233 | ··-·NIST-800-53-AC-6(1) |
| 8234 | ··-·NIST-800-53-CM-6(a) | 8234 | ··-·NIST-800-53-CM-6(a) |
| Offset 8241, 15 lines modified | Offset 8241, 15 lines modified | ||
| 8241 | ··-·medium_severity | 8241 | ··-·medium_severity |
| 8242 | ··-·no_reboot_needed | 8242 | ··-·no_reboot_needed |
| 8243 | Remediation_Shell_script_⇲ | 8243 | Remediation_Shell_script_⇲ |
| 8244 | Complexity:·low | 8244 | Complexity:·low |
| 8245 | Disruption:·low | 8245 | Disruption:·low |
| 8246 | Strategy:···configure | 8246 | Strategy:···configure |
| 8247 | #·Remediation·is·applicable·only·in·certain·platforms | 8247 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8248 | if· | 8248 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8249 | chgrp·0·/boot/grub2/user.cfg | 8249 | chgrp·0·/boot/grub2/user.cfg |
| 8250 | else | 8250 | else |
| 8251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8252 | fi | 8252 | fi |
| 8253 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 8253 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 8280, 16 lines modified | Offset 8280, 16 lines modified | ||
| 8280 | ··-·no_reboot_needed | 8280 | ··-·no_reboot_needed |
| 8281 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8281 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8282 | ··stat: | 8282 | ··stat: |
| 8283 | ····path:·/boot/grub2/grub.cfg | 8283 | ····path:·/boot/grub2/grub.cfg |
| 8284 | ··register:·file_exists | 8284 | ··register:·file_exists |
| 8285 | ··when: | 8285 | ··when: |
| 8286 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8287 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8286 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8287 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8288 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8288 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8289 | ··tags: | 8289 | ··tags: |
| 8290 | ··-·CJIS-5.5.2.2 | 8290 | ··-·CJIS-5.5.2.2 |
| 8291 | ··-·NIST-800-171-3.4.5 | 8291 | ··-·NIST-800-171-3.4.5 |
| 8292 | ··-·NIST-800-53-AC-6(1) | 8292 | ··-·NIST-800-53-AC-6(1) |
| 8293 | ··-·NIST-800-53-CM-6(a) | 8293 | ··-·NIST-800-53-CM-6(a) |
| 8294 | ··-·PCI-DSS-Req-7.1 | 8294 | ··-·PCI-DSS-Req-7.1 |
| Offset 8301, 16 lines modified | Offset 8301, 16 lines modified | ||
| 8301 | ··-·no_reboot_needed | 8301 | ··-·no_reboot_needed |
| 8302 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 8302 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 8303 | ··file: | 8303 | ··file: |
| 8304 | ····path:·/boot/grub2/grub.cfg | 8304 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 18013/22410 bytes (80.38%) of diff not shown. | |||
| Offset 185602, 22 lines modified | Offset 185602, 22 lines modified | ||
| 002d5010:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 002d5010:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 002d5020:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | 002d5020:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | ||
| 002d5030:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | 002d5030:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | ||
| 002d5040:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 002d5040:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 002d5050:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 002d5050:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 002d5060:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 002d5060:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 002d5070:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 002d5070:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 002d5080:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 002d5090:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002d50a0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002d50b0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002d50c0:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 002d50d0:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | |||
| 002d50 | 002d5080:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 002d5090:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002d50a0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 002d50b0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002d50c0:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 002d50d0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002d50e0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002d50f0:· | 002d50f0:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 002d5100:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 002d5100:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 002d5110:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 002d5110:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 002d5120:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 002d5120:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 002d5130:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 002d5130:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 002d5140:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 002d5140:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 002d5150:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | 002d5150:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 002d5160:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | 002d5160:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | ||
| Offset 185638, 22 lines modified | Offset 185638, 22 lines modified | ||
| 002d5250:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o | 002d5250:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o | ||
| 002d5260:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | 002d5260:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | ||
| 002d5270:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002d5270:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002d5280:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | 002d5280:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | ||
| 002d5290:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002d5290:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002d52a0:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group: | 002d52a0:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group: | ||
| 002d52b0:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | 002d52b0:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | ||
| 002d52c0:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002d52d0:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002d52e0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002d52f0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002d5300:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002d5310:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002d5 | 002d52c0:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | ||
| 002d52d0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002d52e0:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002d52f0:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002d5300:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002d5310:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002d5320:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002d5330:· | 002d5330:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 002d5340:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002d5340:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002d5350:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002d5350:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002d5360:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002d5360:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002d5370:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002d5370:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002d5380:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002d5380:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002d5390:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | 002d5390:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | ||
| 002d53a0:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | 002d53a0:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | ||
| Offset 185703, 19 lines modified | Offset 185703, 19 lines modified | ||
| 002d5660:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | 002d5660:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 002d5670:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | 002d5670:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | ||
| 002d5680:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | 002d5680:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | ||
| 002d5690:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | 002d5690:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 002d56a0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 002d56a0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 002d56b0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 002d56b0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 002d56c0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 002d56c0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 002d56d0:·666f·726d·730a·6966·20 | 002d56d0:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | ||
| 002d56e0:·2f73·7973·2f66·6972·6d77·6172·652f·6566··/sys/firmware/ef | |||
| 002d56f0:·6920·5d20·2661·6d70·3b26·616d·703b·2072··i·]·&&·r | |||
| 002d5700:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | |||
| 002d5 | 002d56e0:·7569·6574·202d·7120·6772·7562·322d·636f··uiet·-q·grub2-co | ||
| 002d56f0:·6d6d·6f6e·2026·616d·703b·2661·6d70·3b20··mmon·&&· | |||
| 002d5700:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm | |||
| 002d5710:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 002d5720:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | 002d5720:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | ||
| 002d5730:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | 002d5730:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | ||
| 002d5740:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | 002d5740:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 002d5750:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | 002d5750:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 002d5760:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | 002d5760:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | ||
| 002d5770:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | 002d5770:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | ||
| 002d5780:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else | 002d5780:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else | ||
| Offset 186205, 22 lines modified | Offset 186205, 22 lines modified | ||
| 002d75c0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 002d75c0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 002d75d0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 002d75d0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 002d75e0:·6772·7562·322f·7573·6572·2e63·6667·0a20··grub2/user.cfg.· | 002d75e0:·6772·7562·322f·7573·6572·2e63·6667·0a20··grub2/user.cfg.· | ||
| 002d75f0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 002d75f0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 002d7600:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | 002d7600:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | ||
| 002d7610:·722e·6366·670a·2020·7265·6769·7374·6572··r.cfg.··register | 002d7610:·722e·6366·670a·2020·7265·6769·7374·6572··r.cfg.··register | ||
| 002d7620:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 002d7620:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 002d7630:·7768·656e·3a0a·2020·2d20·2722· | 002d7630:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 002d7640:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 002d7650:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002d7660:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002d7670:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002d7680:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 002d7690:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 002d76 | 002d7640:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 002d7650:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 002d7660:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 002d7670:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 002d7680:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002d7690:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002d76a0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002d76b0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 002d76b0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 002d76c0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 002d76c0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 002d76d0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 002d76d0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 002d76e0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 002d76e0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 002d76f0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 002d76f0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 002d7700:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 002d7700:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 002d7710:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | 002d7710:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | ||
| Offset 186241, 22 lines modified | Offset 186241, 22 lines modified | ||
| 002d7800:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 002d7800:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 002d7810:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 002d7810:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 002d7820:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 002d7820:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 002d7830:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 002d7830:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 002d7840:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 002d7840:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 002d7850:·322f·7573·6572·2e63·6667·0a20·2020·2067··2/user.cfg.····g | 002d7850:·322f·7573·6572·2e63·6667·0a20·2020·2067··2/user.cfg.····g | ||
| 002d7860:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 002d7860:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 002d7870:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 002d7880:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 002d7890:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002d78a0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002d78b0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 002d78c0:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 002d78d0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 002d78 | 002d7870:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 002d7880:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 002d7890:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| Max diff block lines reached; 59656/69318 bytes (86.06%) of diff not shown. | |||
| Offset 41793, 16 lines modified | Offset 41793, 16 lines modified | ||
| 41793 | ··-·no_reboot_needed | 41793 | ··-·no_reboot_needed |
| 41794 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 41794 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 41795 | ··stat: | 41795 | ··stat: |
| 41796 | ····path:·/boot/grub2/grub.cfg | 41796 | ····path:·/boot/grub2/grub.cfg |
| 41797 | ··register:·file_exists | 41797 | ··register:·file_exists |
| 41798 | ··when: | 41798 | ··when: |
| 41799 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41800 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41799 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41800 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41801 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41801 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41802 | ··tags: | 41802 | ··tags: |
| 41803 | ··-·CJIS-5.5.2.2 | 41803 | ··-·CJIS-5.5.2.2 |
| 41804 | ··-·NIST-800-171-3.4.5 | 41804 | ··-·NIST-800-171-3.4.5 |
| 41805 | ··-·NIST-800-53-AC-6(1) | 41805 | ··-·NIST-800-53-AC-6(1) |
| 41806 | ··-·NIST-800-53-CM-6(a) | 41806 | ··-·NIST-800-53-CM-6(a) |
| 41807 | ··-·PCI-DSS-Req-7.1 | 41807 | ··-·PCI-DSS-Req-7.1 |
| Offset 41814, 16 lines modified | Offset 41814, 16 lines modified | ||
| 41814 | ··-·no_reboot_needed | 41814 | ··-·no_reboot_needed |
| 41815 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 41815 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 41816 | ··file: | 41816 | ··file: |
| 41817 | ····path:·/boot/grub2/grub.cfg | 41817 | ····path:·/boot/grub2/grub.cfg |
| 41818 | ····group:·'0' | 41818 | ····group:·'0' |
| 41819 | ··when: | 41819 | ··when: |
| 41820 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41821 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41820 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41821 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41823 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41823 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41824 | ··tags: | 41824 | ··tags: |
| 41825 | ··-·CJIS-5.5.2.2 | 41825 | ··-·CJIS-5.5.2.2 |
| 41826 | ··-·NIST-800-171-3.4.5 | 41826 | ··-·NIST-800-171-3.4.5 |
| 41827 | ··-·NIST-800-53-AC-6(1) | 41827 | ··-·NIST-800-53-AC-6(1) |
| 41828 | ··-·NIST-800-53-CM-6(a) | 41828 | ··-·NIST-800-53-CM-6(a) |
| Offset 41835, 15 lines modified | Offset 41835, 15 lines modified | ||
| 41835 | ··-·medium_severity | 41835 | ··-·medium_severity |
| 41836 | ··-·no_reboot_needed | 41836 | ··-·no_reboot_needed |
| 41837 | Remediation_Shell_script_⇲ | 41837 | Remediation_Shell_script_⇲ |
| 41838 | Complexity:·low | 41838 | Complexity:·low |
| 41839 | Disruption:·low | 41839 | Disruption:·low |
| 41840 | Strategy:···configure | 41840 | Strategy:···configure |
| 41841 | #·Remediation·is·applicable·only·in·certain·platforms | 41841 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41842 | if· | 41842 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41843 | chgrp·0·/boot/grub2/grub.cfg | 41843 | chgrp·0·/boot/grub2/grub.cfg |
| 41844 | else | 41844 | else |
| 41845 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41845 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41846 | fi | 41846 | fi |
| 41847 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 41847 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 41874, 16 lines modified | Offset 41874, 16 lines modified | ||
| 41874 | ··-·no_reboot_needed | 41874 | ··-·no_reboot_needed |
| 41875 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 41875 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 41876 | ··stat: | 41876 | ··stat: |
| 41877 | ····path:·/boot/grub2/user.cfg | 41877 | ····path:·/boot/grub2/user.cfg |
| 41878 | ··register:·file_exists | 41878 | ··register:·file_exists |
| 41879 | ··when: | 41879 | ··when: |
| 41880 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41881 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41880 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41881 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41882 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41882 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41883 | ··tags: | 41883 | ··tags: |
| 41884 | ··-·CJIS-5.5.2.2 | 41884 | ··-·CJIS-5.5.2.2 |
| 41885 | ··-·NIST-800-171-3.4.5 | 41885 | ··-·NIST-800-171-3.4.5 |
| 41886 | ··-·NIST-800-53-AC-6(1) | 41886 | ··-·NIST-800-53-AC-6(1) |
| 41887 | ··-·NIST-800-53-CM-6(a) | 41887 | ··-·NIST-800-53-CM-6(a) |
| 41888 | ··-·PCI-DSS-Req-7.1 | 41888 | ··-·PCI-DSS-Req-7.1 |
| Offset 41895, 16 lines modified | Offset 41895, 16 lines modified | ||
| 41895 | ··-·no_reboot_needed | 41895 | ··-·no_reboot_needed |
| 41896 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 41896 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 41897 | ··file: | 41897 | ··file: |
| 41898 | ····path:·/boot/grub2/user.cfg | 41898 | ····path:·/boot/grub2/user.cfg |
| 41899 | ····group:·'0' | 41899 | ····group:·'0' |
| 41900 | ··when: | 41900 | ··when: |
| 41901 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41902 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41901 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41902 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41903 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41903 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41904 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41904 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41905 | ··tags: | 41905 | ··tags: |
| 41906 | ··-·CJIS-5.5.2.2 | 41906 | ··-·CJIS-5.5.2.2 |
| 41907 | ··-·NIST-800-171-3.4.5 | 41907 | ··-·NIST-800-171-3.4.5 |
| 41908 | ··-·NIST-800-53-AC-6(1) | 41908 | ··-·NIST-800-53-AC-6(1) |
| 41909 | ··-·NIST-800-53-CM-6(a) | 41909 | ··-·NIST-800-53-CM-6(a) |
| Offset 41916, 15 lines modified | Offset 41916, 15 lines modified | ||
| 41916 | ··-·medium_severity | 41916 | ··-·medium_severity |
| 41917 | ··-·no_reboot_needed | 41917 | ··-·no_reboot_needed |
| 41918 | Remediation_Shell_script_⇲ | 41918 | Remediation_Shell_script_⇲ |
| 41919 | Complexity:·low | 41919 | Complexity:·low |
| 41920 | Disruption:·low | 41920 | Disruption:·low |
| 41921 | Strategy:···configure | 41921 | Strategy:···configure |
| 41922 | #·Remediation·is·applicable·only·in·certain·platforms | 41922 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41923 | if· | 41923 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41924 | chgrp·0·/boot/grub2/user.cfg | 41924 | chgrp·0·/boot/grub2/user.cfg |
| 41925 | else | 41925 | else |
| 41926 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41926 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41927 | fi | 41927 | fi |
| 41928 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 41928 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 41955, 16 lines modified | Offset 41955, 16 lines modified | ||
| 41955 | ··-·no_reboot_needed | 41955 | ··-·no_reboot_needed |
| 41956 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 41956 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 41957 | ··stat: | 41957 | ··stat: |
| 41958 | ····path:·/boot/grub2/grub.cfg | 41958 | ····path:·/boot/grub2/grub.cfg |
| 41959 | ··register:·file_exists | 41959 | ··register:·file_exists |
| 41960 | ··when: | 41960 | ··when: |
| 41961 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41962 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41961 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41962 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41964 | ··tags: | 41964 | ··tags: |
| 41965 | ··-·CJIS-5.5.2.2 | 41965 | ··-·CJIS-5.5.2.2 |
| 41966 | ··-·NIST-800-171-3.4.5 | 41966 | ··-·NIST-800-171-3.4.5 |
| 41967 | ··-·NIST-800-53-AC-6(1) | 41967 | ··-·NIST-800-53-AC-6(1) |
| 41968 | ··-·NIST-800-53-CM-6(a) | 41968 | ··-·NIST-800-53-CM-6(a) |
| 41969 | ··-·PCI-DSS-Req-7.1 | 41969 | ··-·PCI-DSS-Req-7.1 |
| Offset 41976, 16 lines modified | Offset 41976, 16 lines modified | ||
| 41976 | ··-·no_reboot_needed | 41976 | ··-·no_reboot_needed |
| 41977 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 41977 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 41978 | ··file: | 41978 | ··file: |
| 41979 | ····path:·/boot/grub2/grub.cfg | 41979 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 18069/22482 bytes (80.37%) of diff not shown. | |||
| Offset 134543, 22 lines modified | Offset 134543, 22 lines modified | ||
| 0020d8e0:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 0020d8e0:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 0020d8f0:·6520·2f62·6f6f·742f·6772·7562·322f·6772··e·/boot/grub2/gr | 0020d8f0:·6520·2f62·6f6f·742f·6772·7562·322f·6772··e·/boot/grub2/gr | ||
| 0020d900:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | 0020d900:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | ||
| 0020d910:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 0020d910:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 0020d920:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 0020d920:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 0020d930:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 0020d930:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 0020d940:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 0020d940:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 0020d950:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 0020d960:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 0020d970:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 0020d980:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 0020d990:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 0020d9a0:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | |||
| 0020d9 | 0020d950:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 0020d960:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0020d970:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 0020d980:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 0020d990:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 0020d9a0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 0020d9b0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 0020d9c0:·6 | 0020d9c0:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 0020d9d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 0020d9d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 0020d9e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 0020d9e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 0020d9f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 0020d9f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 0020da00:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 0020da00:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 0020da10:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 0020da10:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 0020da20:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | 0020da20:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 0020da30:·352e·352e·322e·320a·2020·2d20·4e49·5354··5.5.2.2.··-·NIST | 0020da30:·352e·352e·322e·320a·2020·2d20·4e49·5354··5.5.2.2.··-·NIST | ||
| Offset 134579, 21 lines modified | Offset 134579, 21 lines modified | ||
| 0020db20:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | 0020db20:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | ||
| 0020db30:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | 0020db30:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | ||
| 0020db40:·7562·322f·6772·7562·2e63·6667·0a20·2066··ub2/grub.cfg.··f | 0020db40:·7562·322f·6772·7562·2e63·6667·0a20·2066··ub2/grub.cfg.··f | ||
| 0020db50:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | 0020db50:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | ||
| 0020db60:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 0020db60:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 0020db70:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | 0020db70:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | ||
| 0020db80:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | 0020db80:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | ||
| 0020db90:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 0020dba0:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 0020dbb0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 0020dbc0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 0020dbd0:·7427·0a20·202d·2027·2267·7275·6232·2d63··t'.··-·'"grub2-c | |||
| 0020dbe0:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | |||
| 0020db | 0020db90:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 0020dba0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0020dbb0:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 0020dbc0:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 0020dbd0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 0020dbe0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 0020dbf0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 0020dc00:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 0020dc00:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 0020dc10:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 0020dc10:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 0020dc20:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 0020dc20:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 0020dc30:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 0020dc30:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 0020dc40:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 0020dc40:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 0020dc50:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | 0020dc50:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | ||
| 0020dc60:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | 0020dc60:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | ||
| Offset 134644, 19 lines modified | Offset 134644, 19 lines modified | ||
| 0020df30:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | 0020df30:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0020df40:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | 0020df40:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 0020df50:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | 0020df50:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0020df60:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | 0020df60:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0020df70:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 0020df70:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0020df80:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 0020df80:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0020df90:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 0020df90:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0020dfa0:·726d·730a·6966·205b·2021·202d·6620·2f73··rms.if·[·!·-f·/s | |||
| 0020dfb0:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | |||
| 0020dfc0:·5d20·2661·6d70·3b26·616d·703b·2072·706d··]·&&·rpm | |||
| 0020dfd0:·202d·2d71·7569·6574·202d·7120·6772·7562···--quiet·-q·grub | |||
| 0020df | 0020dfa0:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | ||
| 0020dfb0:·6574·202d·7120·6772·7562·322d·636f·6d6d··et·-q·grub2-comm | |||
| 0020dfc0:·6f6e·2026·616d·703b·2661·6d70·3b20·5b20··on·&&·[· | |||
| 0020dfd0:·2120·2d66·202f·7379·732f·6669·726d·7761··!·-f·/sys/firmwa | |||
| 0020dfe0:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 0020dff0:·6d70·3b20·7b20·5b20·2120·2d66·202f·2e64··mp;·{·[·!·-f·/.d | 0020dff0:·6d70·3b20·7b20·5b20·2120·2d66·202f·2e64··mp;·{·[·!·-f·/.d | ||
| 0020e000:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | 0020e000:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | ||
| 0020e010:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | 0020e010:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | ||
| 0020e020:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | 0020e020:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | ||
| 0020e030:·5d3b·207d·3b20·7468·656e·0a0a·6368·6772··];·};·then..chgr | 0020e030:·5d3b·207d·3b20·7468·656e·0a0a·6368·6772··];·};·then..chgr | ||
| 0020e040:·7020·3020·2f62·6f6f·742f·6772·7562·322f··p·0·/boot/grub2/ | 0020e040:·7020·3020·2f62·6f6f·742f·6772·7562·322f··p·0·/boot/grub2/ | ||
| 0020e050:·6772·7562·2e63·6667·0a0a·656c·7365·0a20··grub.cfg..else.· | 0020e050:·6772·7562·2e63·6667·0a0a·656c·7365·0a20··grub.cfg..else.· | ||
| Offset 135122, 22 lines modified | Offset 135122, 22 lines modified | ||
| 0020fd10:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 0020fd10:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 0020fd20:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 0020fd20:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 0020fd30:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | 0020fd30:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | ||
| 0020fd40:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 0020fd40:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 0020fd50:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 0020fd50:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 0020fd60:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 0020fd60:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 0020fd70:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 0020fd70:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 0020fd80:·656e·3a0a·2020·2d20·2722· | 0020fd80:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 0020fd90:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 0020fda0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 0020fdb0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 0020fdc0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 0020fdd0:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 0020fde0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0020fd | 0020fd90:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 0020fda0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0020fdb0:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 0020fdc0:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 0020fdd0:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 0020fde0:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 0020fdf0:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 0020fe00:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 0020fe00:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 0020fe10:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 0020fe10:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 0020fe20:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 0020fe20:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 0020fe30:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 0020fe30:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 0020fe40:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 0020fe40:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 0020fe50:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | 0020fe50:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 0020fe60:·2043·4a49·532d·352e·352e·322e·320a·2020···CJIS-5.5.2.2.·· | 0020fe60:·2043·4a49·532d·352e·352e·322e·320a·2020···CJIS-5.5.2.2.·· | ||
| Offset 135157, 22 lines modified | Offset 135157, 22 lines modified | ||
| 0020ff40:·5f6e·6565·6465·640a·0a2d·206e·616d·653a··_needed..-·name: | 0020ff40:·5f6e·6565·6465·640a·0a2d·206e·616d·653a··_needed..-·name: | ||
| 0020ff50:·2045·6e73·7572·6520·6f77·6e65·7220·3020···Ensure·owner·0· | 0020ff50:·2045·6e73·7572·6520·6f77·6e65·7220·3020···Ensure·owner·0· | ||
| 0020ff60:·6f6e·202f·626f·6f74·2f67·7275·6232·2f67··on·/boot/grub2/g | 0020ff60:·6f6e·202f·626f·6f74·2f67·7275·6232·2f67··on·/boot/grub2/g | ||
| 0020ff70:·7275·622e·6366·670a·2020·6669·6c65·3a0a··rub.cfg.··file:. | 0020ff70:·7275·622e·6366·670a·2020·6669·6c65·3a0a··rub.cfg.··file:. | ||
| 0020ff80:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | 0020ff80:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | ||
| 0020ff90:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 0020ff90:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 0020ffa0:·2020·206f·776e·6572·3a20·2730·270a·2020·····owner:·'0'.·· | 0020ffa0:·2020·206f·776e·6572·3a20·2730·270a·2020·····owner:·'0'.·· | ||
| 0020ffb0:·7768·656e·3a0a·2020·2d20·2722· | 0020ffb0:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 0020ffc0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 0020ffd0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 0020ffe0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 0020fff0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 00210000:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 00210010:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 002 | 0020ffc0:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 0020ffd0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0020ffe0:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| Max diff block lines reached; 2098/11622 bytes (18.05%) of diff not shown. | |||
| Offset 28864, 16 lines modified | Offset 28864, 16 lines modified | ||
| 28864 | ··-·no_reboot_needed | 28864 | ··-·no_reboot_needed |
| 28865 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 28865 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 28866 | ··stat: | 28866 | ··stat: |
| 28867 | ····path:·/boot/grub2/grub.cfg | 28867 | ····path:·/boot/grub2/grub.cfg |
| 28868 | ··register:·file_exists | 28868 | ··register:·file_exists |
| 28869 | ··when: | 28869 | ··when: |
| 28870 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28871 | ··-·'"grub2-common"·in·ansible_facts.packages' | 28870 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 28871 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28872 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28872 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28873 | ··tags: | 28873 | ··tags: |
| 28874 | ··-·CJIS-5.5.2.2 | 28874 | ··-·CJIS-5.5.2.2 |
| 28875 | ··-·NIST-800-171-3.4.5 | 28875 | ··-·NIST-800-171-3.4.5 |
| 28876 | ··-·NIST-800-53-AC-6(1) | 28876 | ··-·NIST-800-53-AC-6(1) |
| 28877 | ··-·NIST-800-53-CM-6(a) | 28877 | ··-·NIST-800-53-CM-6(a) |
| 28878 | ··-·PCI-DSS-Req-7.1 | 28878 | ··-·PCI-DSS-Req-7.1 |
| Offset 28885, 16 lines modified | Offset 28885, 16 lines modified | ||
| 28885 | ··-·no_reboot_needed | 28885 | ··-·no_reboot_needed |
| 28886 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 28886 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 28887 | ··file: | 28887 | ··file: |
| 28888 | ····path:·/boot/grub2/grub.cfg | 28888 | ····path:·/boot/grub2/grub.cfg |
| 28889 | ····group:·'0' | 28889 | ····group:·'0' |
| 28890 | ··when: | 28890 | ··when: |
| 28891 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28892 | ··-·'"grub2-common"·in·ansible_facts.packages' | 28891 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 28892 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28893 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28893 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28894 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 28894 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 28895 | ··tags: | 28895 | ··tags: |
| 28896 | ··-·CJIS-5.5.2.2 | 28896 | ··-·CJIS-5.5.2.2 |
| 28897 | ··-·NIST-800-171-3.4.5 | 28897 | ··-·NIST-800-171-3.4.5 |
| 28898 | ··-·NIST-800-53-AC-6(1) | 28898 | ··-·NIST-800-53-AC-6(1) |
| 28899 | ··-·NIST-800-53-CM-6(a) | 28899 | ··-·NIST-800-53-CM-6(a) |
| Offset 28906, 15 lines modified | Offset 28906, 15 lines modified | ||
| 28906 | ··-·medium_severity | 28906 | ··-·medium_severity |
| 28907 | ··-·no_reboot_needed | 28907 | ··-·no_reboot_needed |
| 28908 | Remediation_Shell_script_⇲ | 28908 | Remediation_Shell_script_⇲ |
| 28909 | Complexity:·low | 28909 | Complexity:·low |
| 28910 | Disruption:·low | 28910 | Disruption:·low |
| 28911 | Strategy:···configure | 28911 | Strategy:···configure |
| 28912 | #·Remediation·is·applicable·only·in·certain·platforms | 28912 | #·Remediation·is·applicable·only·in·certain·platforms |
| 28913 | if· | 28913 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 28914 | chgrp·0·/boot/grub2/grub.cfg | 28914 | chgrp·0·/boot/grub2/grub.cfg |
| 28915 | else | 28915 | else |
| 28916 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 28916 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 28917 | fi | 28917 | fi |
| 28918 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 28918 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 28945, 16 lines modified | Offset 28945, 16 lines modified | ||
| 28945 | ··-·no_reboot_needed | 28945 | ··-·no_reboot_needed |
| 28946 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 28946 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 28947 | ··stat: | 28947 | ··stat: |
| 28948 | ····path:·/boot/grub2/grub.cfg | 28948 | ····path:·/boot/grub2/grub.cfg |
| 28949 | ··register:·file_exists | 28949 | ··register:·file_exists |
| 28950 | ··when: | 28950 | ··when: |
| 28951 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28952 | ··-·'"grub2-common"·in·ansible_facts.packages' | 28951 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 28952 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28953 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28953 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28954 | ··tags: | 28954 | ··tags: |
| 28955 | ··-·CJIS-5.5.2.2 | 28955 | ··-·CJIS-5.5.2.2 |
| 28956 | ··-·NIST-800-171-3.4.5 | 28956 | ··-·NIST-800-171-3.4.5 |
| 28957 | ··-·NIST-800-53-AC-6(1) | 28957 | ··-·NIST-800-53-AC-6(1) |
| 28958 | ··-·NIST-800-53-CM-6(a) | 28958 | ··-·NIST-800-53-CM-6(a) |
| 28959 | ··-·PCI-DSS-Req-7.1 | 28959 | ··-·PCI-DSS-Req-7.1 |
| Offset 28966, 16 lines modified | Offset 28966, 16 lines modified | ||
| 28966 | ··-·no_reboot_needed | 28966 | ··-·no_reboot_needed |
| 28967 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 28967 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 28968 | ··file: | 28968 | ··file: |
| 28969 | ····path:·/boot/grub2/grub.cfg | 28969 | ····path:·/boot/grub2/grub.cfg |
| 28970 | ····owner:·'0' | 28970 | ····owner:·'0' |
| 28971 | ··when: | 28971 | ··when: |
| 28972 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28973 | ··-·'"grub2-common"·in·ansible_facts.packages' | 28972 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 28973 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 28974 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28974 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28975 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 28975 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 28976 | ··tags: | 28976 | ··tags: |
| 28977 | ··-·CJIS-5.5.2.2 | 28977 | ··-·CJIS-5.5.2.2 |
| 28978 | ··-·NIST-800-171-3.4.5 | 28978 | ··-·NIST-800-171-3.4.5 |
| 28979 | ··-·NIST-800-53-AC-6(1) | 28979 | ··-·NIST-800-53-AC-6(1) |
| 28980 | ··-·NIST-800-53-CM-6(a) | 28980 | ··-·NIST-800-53-CM-6(a) |
| Offset 28987, 15 lines modified | Offset 28987, 15 lines modified | ||
| 28987 | ··-·medium_severity | 28987 | ··-·medium_severity |
| 28988 | ··-·no_reboot_needed | 28988 | ··-·no_reboot_needed |
| 28989 | Remediation_Shell_script_⇲ | 28989 | Remediation_Shell_script_⇲ |
| 28990 | Complexity:·low | 28990 | Complexity:·low |
| 28991 | Disruption:·low | 28991 | Disruption:·low |
| 28992 | Strategy:···configure | 28992 | Strategy:···configure |
| 28993 | #·Remediation·is·applicable·only·in·certain·platforms | 28993 | #·Remediation·is·applicable·only·in·certain·platforms |
| 28994 | if· | 28994 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 28995 | chown·0·/boot/grub2/grub.cfg | 28995 | chown·0·/boot/grub2/grub.cfg |
| 28996 | else | 28996 | else |
| 28997 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 28997 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 28998 | fi | 28998 | fi |
| 28999 | Group ·Network·Configuration·and·Firewalls· Group·contains·9·groups·and·12·rules | 28999 | Group ·Network·Configuration·and·Firewalls· Group·contains·9·groups·and·12·rules |
| Offset 200621, 22 lines modified | Offset 200621, 22 lines modified | ||
| 0030fac0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 0030fac0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 0030fad0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 0030fad0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 0030fae0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 0030fae0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 0030faf0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 0030faf0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 0030fb00:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | 0030fb00:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | ||
| 0030fb10:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 0030fb10:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 0030fb20:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 0030fb20:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 0030fb30:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 0030fb40:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 0030fb50:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 0030fb60:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 0030fb70:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | |||
| 0030fb80:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | |||
| 0030fb | 0030fb30:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | ||
| 0030fb40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0030fb50:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | |||
| 0030fb60:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 0030fb70:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 0030fb80:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 0030fb90:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 0030fba0:·7 | 0030fba0:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 0030fbb0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 0030fbb0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 0030fbc0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 0030fbc0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 0030fbd0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 0030fbd0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 0030fbe0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 0030fbe0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 0030fbf0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 0030fbf0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 0030fc00:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 0030fc00:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0030fc10:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | 0030fc10:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | ||
| Offset 200656, 22 lines modified | Offset 200656, 22 lines modified | ||
| 0030fcf0:·6564·6564·0a0a·2d20·6e61·6d65·3a20·456e··eded..-·name:·En | 0030fcf0:·6564·6564·0a0a·2d20·6e61·6d65·3a20·456e··eded..-·name:·En | ||
| 0030fd00:·7375·7265·2067·726f·7570·206f·776e·6572··sure·group·owner | 0030fd00:·7375·7265·2067·726f·7570·206f·776e·6572··sure·group·owner | ||
| 0030fd10:·2030·206f·6e20·2f62·6f6f·742f·6772·7562···0·on·/boot/grub | 0030fd10:·2030·206f·6e20·2f62·6f6f·742f·6772·7562···0·on·/boot/grub | ||
| 0030fd20:·322f·6772·7562·2e63·6667·0a20·2066·696c··2/grub.cfg.··fil | 0030fd20:·322f·6772·7562·2e63·6667·0a20·2066·696c··2/grub.cfg.··fil | ||
| 0030fd30:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | 0030fd30:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | ||
| 0030fd40:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 0030fd40:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 0030fd50:·670a·2020·2020·6772·6f75·703a·2027·3027··g.····group:·'0' | 0030fd50:·670a·2020·2020·6772·6f75·703a·2027·3027··g.····group:·'0' | ||
| 0030fd60:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 0030fd60:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 0030fd70:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 0030fd80:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 0030fd90:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 0030fda0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 0030fdb0:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | |||
| 0030fdc0:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 0030fd | 0030fd70:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 0030fd80:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0030fd90:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | |||
| 0030fda0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 0030fdb0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 0030fdc0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 0030fdd0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 0030fde0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | 0030fde0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 0030fdf0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | 0030fdf0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | ||
| 0030fe00:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | 0030fe00:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | ||
| 0030fe10:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | 0030fe10:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | ||
| 0030fe20:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | 0030fe20:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | ||
| 0030fe30:·6e74·6169·6e65·7222·5d0a·2020·2d20·6669··ntainer"].··-·fi | 0030fe30:·6e74·6169·6e65·7222·5d0a·2020·2d20·6669··ntainer"].··-·fi | ||
| 0030fe40:·6c65·5f65·7869·7374·732e·7374·6174·2069··le_exists.stat·i | 0030fe40:·6c65·5f65·7869·7374·732e·7374·6174·2069··le_exists.stat·i | ||
| Offset 200722, 19 lines modified | Offset 200722, 19 lines modified | ||
| 00310110:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | 00310110:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00310120:·683e·3c74·643e·636f·6e66·6967·7572·653c··h><td>configure< | 00310120:·683e·3c74·643e·636f·6e66·6967·7572·653c··h><td>configure< | ||
| 00310130:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | 00310130:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 00310140:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | 00310140:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 00310150:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | 00310150:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 00310160:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | 00310160:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 00310170:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | 00310170:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 00310180:·730a·6966·205b·2021·202d·6620·2f73·7973··s.if·[·!·-f·/sys | |||
| 00310190:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 003101a0:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 003101 | 00310180:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | ||
| 00310190:·202d·7120·6772·7562·322d·636f·6d6d·6f6e···-q·grub2-common | |||
| 003101a0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 003101b0:·2d66·202f·7379·732f·6669·726d·7761·7265··-f·/sys/firmware | |||
| 003101c0:· | 003101c0:·2f65·6669·205d·2026·616d·703b·2661·6d70··/efi·]·&& | ||
| 003101d0:·3b20·7b20·5b20·2120·2d66·202f·2e64·6f63··;·{·[·!·-f·/.doc | 003101d0:·3b20·7b20·5b20·2120·2d66·202f·2e64·6f63··;·{·[·!·-f·/.doc | ||
| 003101e0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | 003101e0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 003101f0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | 003101f0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 00310200:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | 00310200:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | ||
| 00310210:·207d·3b20·7468·656e·0a0a·6368·6772·7020···};·then..chgrp· | 00310210:·207d·3b20·7468·656e·0a0a·6368·6772·7020···};·then..chgrp· | ||
| 00310220:·3020·2f62·6f6f·742f·6772·7562·322f·6772··0·/boot/grub2/gr | 00310220:·3020·2f62·6f6f·742f·6772·7562·322f·6772··0·/boot/grub2/gr | ||
| 00310230:·7562·2e63·6667·0a0a·656c·7365·0a20·2020··ub.cfg..else.··· | 00310230:·7562·2e63·6667·0a0a·656c·7365·0a20·2020··ub.cfg..else.··· | ||
| Offset 201200, 22 lines modified | Offset 201200, 22 lines modified | ||
| 00311ef0:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | 00311ef0:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | ||
| 00311f00:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | 00311f00:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | ||
| 00311f10:·322f·6772·7562·2e63·6667·0a20·2073·7461··2/grub.cfg.··sta | 00311f10:·322f·6772·7562·2e63·6667·0a20·2073·7461··2/grub.cfg.··sta | ||
| 00311f20:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 00311f20:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 00311f30:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 00311f30:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 00311f40:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 00311f40:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 00311f50:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 00311f50:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 00311f60:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 00311f70:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 00311f80:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 00311f90:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 00311fa0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 00311fb0:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 00311fc0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00311f | 00311f60:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 00311f70:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 00311f80:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 00311f90:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 00311fa0:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 00311fb0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 00311fc0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 00311fd0:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 00311fe0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 00311fe0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 00311ff0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 00311ff0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 00312000:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 00312000:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 00312010:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 00312010:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 00312020:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 00312020:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 00312030:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | 00312030:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 00312040:·4a49·532d·352e·352e·322e·320a·2020·2d20··JIS-5.5.2.2.··-· | 00312040:·4a49·532d·352e·352e·322e·320a·2020·2d20··JIS-5.5.2.2.··-· | ||
| Offset 201235, 22 lines modified | Offset 201235, 22 lines modified | ||
| 00312120:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | 00312120:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | ||
| 00312130:·6e73·7572·6520·6f77·6e65·7220·3020·6f6e··nsure·owner·0·on | 00312130:·6e73·7572·6520·6f77·6e65·7220·3020·6f6e··nsure·owner·0·on | ||
| 00312140:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 00312140:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 00312150:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.·· | 00312150:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.·· | ||
| 00312160:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 00312160:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 00312170:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.··· | 00312170:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.··· | ||
| 00312180:·206f·776e·6572·3a20·2730·270a·2020·7768···owner:·'0'.··wh | 00312180:·206f·776e·6572·3a20·2730·270a·2020·7768···owner:·'0'.··wh | ||
| 00312190:·656e·3a0a·2020·2d20·2722· | 00312190:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 003121a0:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 003121b0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 003121c0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 003121d0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 003121e0:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 003121f0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 00312 | 003121a0:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 003121b0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| Max diff block lines reached; 2098/11760 bytes (17.84%) of diff not shown. | |||
| Offset 48239, 16 lines modified | Offset 48239, 16 lines modified | ||
| 48239 | ··-·no_reboot_needed | 48239 | ··-·no_reboot_needed |
| 48240 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 48240 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 48241 | ··stat: | 48241 | ··stat: |
| 48242 | ····path:·/boot/grub2/grub.cfg | 48242 | ····path:·/boot/grub2/grub.cfg |
| 48243 | ··register:·file_exists | 48243 | ··register:·file_exists |
| 48244 | ··when: | 48244 | ··when: |
| 48245 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48246 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48245 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48246 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48247 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48247 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48248 | ··tags: | 48248 | ··tags: |
| 48249 | ··-·CJIS-5.5.2.2 | 48249 | ··-·CJIS-5.5.2.2 |
| 48250 | ··-·NIST-800-171-3.4.5 | 48250 | ··-·NIST-800-171-3.4.5 |
| 48251 | ··-·NIST-800-53-AC-6(1) | 48251 | ··-·NIST-800-53-AC-6(1) |
| 48252 | ··-·NIST-800-53-CM-6(a) | 48252 | ··-·NIST-800-53-CM-6(a) |
| 48253 | ··-·PCI-DSS-Req-7.1 | 48253 | ··-·PCI-DSS-Req-7.1 |
| Offset 48260, 16 lines modified | Offset 48260, 16 lines modified | ||
| 48260 | ··-·no_reboot_needed | 48260 | ··-·no_reboot_needed |
| 48261 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 48261 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 48262 | ··file: | 48262 | ··file: |
| 48263 | ····path:·/boot/grub2/grub.cfg | 48263 | ····path:·/boot/grub2/grub.cfg |
| 48264 | ····group:·'0' | 48264 | ····group:·'0' |
| 48265 | ··when: | 48265 | ··when: |
| 48266 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48267 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48266 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48267 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48268 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48268 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48269 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 48269 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 48270 | ··tags: | 48270 | ··tags: |
| 48271 | ··-·CJIS-5.5.2.2 | 48271 | ··-·CJIS-5.5.2.2 |
| 48272 | ··-·NIST-800-171-3.4.5 | 48272 | ··-·NIST-800-171-3.4.5 |
| 48273 | ··-·NIST-800-53-AC-6(1) | 48273 | ··-·NIST-800-53-AC-6(1) |
| 48274 | ··-·NIST-800-53-CM-6(a) | 48274 | ··-·NIST-800-53-CM-6(a) |
| Offset 48281, 15 lines modified | Offset 48281, 15 lines modified | ||
| 48281 | ··-·medium_severity | 48281 | ··-·medium_severity |
| 48282 | ··-·no_reboot_needed | 48282 | ··-·no_reboot_needed |
| 48283 | Remediation_Shell_script_⇲ | 48283 | Remediation_Shell_script_⇲ |
| 48284 | Complexity:·low | 48284 | Complexity:·low |
| 48285 | Disruption:·low | 48285 | Disruption:·low |
| 48286 | Strategy:···configure | 48286 | Strategy:···configure |
| 48287 | #·Remediation·is·applicable·only·in·certain·platforms | 48287 | #·Remediation·is·applicable·only·in·certain·platforms |
| 48288 | if· | 48288 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 48289 | chgrp·0·/boot/grub2/grub.cfg | 48289 | chgrp·0·/boot/grub2/grub.cfg |
| 48290 | else | 48290 | else |
| 48291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 48291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 48292 | fi | 48292 | fi |
| 48293 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 48293 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 48320, 16 lines modified | Offset 48320, 16 lines modified | ||
| 48320 | ··-·no_reboot_needed | 48320 | ··-·no_reboot_needed |
| 48321 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 48321 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 48322 | ··stat: | 48322 | ··stat: |
| 48323 | ····path:·/boot/grub2/grub.cfg | 48323 | ····path:·/boot/grub2/grub.cfg |
| 48324 | ··register:·file_exists | 48324 | ··register:·file_exists |
| 48325 | ··when: | 48325 | ··when: |
| 48326 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48327 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48326 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48327 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48328 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48328 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48329 | ··tags: | 48329 | ··tags: |
| 48330 | ··-·CJIS-5.5.2.2 | 48330 | ··-·CJIS-5.5.2.2 |
| 48331 | ··-·NIST-800-171-3.4.5 | 48331 | ··-·NIST-800-171-3.4.5 |
| 48332 | ··-·NIST-800-53-AC-6(1) | 48332 | ··-·NIST-800-53-AC-6(1) |
| 48333 | ··-·NIST-800-53-CM-6(a) | 48333 | ··-·NIST-800-53-CM-6(a) |
| 48334 | ··-·PCI-DSS-Req-7.1 | 48334 | ··-·PCI-DSS-Req-7.1 |
| Offset 48341, 16 lines modified | Offset 48341, 16 lines modified | ||
| 48341 | ··-·no_reboot_needed | 48341 | ··-·no_reboot_needed |
| 48342 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 48342 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 48343 | ··file: | 48343 | ··file: |
| 48344 | ····path:·/boot/grub2/grub.cfg | 48344 | ····path:·/boot/grub2/grub.cfg |
| 48345 | ····owner:·'0' | 48345 | ····owner:·'0' |
| 48346 | ··when: | 48346 | ··when: |
| 48347 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48348 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48347 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48348 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48349 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48349 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48350 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 48350 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 48351 | ··tags: | 48351 | ··tags: |
| 48352 | ··-·CJIS-5.5.2.2 | 48352 | ··-·CJIS-5.5.2.2 |
| 48353 | ··-·NIST-800-171-3.4.5 | 48353 | ··-·NIST-800-171-3.4.5 |
| 48354 | ··-·NIST-800-53-AC-6(1) | 48354 | ··-·NIST-800-53-AC-6(1) |
| 48355 | ··-·NIST-800-53-CM-6(a) | 48355 | ··-·NIST-800-53-CM-6(a) |
| Offset 48362, 15 lines modified | Offset 48362, 15 lines modified | ||
| 48362 | ··-·medium_severity | 48362 | ··-·medium_severity |
| 48363 | ··-·no_reboot_needed | 48363 | ··-·no_reboot_needed |
| 48364 | Remediation_Shell_script_⇲ | 48364 | Remediation_Shell_script_⇲ |
| 48365 | Complexity:·low | 48365 | Complexity:·low |
| 48366 | Disruption:·low | 48366 | Disruption:·low |
| 48367 | Strategy:···configure | 48367 | Strategy:···configure |
| 48368 | #·Remediation·is·applicable·only·in·certain·platforms | 48368 | #·Remediation·is·applicable·only·in·certain·platforms |
| 48369 | if· | 48369 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 48370 | chown·0·/boot/grub2/grub.cfg | 48370 | chown·0·/boot/grub2/grub.cfg |
| 48371 | else | 48371 | else |
| 48372 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 48372 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 48373 | fi | 48373 | fi |
| 48374 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 48374 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 192426, 22 lines modified | Offset 192426, 22 lines modified | ||
| 002efa90:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 002efa90:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 002efaa0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | 002efaa0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | ||
| 002efab0:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | 002efab0:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | ||
| 002efac0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 002efac0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 002efad0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 002efad0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 002efae0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 002efae0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 002efaf0:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 002efaf0:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 002efb00:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 002efb10:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002efb20:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002efb30:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002efb40:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 002efb50:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | |||
| 002efb | 002efb00:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 002efb10:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002efb20:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 002efb30:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002efb40:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 002efb50:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002efb60:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002efb70:· | 002efb70:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 002efb80:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 002efb80:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 002efb90:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 002efb90:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 002efba0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 002efba0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 002efbb0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 002efbb0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 002efbc0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 002efbc0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 002efbd0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | 002efbd0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 002efbe0:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | 002efbe0:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | ||
| Offset 192462, 22 lines modified | Offset 192462, 22 lines modified | ||
| 002efcd0:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o | 002efcd0:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o | ||
| 002efce0:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | 002efce0:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | ||
| 002efcf0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002efcf0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002efd00:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | 002efd00:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | ||
| 002efd10:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002efd10:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002efd20:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group: | 002efd20:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group: | ||
| 002efd30:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | 002efd30:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | ||
| 002efd40:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002efd50:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002efd60:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002efd70:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002efd80:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002efd90:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002efd | 002efd40:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | ||
| 002efd50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002efd60:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002efd70:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002efd80:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002efd90:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002efda0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002efdb0:· | 002efdb0:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 002efdc0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002efdc0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002efdd0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002efdd0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002efde0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002efde0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002efdf0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002efdf0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002efe00:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002efe00:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002efe10:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | 002efe10:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | ||
| 002efe20:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | 002efe20:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | ||
| Offset 192527, 19 lines modified | Offset 192527, 19 lines modified | ||
| 002f00e0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | 002f00e0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 002f00f0:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | 002f00f0:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | ||
| 002f0100:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | 002f0100:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | ||
| 002f0110:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | 002f0110:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 002f0120:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 002f0120:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 002f0130:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 002f0130:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 002f0140:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 002f0140:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 002f0150:·666f·726d·730a·6966·20 | 002f0150:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | ||
| 002f0160:·2f73·7973·2f66·6972·6d77·6172·652f·6566··/sys/firmware/ef | |||
| 002f0170:·6920·5d20·2661·6d70·3b26·616d·703b·2072··i·]·&&·r | |||
| 002f0180:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | |||
| 002f01 | 002f0160:·7569·6574·202d·7120·6772·7562·322d·636f··uiet·-q·grub2-co | ||
| 002f0170:·6d6d·6f6e·2026·616d·703b·2661·6d70·3b20··mmon·&&· | |||
| 002f0180:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm | |||
| 002f0190:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 002f01a0:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | 002f01a0:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | ||
| 002f01b0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | 002f01b0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | ||
| 002f01c0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | 002f01c0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 002f01d0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | 002f01d0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 002f01e0:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | 002f01e0:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | ||
| 002f01f0:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | 002f01f0:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | ||
| 002f0200:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else | 002f0200:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else | ||
| Offset 193005, 22 lines modified | Offset 193005, 22 lines modified | ||
| 002f1ec0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 002f1ec0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 002f1ed0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 002f1ed0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 002f1ee0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002f1ee0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002f1ef0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 002f1ef0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 002f1f00:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002f1f00:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002f1f10:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 002f1f10:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 002f1f20:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 002f1f20:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 002f1f30:·7768·656e·3a0a·2020·2d20·2722· | 002f1f30:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 002f1f40:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 002f1f50:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002f1f60:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002f1f70:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002f1f80:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 002f1f90:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 002f1f | 002f1f40:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 002f1f50:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 002f1f60:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 002f1f70:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 002f1f80:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002f1f90:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002f1fa0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002f1fb0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 002f1fb0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 002f1fc0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 002f1fc0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 002f1fd0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 002f1fd0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 002f1fe0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 002f1fe0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 002f1ff0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 002f1ff0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 002f2000:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 002f2000:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 002f2010:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | 002f2010:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | ||
| Offset 193040, 22 lines modified | Offset 193040, 22 lines modified | ||
| 002f20f0:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | 002f20f0:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | ||
| 002f2100:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | 002f2100:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | ||
| 002f2110:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 002f2110:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 002f2120:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | 002f2120:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | ||
| 002f2130:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 002f2130:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 002f2140:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 002f2140:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 002f2150:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | 002f2150:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | ||
| 002f2160:·2020·7768·656e·3a0a·2020·2d20·2722· | 002f2160:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 002f2170:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 002f2180:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 002f2190:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 002f21a0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 002f21b0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 002f21c0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002f21 | 002f2170:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 002f2180:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 002f2190:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | |||
| Max diff block lines reached; 2098/11760 bytes (17.84%) of diff not shown. | |||
| Offset 44623, 16 lines modified | Offset 44623, 16 lines modified | ||
| 44623 | ··-·no_reboot_needed | 44623 | ··-·no_reboot_needed |
| 44624 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 44624 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 44625 | ··stat: | 44625 | ··stat: |
| 44626 | ····path:·/boot/grub2/grub.cfg | 44626 | ····path:·/boot/grub2/grub.cfg |
| 44627 | ··register:·file_exists | 44627 | ··register:·file_exists |
| 44628 | ··when: | 44628 | ··when: |
| 44629 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44630 | ··-·'"grub2-common"·in·ansible_facts.packages' | 44629 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 44630 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44631 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 44631 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 44632 | ··tags: | 44632 | ··tags: |
| 44633 | ··-·CJIS-5.5.2.2 | 44633 | ··-·CJIS-5.5.2.2 |
| 44634 | ··-·NIST-800-171-3.4.5 | 44634 | ··-·NIST-800-171-3.4.5 |
| 44635 | ··-·NIST-800-53-AC-6(1) | 44635 | ··-·NIST-800-53-AC-6(1) |
| 44636 | ··-·NIST-800-53-CM-6(a) | 44636 | ··-·NIST-800-53-CM-6(a) |
| 44637 | ··-·PCI-DSS-Req-7.1 | 44637 | ··-·PCI-DSS-Req-7.1 |
| Offset 44644, 16 lines modified | Offset 44644, 16 lines modified | ||
| 44644 | ··-·no_reboot_needed | 44644 | ··-·no_reboot_needed |
| 44645 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 44645 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 44646 | ··file: | 44646 | ··file: |
| 44647 | ····path:·/boot/grub2/grub.cfg | 44647 | ····path:·/boot/grub2/grub.cfg |
| 44648 | ····group:·'0' | 44648 | ····group:·'0' |
| 44649 | ··when: | 44649 | ··when: |
| 44650 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44651 | ··-·'"grub2-common"·in·ansible_facts.packages' | 44650 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 44651 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44652 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 44652 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 44653 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 44653 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 44654 | ··tags: | 44654 | ··tags: |
| 44655 | ··-·CJIS-5.5.2.2 | 44655 | ··-·CJIS-5.5.2.2 |
| 44656 | ··-·NIST-800-171-3.4.5 | 44656 | ··-·NIST-800-171-3.4.5 |
| 44657 | ··-·NIST-800-53-AC-6(1) | 44657 | ··-·NIST-800-53-AC-6(1) |
| 44658 | ··-·NIST-800-53-CM-6(a) | 44658 | ··-·NIST-800-53-CM-6(a) |
| Offset 44665, 15 lines modified | Offset 44665, 15 lines modified | ||
| 44665 | ··-·medium_severity | 44665 | ··-·medium_severity |
| 44666 | ··-·no_reboot_needed | 44666 | ··-·no_reboot_needed |
| 44667 | Remediation_Shell_script_⇲ | 44667 | Remediation_Shell_script_⇲ |
| 44668 | Complexity:·low | 44668 | Complexity:·low |
| 44669 | Disruption:·low | 44669 | Disruption:·low |
| 44670 | Strategy:···configure | 44670 | Strategy:···configure |
| 44671 | #·Remediation·is·applicable·only·in·certain·platforms | 44671 | #·Remediation·is·applicable·only·in·certain·platforms |
| 44672 | if· | 44672 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 44673 | chgrp·0·/boot/grub2/grub.cfg | 44673 | chgrp·0·/boot/grub2/grub.cfg |
| 44674 | else | 44674 | else |
| 44675 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 44675 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 44676 | fi | 44676 | fi |
| 44677 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 44677 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 44704, 16 lines modified | Offset 44704, 16 lines modified | ||
| 44704 | ··-·no_reboot_needed | 44704 | ··-·no_reboot_needed |
| 44705 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 44705 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 44706 | ··stat: | 44706 | ··stat: |
| 44707 | ····path:·/boot/grub2/grub.cfg | 44707 | ····path:·/boot/grub2/grub.cfg |
| 44708 | ··register:·file_exists | 44708 | ··register:·file_exists |
| 44709 | ··when: | 44709 | ··when: |
| 44710 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44711 | ··-·'"grub2-common"·in·ansible_facts.packages' | 44710 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 44711 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44712 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 44712 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 44713 | ··tags: | 44713 | ··tags: |
| 44714 | ··-·CJIS-5.5.2.2 | 44714 | ··-·CJIS-5.5.2.2 |
| 44715 | ··-·NIST-800-171-3.4.5 | 44715 | ··-·NIST-800-171-3.4.5 |
| 44716 | ··-·NIST-800-53-AC-6(1) | 44716 | ··-·NIST-800-53-AC-6(1) |
| 44717 | ··-·NIST-800-53-CM-6(a) | 44717 | ··-·NIST-800-53-CM-6(a) |
| 44718 | ··-·PCI-DSS-Req-7.1 | 44718 | ··-·PCI-DSS-Req-7.1 |
| Offset 44725, 16 lines modified | Offset 44725, 16 lines modified | ||
| 44725 | ··-·no_reboot_needed | 44725 | ··-·no_reboot_needed |
| 44726 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 44726 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 44727 | ··file: | 44727 | ··file: |
| 44728 | ····path:·/boot/grub2/grub.cfg | 44728 | ····path:·/boot/grub2/grub.cfg |
| 44729 | ····owner:·'0' | 44729 | ····owner:·'0' |
| 44730 | ··when: | 44730 | ··when: |
| 44731 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44732 | ··-·'"grub2-common"·in·ansible_facts.packages' | 44731 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 44732 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 44733 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 44733 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 44734 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 44734 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 44735 | ··tags: | 44735 | ··tags: |
| 44736 | ··-·CJIS-5.5.2.2 | 44736 | ··-·CJIS-5.5.2.2 |
| 44737 | ··-·NIST-800-171-3.4.5 | 44737 | ··-·NIST-800-171-3.4.5 |
| 44738 | ··-·NIST-800-53-AC-6(1) | 44738 | ··-·NIST-800-53-AC-6(1) |
| 44739 | ··-·NIST-800-53-CM-6(a) | 44739 | ··-·NIST-800-53-CM-6(a) |
| Offset 44746, 15 lines modified | Offset 44746, 15 lines modified | ||
| 44746 | ··-·medium_severity | 44746 | ··-·medium_severity |
| 44747 | ··-·no_reboot_needed | 44747 | ··-·no_reboot_needed |
| 44748 | Remediation_Shell_script_⇲ | 44748 | Remediation_Shell_script_⇲ |
| 44749 | Complexity:·low | 44749 | Complexity:·low |
| 44750 | Disruption:·low | 44750 | Disruption:·low |
| 44751 | Strategy:···configure | 44751 | Strategy:···configure |
| 44752 | #·Remediation·is·applicable·only·in·certain·platforms | 44752 | #·Remediation·is·applicable·only·in·certain·platforms |
| 44753 | if· | 44753 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 44754 | chown·0·/boot/grub2/grub.cfg | 44754 | chown·0·/boot/grub2/grub.cfg |
| 44755 | else | 44755 | else |
| 44756 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 44756 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 44757 | fi | 44757 | fi |
| 44758 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules | 44758 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules |
| Offset 44578, 22 lines modified | Offset 44578, 22 lines modified | ||
| 000ae210:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | 000ae210:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | ||
| 000ae220:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | 000ae220:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | ||
| 000ae230:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 000ae230:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 000ae240:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 000ae240:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 000ae250:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 000ae250:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 000ae260:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | 000ae260:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | ||
| 000ae270:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | 000ae270:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | ||
| 000ae280:·2077·6865·6e3a·0a20·202d·2027·22 | 000ae280:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 000ae290:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 000ae2a0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 000ae2b0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 000ae2c0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 000ae2d0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | |||
| 000ae2e0:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 000ae2 | 000ae290:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 000ae2a0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000ae2b0:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | |||
| 000ae2c0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 000ae2d0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 000ae2e0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 000ae2f0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 000ae300:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 000ae300:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 000ae310:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 000ae310:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 000ae320:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 000ae320:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 000ae330:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 000ae330:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 000ae340:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 000ae340:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 000ae350:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | 000ae350:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 000ae360:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | 000ae360:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | ||
| Offset 44614, 22 lines modified | Offset 44614, 22 lines modified | ||
| 000ae450:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | 000ae450:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 000ae460:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | 000ae460:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | ||
| 000ae470:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 000ae470:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 000ae480:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.·· | 000ae480:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.·· | ||
| 000ae490:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 000ae490:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 000ae4a0:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.··· | 000ae4a0:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.··· | ||
| 000ae4b0:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | 000ae4b0:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | ||
| 000ae4c0:·656e·3a0a·2020·2d20·2722· | 000ae4c0:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 000ae4d0:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000ae4e0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000ae4f0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000ae500:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000ae510:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 000ae520:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 000ae | 000ae4d0:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 000ae4e0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 000ae4f0:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 000ae500:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 000ae510:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 000ae520:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 000ae530:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 000ae540:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 000ae540:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 000ae550:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 000ae550:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 000ae560:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 000ae560:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 000ae570:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 000ae570:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 000ae580:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 000ae580:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 000ae590:·6572·225d·0a20·202d·2066·696c·655f·6578··er"].··-·file_ex | 000ae590:·6572·225d·0a20·202d·2066·696c·655f·6578··er"].··-·file_ex | ||
| 000ae5a0:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def | 000ae5a0:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def | ||
| Offset 44680, 19 lines modified | Offset 44680, 19 lines modified | ||
| 000ae870:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | 000ae870:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 000ae880:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | 000ae880:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | ||
| 000ae890:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | 000ae890:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 000ae8a0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 000ae8a0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 000ae8b0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 000ae8b0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 000ae8c0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 000ae8c0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 000ae8d0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 000ae8d0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 000ae8e0:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm | |||
| 000ae8f0:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 000ae900:·2661·6d70·3b20·7270·6d20·2d2d·7175·6965··&·rpm·--quie | |||
| 000ae | 000ae8e0:·7270·6d20·2d2d·7175·6965·7420·2d71·2067··rpm·--quiet·-q·g | ||
| 000ae8f0:·7275·6232·2d63·6f6d·6d6f·6e20·2661·6d70··rub2-common·& | |||
| 000ae900:·3b26·616d·703b·205b·2021·202d·6620·2f73··;&·[·!·-f·/s | |||
| 000ae910:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | |||
| 000ae920:· | 000ae920:·5d20·2661·6d70·3b26·616d·703b·207b·205b··]·&&·{·[ | ||
| 000ae930:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | 000ae930:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 000ae940:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | 000ae940:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 000ae950:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | 000ae950:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 000ae960:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | 000ae960:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 000ae970:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | 000ae970:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | ||
| 000ae980:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 000ae980:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 000ae990:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | 000ae990:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | ||
| Offset 45158, 22 lines modified | Offset 45158, 22 lines modified | ||
| 000b0650:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | 000b0650:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | ||
| 000b0660:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 000b0660:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 000b0670:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 000b0670:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 000b0680:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 000b0680:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 000b0690:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | 000b0690:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | ||
| 000b06a0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 000b06a0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 000b06b0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 000b06b0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 000b06c0:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 000b06d0:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 000b06e0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000b06f0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000b0700:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 000b0710:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 000b0 | 000b06c0:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | ||
| 000b06d0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000b06e0:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 000b06f0:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 000b0700:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000b0710:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000b0720:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000b0730:· | 000b0730:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 000b0740:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 000b0740:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 000b0750:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 000b0750:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 000b0760:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 000b0760:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 000b0770:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 000b0770:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 000b0780:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 000b0780:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 000b0790:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | 000b0790:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 000b07a0:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | 000b07a0:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | ||
| Offset 45193, 22 lines modified | Offset 45193, 22 lines modified | ||
| 000b0880:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | 000b0880:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 000b0890:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | 000b0890:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | ||
| 000b08a0:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 000b08a0:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 000b08b0:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | 000b08b0:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | ||
| 000b08c0:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | 000b08c0:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | ||
| 000b08d0:·7275·622e·6366·670a·2020·2020·6f77·6e65··rub.cfg.····owne | 000b08d0:·7275·622e·6366·670a·2020·2020·6f77·6e65··rub.cfg.····owne | ||
| 000b08e0:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | 000b08e0:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | ||
| 000b08f0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000b0900:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 000b0910:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 000b0920:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 000b0930:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 000b0940:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | |||
| 000b0 | 000b08f0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | ||
| 000b0900:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 000b0910:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 000b0920:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| Max diff block lines reached; 7970/17622 bytes (45.23%) of diff not shown. | |||
| Offset 4816, 16 lines modified | Offset 4816, 16 lines modified | ||
| 4816 | ··-·no_reboot_needed | 4816 | ··-·no_reboot_needed |
| 4817 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 4817 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 4818 | ··stat: | 4818 | ··stat: |
| 4819 | ····path:·/boot/grub2/grub.cfg | 4819 | ····path:·/boot/grub2/grub.cfg |
| 4820 | ··register:·file_exists | 4820 | ··register:·file_exists |
| 4821 | ··when: | 4821 | ··when: |
| 4822 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4823 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4822 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4823 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4824 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4824 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4825 | ··tags: | 4825 | ··tags: |
| 4826 | ··-·CJIS-5.5.2.2 | 4826 | ··-·CJIS-5.5.2.2 |
| 4827 | ··-·NIST-800-171-3.4.5 | 4827 | ··-·NIST-800-171-3.4.5 |
| 4828 | ··-·NIST-800-53-AC-6(1) | 4828 | ··-·NIST-800-53-AC-6(1) |
| 4829 | ··-·NIST-800-53-CM-6(a) | 4829 | ··-·NIST-800-53-CM-6(a) |
| 4830 | ··-·PCI-DSS-Req-7.1 | 4830 | ··-·PCI-DSS-Req-7.1 |
| Offset 4837, 16 lines modified | Offset 4837, 16 lines modified | ||
| 4837 | ··-·no_reboot_needed | 4837 | ··-·no_reboot_needed |
| 4838 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 4838 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 4839 | ··file: | 4839 | ··file: |
| 4840 | ····path:·/boot/grub2/grub.cfg | 4840 | ····path:·/boot/grub2/grub.cfg |
| 4841 | ····group:·'0' | 4841 | ····group:·'0' |
| 4842 | ··when: | 4842 | ··when: |
| 4843 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4844 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4843 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4844 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4845 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4845 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4846 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 4846 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 4847 | ··tags: | 4847 | ··tags: |
| 4848 | ··-·CJIS-5.5.2.2 | 4848 | ··-·CJIS-5.5.2.2 |
| 4849 | ··-·NIST-800-171-3.4.5 | 4849 | ··-·NIST-800-171-3.4.5 |
| 4850 | ··-·NIST-800-53-AC-6(1) | 4850 | ··-·NIST-800-53-AC-6(1) |
| 4851 | ··-·NIST-800-53-CM-6(a) | 4851 | ··-·NIST-800-53-CM-6(a) |
| Offset 4858, 15 lines modified | Offset 4858, 15 lines modified | ||
| 4858 | ··-·medium_severity | 4858 | ··-·medium_severity |
| 4859 | ··-·no_reboot_needed | 4859 | ··-·no_reboot_needed |
| 4860 | Remediation_Shell_script_⇲ | 4860 | Remediation_Shell_script_⇲ |
| 4861 | Complexity:·low | 4861 | Complexity:·low |
| 4862 | Disruption:·low | 4862 | Disruption:·low |
| 4863 | Strategy:···configure | 4863 | Strategy:···configure |
| 4864 | #·Remediation·is·applicable·only·in·certain·platforms | 4864 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4865 | if· | 4865 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 4866 | chgrp·0·/boot/grub2/grub.cfg | 4866 | chgrp·0·/boot/grub2/grub.cfg |
| 4867 | else | 4867 | else |
| 4868 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 4868 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 4869 | fi | 4869 | fi |
| 4870 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 4870 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 4897, 16 lines modified | Offset 4897, 16 lines modified | ||
| 4897 | ··-·no_reboot_needed | 4897 | ··-·no_reboot_needed |
| 4898 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 4898 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 4899 | ··stat: | 4899 | ··stat: |
| 4900 | ····path:·/boot/grub2/grub.cfg | 4900 | ····path:·/boot/grub2/grub.cfg |
| 4901 | ··register:·file_exists | 4901 | ··register:·file_exists |
| 4902 | ··when: | 4902 | ··when: |
| 4903 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4904 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4903 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4904 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4906 | ··tags: | 4906 | ··tags: |
| 4907 | ··-·CJIS-5.5.2.2 | 4907 | ··-·CJIS-5.5.2.2 |
| 4908 | ··-·NIST-800-171-3.4.5 | 4908 | ··-·NIST-800-171-3.4.5 |
| 4909 | ··-·NIST-800-53-AC-6(1) | 4909 | ··-·NIST-800-53-AC-6(1) |
| 4910 | ··-·NIST-800-53-CM-6(a) | 4910 | ··-·NIST-800-53-CM-6(a) |
| 4911 | ··-·PCI-DSS-Req-7.1 | 4911 | ··-·PCI-DSS-Req-7.1 |
| Offset 4918, 16 lines modified | Offset 4918, 16 lines modified | ||
| 4918 | ··-·no_reboot_needed | 4918 | ··-·no_reboot_needed |
| 4919 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 4919 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 4920 | ··file: | 4920 | ··file: |
| 4921 | ····path:·/boot/grub2/grub.cfg | 4921 | ····path:·/boot/grub2/grub.cfg |
| 4922 | ····owner:·'0' | 4922 | ····owner:·'0' |
| 4923 | ··when: | 4923 | ··when: |
| 4924 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4925 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4924 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4925 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4926 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4926 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4927 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 4927 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 4928 | ··tags: | 4928 | ··tags: |
| 4929 | ··-·CJIS-5.5.2.2 | 4929 | ··-·CJIS-5.5.2.2 |
| 4930 | ··-·NIST-800-171-3.4.5 | 4930 | ··-·NIST-800-171-3.4.5 |
| 4931 | ··-·NIST-800-53-AC-6(1) | 4931 | ··-·NIST-800-53-AC-6(1) |
| 4932 | ··-·NIST-800-53-CM-6(a) | 4932 | ··-·NIST-800-53-CM-6(a) |
| Offset 4939, 15 lines modified | Offset 4939, 15 lines modified | ||
| 4939 | ··-·medium_severity | 4939 | ··-·medium_severity |
| 4940 | ··-·no_reboot_needed | 4940 | ··-·no_reboot_needed |
| 4941 | Remediation_Shell_script_⇲ | 4941 | Remediation_Shell_script_⇲ |
| 4942 | Complexity:·low | 4942 | Complexity:·low |
| 4943 | Disruption:·low | 4943 | Disruption:·low |
| 4944 | Strategy:···configure | 4944 | Strategy:···configure |
| 4945 | #·Remediation·is·applicable·only·in·certain·platforms | 4945 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4946 | if· | 4946 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 4947 | chown·0·/boot/grub2/grub.cfg | 4947 | chown·0·/boot/grub2/grub.cfg |
| 4948 | else | 4948 | else |
| 4949 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 4949 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 4950 | fi | 4950 | fi |
| 4951 | ***·Rule ·Verify·/boot/grub2/grub.cfg·Permissions· [ref]·*** | 4951 | ***·Rule ·Verify·/boot/grub2/grub.cfg·Permissions· [ref]·*** |
| Offset 4976, 16 lines modified | Offset 4976, 16 lines modified | ||
| 4976 | ··-·no_reboot_needed | 4976 | ··-·no_reboot_needed |
| 4977 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 4977 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 4978 | ··stat: | 4978 | ··stat: |
| 4979 | ····path:·/boot/grub2/grub.cfg | 4979 | ····path:·/boot/grub2/grub.cfg |
| 4980 | ··register:·file_exists | 4980 | ··register:·file_exists |
| 4981 | ··when: | 4981 | ··when: |
| 4982 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4983 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4982 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4983 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4984 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4984 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4985 | ··tags: | 4985 | ··tags: |
| 4986 | ··-·NIST-800-171-3.4.5 | 4986 | ··-·NIST-800-171-3.4.5 |
| 4987 | ··-·NIST-800-53-AC-6(1) | 4987 | ··-·NIST-800-53-AC-6(1) |
| 4988 | ··-·NIST-800-53-CM-6(a) | 4988 | ··-·NIST-800-53-CM-6(a) |
| 4989 | ··-·configure_strategy | 4989 | ··-·configure_strategy |
| 4990 | ··-·file_permissions_grub2_cfg | 4990 | ··-·file_permissions_grub2_cfg |
| Offset 4995, 16 lines modified | Offset 4995, 16 lines modified | ||
| 4995 | ··-·no_reboot_needed | 4995 | ··-·no_reboot_needed |
| 4996 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 4996 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 4997 | ··file: | 4997 | ··file: |
| 4998 | ····path:·/boot/grub2/grub.cfg | 4998 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1108/5548 bytes (19.97%) of diff not shown. | |||
| Offset 350589, 23 lines modified | Offset 350589, 23 lines modified | ||
| 005597c0:·7472·6963·7469·6f6e·735c·732a·3d5c·732a··trictions\s*=\s* | 005597c0:·7472·6963·7469·6f6e·735c·732a·3d5c·732a··trictions\s*=\s* | ||
| 005597d0:·0a20·2020·2020·206c·696e·653a·2073·6d74··.······line:·smt | 005597d0:·0a20·2020·2020·206c·696e·653a·2073·6d74··.······line:·smt | ||
| 005597e0:·7064·5f63·6c69·656e·745f·7265·7374·7269··pd_client_restri | 005597e0:·7064·5f63·6c69·656e·745f·7265·7374·7269··pd_client_restri | ||
| 005597f0:·6374·696f·6e73·203d·2070·6572·6d69·745f··ctions·=·permit_ | 005597f0:·6374·696f·6e73·203d·2070·6572·6d69·745f··ctions·=·permit_ | ||
| 00559800:·6d79·6e65·7477·6f72·6b73·2c72·656a·6563··mynetworks,rejec | 00559800:·6d79·6e65·7477·6f72·6b73·2c72·656a·6563··mynetworks,rejec | ||
| 00559810:·740a·2020·2020·2020·7374·6174·653a·2070··t.······state:·p | 00559810:·740a·2020·2020·2020·7374·6174·653a·2070··t.······state:·p | ||
| 00559820:·7265·7365·6e74·0a20·2077·6865·6e3a·0a20··resent.··when:.· | 00559820:·7265·7365·6e74·0a20·2077·6865·6e3a·0a20··resent.··when:.· | ||
| 00559830:·202d·2027·2270·6f73·7466·6978·2220·696e···-·'"postfix"·in | |||
| 00559840:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00559850:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 00559860:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 00559870:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00559880:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00559890:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 005598 | 00559830:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 00559840:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 00559850:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 00559860:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 00559870:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 00559880:·7461·696e·6572·225d·0a20·202d·2027·2270··tainer"].··-·'"p | |||
| 00559890:·6f73·7466·6978·2220·696e·2061·6e73·6962··ostfix"·in·ansib | |||
| 005598a0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 005598b0:· | 005598b0:·7327·0a20·2074·6167·733a·0a20·202d·2044··s'.··tags:.··-·D | ||
| 005598c0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | 005598c0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | ||
| 005598d0:·2d30·3430·3239·300a·2020·2d20·6c6f·775f··-040290.··-·low_ | 005598d0:·2d30·3430·3239·300a·2020·2d20·6c6f·775f··-040290.··-·low_ | ||
| 005598e0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | 005598e0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | ||
| 005598f0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | 005598f0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | ||
| 00559900:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | 00559900:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | ||
| 00559910:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | 00559910:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | ||
| 00559920:·6e65·6564·6564·0a20·202d·2070·6f73·7466··needed.··-·postf | 00559920:·6e65·6564·6564·0a20·202d·2070·6f73·7466··needed.··-·postf | ||
| Offset 350629, 20 lines modified | Offset 350629, 20 lines modified | ||
| 00559a40:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | 00559a40:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00559a50:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | 00559a50:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00559a60:·6964·3d22·6964·6d37·3238·3533·223e·3c70··id="idm72853"><p | 00559a60:·6964·3d22·6964·6d37·3238·3533·223e·3c70··id="idm72853"><p | ||
| 00559a70:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | 00559a70:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 00559a80:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | 00559a80:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 00559a90:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | 00559a90:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 00559aa0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | 00559aa0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 00559ab0:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 00559ac0:·2070·6f73·7466·6978·2026·616d·703b·2661···postfix·&&a | |||
| 00559a | 00559ab0:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | ||
| 00559a | 00559ac0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | ||
| 00559a | 00559ad0:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | ||
| 00559 | 00559ae0:·6f6e·7461·696e·6572·656e·7620·5d20·2661··ontainerenv·]·&a | ||
| 00559af0:·6d70·3b26·616d·703b·2072·706d·202d·2d71··mp;&·rpm·--q | |||
| 00559b00:·7569·6574·202d·7120·706f·7374·6669·783b··uiet·-q·postfix; | |||
| 00559b10:·2074·6865·6e0a·0a69·6620·2120·6772·6570···then..if·!·grep | 00559b10:·2074·6865·6e0a·0a69·6620·2120·6772·6570···then..if·!·grep | ||
| 00559b20:·202d·7120·5e73·6d74·7064·5f63·6c69·656e···-q·^smtpd_clien | 00559b20:·202d·7120·5e73·6d74·7064·5f63·6c69·656e···-q·^smtpd_clien | ||
| 00559b30:·745f·7265·7374·7269·6374·696f·6e73·202f··t_restrictions·/ | 00559b30:·745f·7265·7374·7269·6374·696f·6e73·202f··t_restrictions·/ | ||
| 00559b40:·6574·632f·706f·7374·6669·782f·6d61·696e··etc/postfix/main | 00559b40:·6574·632f·706f·7374·6669·782f·6d61·696e··etc/postfix/main | ||
| 00559b50:·2e63·663b·2074·6865·6e0a·0965·6368·6f20··.cf;·then..echo· | 00559b50:·2e63·663b·2074·6865·6e0a·0965·6368·6f20··.cf;·then..echo· | ||
| 00559b60:·2273·6d74·7064·5f63·6c69·656e·745f·7265··"smtpd_client_re | 00559b60:·2273·6d74·7064·5f63·6c69·656e·745f·7265··"smtpd_client_re | ||
| 00559b70:·7374·7269·6374·696f·6e73·203d·2070·6572··strictions·=·per | 00559b70:·7374·7269·6374·696f·6e73·203d·2070·6572··strictions·=·per |
| Offset 74696, 27 lines modified | Offset 74696, 27 lines modified | ||
| 74696 | ····lineinfile: | 74696 | ····lineinfile: |
| 74697 | ······path:·/etc/postfix/main.cf | 74697 | ······path:·/etc/postfix/main.cf |
| 74698 | ······create:·true | 74698 | ······create:·true |
| 74699 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 74699 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 74700 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 74700 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 74701 | ······state:·present | 74701 | ······state:·present |
| 74702 | ··when: | 74702 | ··when: |
| 74703 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 74704 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 74703 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 74704 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 74705 | ··tags: | 74705 | ··tags: |
| 74706 | ··-·DISA-STIG-RHEL-08-040290 | 74706 | ··-·DISA-STIG-RHEL-08-040290 |
| 74707 | ··-·low_complexity | 74707 | ··-·low_complexity |
| 74708 | ··-·low_disruption | 74708 | ··-·low_disruption |
| 74709 | ··-·medium_severity | 74709 | ··-·medium_severity |
| 74710 | ··-·no_reboot_needed | 74710 | ··-·no_reboot_needed |
| 74711 | ··-·postfix_prevent_unrestricted_relay | 74711 | ··-·postfix_prevent_unrestricted_relay |
| 74712 | ··-·restrict_strategy | 74712 | ··-·restrict_strategy |
| 74713 | Remediation_Shell_script_⇲ | 74713 | Remediation_Shell_script_⇲ |
| 74714 | #·Remediation·is·applicable·only·in·certain·platforms | 74714 | #·Remediation·is·applicable·only·in·certain·platforms |
| 74715 | if· | 74715 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 74716 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 74716 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 74717 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 74717 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 74718 | else | 74718 | else |
| 74719 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 74719 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 74720 | fi | 74720 | fi |
| Offset 350299, 23 lines modified | Offset 350299, 23 lines modified | ||
| 005585a0:·5f63·6c69·656e·745f·7265·7374·7269·6374··_client_restrict | 005585a0:·5f63·6c69·656e·745f·7265·7374·7269·6374··_client_restrict | ||
| 005585b0:·696f·6e73·5c73·2a3d·5c73·2a0a·2020·2020··ions\s*=\s*.···· | 005585b0:·696f·6e73·5c73·2a3d·5c73·2a0a·2020·2020··ions\s*=\s*.···· | ||
| 005585c0:·2020·6c69·6e65·3a20·736d·7470·645f·636c····line:·smtpd_cl | 005585c0:·2020·6c69·6e65·3a20·736d·7470·645f·636c····line:·smtpd_cl | ||
| 005585d0:·6965·6e74·5f72·6573·7472·6963·7469·6f6e··ient_restriction | 005585d0:·6965·6e74·5f72·6573·7472·6963·7469·6f6e··ient_restriction | ||
| 005585e0:·7320·3d20·7065·726d·6974·5f6d·796e·6574··s·=·permit_mynet | 005585e0:·7320·3d20·7065·726d·6974·5f6d·796e·6574··s·=·permit_mynet | ||
| 005585f0:·776f·726b·732c·7265·6a65·6374·0a20·2020··works,reject.··· | 005585f0:·776f·726b·732c·7265·6a65·6374·0a20·2020··works,reject.··· | ||
| 00558600:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 00558600:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 00558610:·740a·2020·7768·656e·3a0a·2020·2d20· | 00558610:·740a·2020·7768·656e·3a0a·2020·2d20·616e··t.··when:.··-·an | ||
| 00558620:·706f·7374·6669·7822·2069·6e20·616e·7369··postfix"·in·ansi | |||
| 00558630:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 00558640:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | |||
| 00558650:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00558660:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00558670:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00558680:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 005586 | 00558620:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 00558630:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 00558640:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 00558650:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 00558660:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 00558670:·7222·5d0a·2020·2d20·2722·706f·7374·6669··r"].··-·'"postfi | |||
| 00558680:·7822·2069·6e20·616e·7369·626c·655f·6661··x"·in·ansible_fa | |||
| 00558690:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 005586a0:·7461·6773·3a0a·2020·2d20·4449·5341·2d53··tags:.··-·DISA-S | 005586a0:·7461·6773·3a0a·2020·2d20·4449·5341·2d53··tags:.··-·DISA-S | ||
| 005586b0:·5449·472d·5248·454c·2d30·382d·3034·3032··TIG-RHEL-08-0402 | 005586b0:·5449·472d·5248·454c·2d30·382d·3034·3032··TIG-RHEL-08-0402 | ||
| 005586c0:·3930·0a20·202d·206c·6f77·5f63·6f6d·706c··90.··-·low_compl | 005586c0:·3930·0a20·202d·206c·6f77·5f63·6f6d·706c··90.··-·low_compl | ||
| 005586d0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | 005586d0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | ||
| 005586e0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | 005586e0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | ||
| 005586f0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | 005586f0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | ||
| 00558700:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | 00558700:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| Offset 350339, 21 lines modified | Offset 350339, 21 lines modified | ||
| 00558820:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 00558820:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 00558830:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 00558830:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 00558840:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 00558840:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 00558850:·646d·3732·3835·3322·3e3c·7072·653e·3c63··dm72853"><pre><c | 00558850:·646d·3732·3835·3322·3e3c·7072·653e·3c63··dm72853"><pre><c | ||
| 00558860:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 00558860:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 00558870:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 00558870:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 00558880:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 00558880:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 00558890:·706c·6174·666f·726d·730a·6966·20 | 00558890:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | ||
| 005588a0:·202d·2d71·7569·6574·202d·7120·706f·7374···--quiet·-q·post | |||
| 005588b0:·6669·7820·2661·6d70·3b26·616d·703b·205b··fix·&&·[ | |||
| 005588 | 005588a0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 005588 | 005588b0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 005588 | 005588c0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 005588 | 005588d0:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | ||
| 005588e0:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 005588f0:·2d71·2070·6f73·7466·6978·3b20·7468·656e··-q·postfix;·then | |||
| 00558900:·0a0a·6966·2021·2067·7265·7020·2d71·205e··..if·!·grep·-q·^ | 00558900:·0a0a·6966·2021·2067·7265·7020·2d71·205e··..if·!·grep·-q·^ | ||
| 00558910:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | 00558910:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | ||
| 00558920:·7472·6963·7469·6f6e·7320·2f65·7463·2f70··trictions·/etc/p | 00558920:·7472·6963·7469·6f6e·7320·2f65·7463·2f70··trictions·/etc/p | ||
| 00558930:·6f73·7466·6978·2f6d·6169·6e2e·6366·3b20··ostfix/main.cf;· | 00558930:·6f73·7466·6978·2f6d·6169·6e2e·6366·3b20··ostfix/main.cf;· | ||
| 00558940:·7468·656e·0a09·6563·686f·2022·736d·7470··then..echo·"smtp | 00558940:·7468·656e·0a09·6563·686f·2022·736d·7470··then..echo·"smtp | ||
| 00558950:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | 00558950:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | ||
| 00558960:·7469·6f6e·7320·3d20·7065·726d·6974·5f6d··tions·=·permit_m | 00558960:·7469·6f6e·7320·3d20·7065·726d·6974·5f6d··tions·=·permit_m |
| Offset 74645, 27 lines modified | Offset 74645, 27 lines modified | ||
| 74645 | ····lineinfile: | 74645 | ····lineinfile: |
| 74646 | ······path:·/etc/postfix/main.cf | 74646 | ······path:·/etc/postfix/main.cf |
| 74647 | ······create:·true | 74647 | ······create:·true |
| 74648 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 74648 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 74649 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 74649 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 74650 | ······state:·present | 74650 | ······state:·present |
| 74651 | ··when: | 74651 | ··when: |
| 74652 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 74653 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 74652 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 74653 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 74654 | ··tags: | 74654 | ··tags: |
| 74655 | ··-·DISA-STIG-RHEL-08-040290 | 74655 | ··-·DISA-STIG-RHEL-08-040290 |
| 74656 | ··-·low_complexity | 74656 | ··-·low_complexity |
| 74657 | ··-·low_disruption | 74657 | ··-·low_disruption |
| 74658 | ··-·medium_severity | 74658 | ··-·medium_severity |
| 74659 | ··-·no_reboot_needed | 74659 | ··-·no_reboot_needed |
| 74660 | ··-·postfix_prevent_unrestricted_relay | 74660 | ··-·postfix_prevent_unrestricted_relay |
| 74661 | ··-·restrict_strategy | 74661 | ··-·restrict_strategy |
| 74662 | Remediation_Shell_script_⇲ | 74662 | Remediation_Shell_script_⇲ |
| 74663 | #·Remediation·is·applicable·only·in·certain·platforms | 74663 | #·Remediation·is·applicable·only·in·certain·platforms |
| 74664 | if· | 74664 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 74665 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 74665 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 74666 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 74666 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 74667 | else | 74667 | else |
| 74668 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 74668 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 74669 | fi | 74669 | fi |
| Offset 186674, 22 lines modified | Offset 186674, 22 lines modified | ||
| 002d9310:·0a0a·2d20·6e61·6d65·3a20·5465·7374·2066··..-·name:·Test·f | 002d9310:·0a0a·2d20·6e61·6d65·3a20·5465·7374·2066··..-·name:·Test·f | ||
| 002d9320:·6f72·2065·7869·7374·656e·6365·202f·626f··or·existence·/bo | 002d9320:·6f72·2065·7869·7374·656e·6365·202f·626f··or·existence·/bo | ||
| 002d9330:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | 002d9330:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | ||
| 002d9340:·670a·2020·7374·6174·3a0a·2020·2020·7061··g.··stat:.····pa | 002d9340:·670a·2020·7374·6174·3a0a·2020·2020·7061··g.··stat:.····pa | ||
| 002d9350:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 002d9350:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 002d9360:·7573·6572·2e63·6667·0a20·2072·6567·6973··user.cfg.··regis | 002d9360:·7573·6572·2e63·6667·0a20·2072·6567·6973··user.cfg.··regis | ||
| 002d9370:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | 002d9370:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | ||
| 002d9380:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 002d9380:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 002d9390:·626f·6f74·2f65·6669·2220·696e·2061·6e73··boot/efi"·in·ans | |||
| 002d93a0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002d93b0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002d93c0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002d93 | 002d9390:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 002d93 | 002d93a0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 002d93 | 002d93b0:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | ||
| 002d93c0:·6f6f·742f·6566·6922·2069·6e20·616e·7369··oot/efi"·in·ansi | |||
| 002d93d0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 002d93e0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 002d93f0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 002d9400:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 002d9400:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 002d9410:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 002d9410:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 002d9420:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 002d9420:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 002d9430:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 002d9430:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 002d9440:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 002d9440:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 002d9450:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 002d9450:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 002d9460:·2d20·434a·4953·2d35·2e35·2e32·2e32·0a20··-·CJIS-5.5.2.2.· | 002d9460:·2d20·434a·4953·2d35·2e35·2e32·2e32·0a20··-·CJIS-5.5.2.2.· | ||
| Offset 186710, 22 lines modified | Offset 186710, 22 lines modified | ||
| 002d9550:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | 002d9550:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 002d9560:·2067·726f·7570·206f·776e·6572·2030·206f···group·owner·0·o | 002d9560:·2067·726f·7570·206f·776e·6572·2030·206f···group·owner·0·o | ||
| 002d9570:·6e20·2f62·6f6f·742f·6772·7562·322f·7573··n·/boot/grub2/us | 002d9570:·6e20·2f62·6f6f·742f·6772·7562·322f·7573··n·/boot/grub2/us | ||
| 002d9580:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | 002d9580:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | ||
| 002d9590:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 002d9590:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 002d95a0:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 002d95a0:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 002d95b0:·2020·6772·6f75·703a·2027·3027·0a20·2077····group:·'0'.··w | 002d95b0:·2020·6772·6f75·703a·2027·3027·0a20·2077····group:·'0'.··w | ||
| 002d95c0:·6865·6e3a·0a20·202d·2027·22 | 002d95c0:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 002d95d0:·2f65·6669·2220·696e·2061·6e73·6962·6c65··/efi"·in·ansible | |||
| 002d95e0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 002d95f0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 002d9600:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 002d9 | 002d95d0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 002d9 | 002d95e0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 002d95f0:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 002d9600:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 002d9610:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002d9620:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002d9630:· | 002d9630:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 002d9640:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 002d9640:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 002d9650:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 002d9650:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 002d9660:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 002d9660:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 002d9670:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 002d9670:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 002d9680:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 002d9680:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 002d9690:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | 002d9690:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | ||
| 002d96a0:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | 002d96a0:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | ||
| Offset 186776, 18 lines modified | Offset 186776, 18 lines modified | ||
| 002d9970:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | 002d9970:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 002d9980:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | 002d9980:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | ||
| 002d9990:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | 002d9990:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 002d99a0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 002d99a0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 002d99b0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 002d99b0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 002d99c0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 002d99c0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 002d99d0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 002d99d0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 002d99e0:·5b20·2d66·202f·7379·732f·6669·726d·7761··[·-f·/sys/firmwa | |||
| 002d99f0:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 002d9 | 002d99e0:·7270·6d20·2d2d·7175·6965·7420·2d71·2067··rpm·--quiet·-q·g | ||
| 002d9 | 002d99f0:·7275·6232·2d63·6f6d·6d6f·6e20·2661·6d70··rub2-common·& | ||
| 002d9a00:·3b26·616d·703b·205b·202d·6620·2f73·7973··;&·[·-f·/sys | |||
| 002d9a10:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 002d9a20:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | 002d9a20:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | ||
| 002d9a30:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | 002d9a30:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 002d9a40:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | 002d9a40:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 002d9a50:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | 002d9a50:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 002d9a60:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | 002d9a60:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | ||
| 002d9a70:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | 002d9a70:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | ||
| 002d9a80:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 002d9a80:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| Offset 187170, 21 lines modified | Offset 187170, 21 lines modified | ||
| 002db210:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 002db210:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 002db220:·6520·2f62·6f6f·742f·6772·7562·322f·7573··e·/boot/grub2/us | 002db220:·6520·2f62·6f6f·742f·6772·7562·322f·7573··e·/boot/grub2/us | ||
| 002db230:·6572·2e63·6667·0a20·2073·7461·743a·0a20··er.cfg.··stat:.· | 002db230:·6572·2e63·6667·0a20·2073·7461·743a·0a20··er.cfg.··stat:.· | ||
| 002db240:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 002db240:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 002db250:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 002db250:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 002db260:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 002db260:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 002db270:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 002db270:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 002db280:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 002db290:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002db2a0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002db2b0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002db2 | 002db280:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 002db2 | 002db290:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 002db2 | 002db2a0:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | ||
| 002db2b0:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 002db2c0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 002db2d0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 002db2e0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 002db2f0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 002db2f0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 002db300:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 002db300:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 002db310:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 002db310:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 002db320:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 002db320:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 002db330:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 002db330:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 002db340:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | 002db340:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | ||
| 002db350:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | 002db350:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | ||
| Offset 187205, 21 lines modified | Offset 187205, 21 lines modified | ||
| 002db440:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | 002db440:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 002db450:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | 002db450:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | ||
| 002db460:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | 002db460:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | ||
| 002db470:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | 002db470:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | ||
| 002db480:·683a·202f·626f·6f74·2f67·7275·6232·2f75··h:·/boot/grub2/u | 002db480:·683a·202f·626f·6f74·2f67·7275·6232·2f75··h:·/boot/grub2/u | ||
| 002db490:·7365·722e·6366·670a·2020·2020·6f77·6e65··ser.cfg.····owne | 002db490:·7365·722e·6366·670a·2020·2020·6f77·6e65··ser.cfg.····owne | ||
| 002db4a0:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | 002db4a0:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | ||
| 002db4b0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002db4c0:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 002db4d0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 002db4e0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 002db4 | 002db4b0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | ||
| 002db | 002db4c0:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | ||
| 002db | 002db4d0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | ||
| 002db4e0:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 002db4f0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002db500:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002db510:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002db520:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 002db520:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 002db530:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 002db530:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 002db540:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 002db540:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 002db550:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 002db550:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 002db560:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 002db560:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 002db570:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | 002db570:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | ||
| 002db580:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | 002db580:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | ||
| Offset 187270, 19 lines modified | Offset 187270, 19 lines modified | ||
| Max diff block lines reached; 13140/22830 bytes (57.56%) of diff not shown. | |||
| Offset 41738, 16 lines modified | Offset 41738, 16 lines modified | ||
| 41738 | ··-·no_reboot_needed | 41738 | ··-·no_reboot_needed |
| 41739 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 41739 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 41740 | ··stat: | 41740 | ··stat: |
| 41741 | ····path:·/boot/grub2/user.cfg | 41741 | ····path:·/boot/grub2/user.cfg |
| 41742 | ··register:·file_exists | 41742 | ··register:·file_exists |
| 41743 | ··when: | 41743 | ··when: |
| 41744 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41745 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41744 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41745 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41746 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41746 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41747 | ··tags: | 41747 | ··tags: |
| 41748 | ··-·CJIS-5.5.2.2 | 41748 | ··-·CJIS-5.5.2.2 |
| 41749 | ··-·NIST-800-171-3.4.5 | 41749 | ··-·NIST-800-171-3.4.5 |
| 41750 | ··-·NIST-800-53-AC-6(1) | 41750 | ··-·NIST-800-53-AC-6(1) |
| 41751 | ··-·NIST-800-53-CM-6(a) | 41751 | ··-·NIST-800-53-CM-6(a) |
| 41752 | ··-·PCI-DSS-Req-7.1 | 41752 | ··-·PCI-DSS-Req-7.1 |
| Offset 41759, 16 lines modified | Offset 41759, 16 lines modified | ||
| 41759 | ··-·no_reboot_needed | 41759 | ··-·no_reboot_needed |
| 41760 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 41760 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 41761 | ··file: | 41761 | ··file: |
| 41762 | ····path:·/boot/grub2/user.cfg | 41762 | ····path:·/boot/grub2/user.cfg |
| 41763 | ····group:·'0' | 41763 | ····group:·'0' |
| 41764 | ··when: | 41764 | ··when: |
| 41765 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41766 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41765 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41766 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41767 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41767 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41768 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41768 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41769 | ··tags: | 41769 | ··tags: |
| 41770 | ··-·CJIS-5.5.2.2 | 41770 | ··-·CJIS-5.5.2.2 |
| 41771 | ··-·NIST-800-171-3.4.5 | 41771 | ··-·NIST-800-171-3.4.5 |
| 41772 | ··-·NIST-800-53-AC-6(1) | 41772 | ··-·NIST-800-53-AC-6(1) |
| 41773 | ··-·NIST-800-53-CM-6(a) | 41773 | ··-·NIST-800-53-CM-6(a) |
| Offset 41780, 15 lines modified | Offset 41780, 15 lines modified | ||
| 41780 | ··-·medium_severity | 41780 | ··-·medium_severity |
| 41781 | ··-·no_reboot_needed | 41781 | ··-·no_reboot_needed |
| 41782 | Remediation_Shell_script_⇲ | 41782 | Remediation_Shell_script_⇲ |
| 41783 | Complexity:·low | 41783 | Complexity:·low |
| 41784 | Disruption:·low | 41784 | Disruption:·low |
| 41785 | Strategy:···configure | 41785 | Strategy:···configure |
| 41786 | #·Remediation·is·applicable·only·in·certain·platforms | 41786 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41787 | if· | 41787 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41788 | chgrp·0·/boot/grub2/user.cfg | 41788 | chgrp·0·/boot/grub2/user.cfg |
| 41789 | else | 41789 | else |
| 41790 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41790 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41791 | fi | 41791 | fi |
| 41792 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 41792 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 41819, 16 lines modified | Offset 41819, 16 lines modified | ||
| 41819 | ··-·no_reboot_needed | 41819 | ··-·no_reboot_needed |
| 41820 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 41820 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 41821 | ··stat: | 41821 | ··stat: |
| 41822 | ····path:·/boot/grub2/user.cfg | 41822 | ····path:·/boot/grub2/user.cfg |
| 41823 | ··register:·file_exists | 41823 | ··register:·file_exists |
| 41824 | ··when: | 41824 | ··when: |
| 41825 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41826 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41825 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41826 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41827 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41827 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41828 | ··tags: | 41828 | ··tags: |
| 41829 | ··-·CJIS-5.5.2.2 | 41829 | ··-·CJIS-5.5.2.2 |
| 41830 | ··-·NIST-800-171-3.4.5 | 41830 | ··-·NIST-800-171-3.4.5 |
| 41831 | ··-·NIST-800-53-AC-6(1) | 41831 | ··-·NIST-800-53-AC-6(1) |
| 41832 | ··-·NIST-800-53-CM-6(a) | 41832 | ··-·NIST-800-53-CM-6(a) |
| 41833 | ··-·PCI-DSS-Req-7.1 | 41833 | ··-·PCI-DSS-Req-7.1 |
| Offset 41840, 16 lines modified | Offset 41840, 16 lines modified | ||
| 41840 | ··-·no_reboot_needed | 41840 | ··-·no_reboot_needed |
| 41841 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 41841 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 41842 | ··file: | 41842 | ··file: |
| 41843 | ····path:·/boot/grub2/user.cfg | 41843 | ····path:·/boot/grub2/user.cfg |
| 41844 | ····owner:·'0' | 41844 | ····owner:·'0' |
| 41845 | ··when: | 41845 | ··when: |
| 41846 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41847 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41846 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41847 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41848 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41848 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41849 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41849 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41850 | ··tags: | 41850 | ··tags: |
| 41851 | ··-·CJIS-5.5.2.2 | 41851 | ··-·CJIS-5.5.2.2 |
| 41852 | ··-·NIST-800-171-3.4.5 | 41852 | ··-·NIST-800-171-3.4.5 |
| 41853 | ··-·NIST-800-53-AC-6(1) | 41853 | ··-·NIST-800-53-AC-6(1) |
| 41854 | ··-·NIST-800-53-CM-6(a) | 41854 | ··-·NIST-800-53-CM-6(a) |
| Offset 41861, 15 lines modified | Offset 41861, 15 lines modified | ||
| 41861 | ··-·medium_severity | 41861 | ··-·medium_severity |
| 41862 | ··-·no_reboot_needed | 41862 | ··-·no_reboot_needed |
| 41863 | Remediation_Shell_script_⇲ | 41863 | Remediation_Shell_script_⇲ |
| 41864 | Complexity:·low | 41864 | Complexity:·low |
| 41865 | Disruption:·low | 41865 | Disruption:·low |
| 41866 | Strategy:···configure | 41866 | Strategy:···configure |
| 41867 | #·Remediation·is·applicable·only·in·certain·platforms | 41867 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41868 | if· | 41868 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41869 | chown·0·/boot/grub2/user.cfg | 41869 | chown·0·/boot/grub2/user.cfg |
| 41870 | else | 41870 | else |
| 41871 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41871 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41872 | fi | 41872 | fi |
| 41873 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 41873 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 41898, 16 lines modified | Offset 41898, 16 lines modified | ||
| 41898 | ··-·no_reboot_needed | 41898 | ··-·no_reboot_needed |
| 41899 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 41899 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 41900 | ··stat: | 41900 | ··stat: |
| 41901 | ····path:·/boot/grub2/grub.cfg | 41901 | ····path:·/boot/grub2/grub.cfg |
| 41902 | ··register:·file_exists | 41902 | ··register:·file_exists |
| 41903 | ··when: | 41903 | ··when: |
| 41904 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41905 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41904 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41905 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41906 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41906 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41907 | ··tags: | 41907 | ··tags: |
| 41908 | ··-·NIST-800-171-3.4.5 | 41908 | ··-·NIST-800-171-3.4.5 |
| 41909 | ··-·NIST-800-53-AC-6(1) | 41909 | ··-·NIST-800-53-AC-6(1) |
| 41910 | ··-·NIST-800-53-CM-6(a) | 41910 | ··-·NIST-800-53-CM-6(a) |
| 41911 | ··-·configure_strategy | 41911 | ··-·configure_strategy |
| 41912 | ··-·file_permissions_efi_grub2_cfg | 41912 | ··-·file_permissions_efi_grub2_cfg |
| Offset 41917, 16 lines modified | Offset 41917, 16 lines modified | ||
| 41917 | ··-·no_reboot_needed | 41917 | ··-·no_reboot_needed |
| 41918 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 41918 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 41919 | ··file: | 41919 | ··file: |
| 41920 | ····path:·/boot/grub2/grub.cfg | 41920 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2985/7404 bytes (40.32%) of diff not shown. | |||
| Offset 61428, 21 lines modified | Offset 61428, 21 lines modified | ||
| 000eff30:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | 000eff30:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | ||
| 000eff40:·6365·202f·626f·6f74·2f67·7275·6232·2f75··ce·/boot/grub2/u | 000eff40:·6365·202f·626f·6f74·2f67·7275·6232·2f75··ce·/boot/grub2/u | ||
| 000eff50:·7365·722e·6366·670a·2020·7374·6174·3a0a··ser.cfg.··stat:. | 000eff50:·7365·722e·6366·670a·2020·7374·6174·3a0a··ser.cfg.··stat:. | ||
| 000eff60:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | 000eff60:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | ||
| 000eff70:·6772·7562·322f·7573·6572·2e63·6667·0a20··grub2/user.cfg.· | 000eff70:·6772·7562·322f·7573·6572·2e63·6667·0a20··grub2/user.cfg.· | ||
| 000eff80:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | 000eff80:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | ||
| 000eff90:·6578·6973·7473·0a20·2077·6865·6e3a·0a20··exists.··when:.· | 000eff90:·6578·6973·7473·0a20·2077·6865·6e3a·0a20··exists.··when:.· | ||
| 000effa0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000effb0:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000effc0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000effd0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000eff | 000effa0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | ||
| 000eff | 000effb0:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | ||
| 000 | 000effc0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | ||
| 000effd0:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 000effe0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 000efff0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 000f0000:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 000f0010:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 000f0010:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 000f0020:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 000f0020:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 000f0030:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 000f0030:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 000f0040:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 000f0040:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 000f0050:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 000f0050:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 000f0060:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | 000f0060:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | ||
| 000f0070:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | 000f0070:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5 | ||
| Offset 61464, 21 lines modified | Offset 61464, 21 lines modified | ||
| 000f0170:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | 000f0170:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | ||
| 000f0180:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | 000f0180:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | ||
| 000f0190:·7562·322f·7573·6572·2e63·6667·0a20·2066··ub2/user.cfg.··f | 000f0190:·7562·322f·7573·6572·2e63·6667·0a20·2066··ub2/user.cfg.··f | ||
| 000f01a0:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | 000f01a0:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | ||
| 000f01b0:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000f01b0:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000f01c0:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | 000f01c0:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | ||
| 000f01d0:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | 000f01d0:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | ||
| 000f01e0:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 000f01f0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 000f0200:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 000f0210:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 000f0 | 000f01e0:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 000f0 | 000f01f0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 000f02 | 000f0200:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 000f0210:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 000f0220:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 000f0230:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 000f0240:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 000f0250:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 000f0250:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 000f0260:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 000f0260:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 000f0270:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 000f0270:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 000f0280:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 000f0280:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 000f0290:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 000f0290:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 000f02a0:·6169·6e65·7222·5d0a·2020·2d20·6669·6c65··ainer"].··-·file | 000f02a0:·6169·6e65·7222·5d0a·2020·2d20·6669·6c65··ainer"].··-·file | ||
| 000f02b0:·5f65·7869·7374·732e·7374·6174·2069·7320··_exists.stat·is· | 000f02b0:·5f65·7869·7374·732e·7374·6174·2069·7320··_exists.stat·is· | ||
| Offset 61529, 19 lines modified | Offset 61529, 19 lines modified | ||
| 000f0580:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | 000f0580:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 000f0590:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | 000f0590:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | ||
| 000f05a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | 000f05a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 000f05b0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | 000f05b0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 000f05c0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | 000f05c0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 000f05d0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | 000f05d0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 000f05e0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | 000f05e0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 000f05f0:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 000f05f0:·6d73·0a69·6620·5b20·2d66·202f·7379·732f··ms.if·[·-f·/sys/ | |||
| 000f0600:·6669·726d·7761·7265·2f65·6669·205d·2026··firmware/efi·]·& | |||
| 000f0610:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 000f06 | 000f0600:·7420·2d71·2067·7275·6232·2d63·6f6d·6d6f··t·-q·grub2-commo | ||
| 000f0610:·6e20·2661·6d70·3b26·616d·703b·205b·202d··n·&&·[·- | |||
| 000f0620:·6620·2f73·7973·2f66·6972·6d77·6172·652f··f·/sys/firmware/ | |||
| 000f0630:·6 | 000f0630:·6566·6920·5d20·2661·6d70·3b26·616d·703b··efi·]·&& | ||
| 000f0640:·207b·205b·2021·202d·6620·2f2e·646f·636b···{·[·!·-f·/.dock | 000f0640:·207b·205b·2021·202d·6620·2f2e·646f·636b···{·[·!·-f·/.dock | ||
| 000f0650:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | 000f0650:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 000f0660:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | 000f0660:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 000f0670:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | 000f0670:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 000f0680:·7d3b·2074·6865·6e0a·0a63·6867·7270·2030··};·then..chgrp·0 | 000f0680:·7d3b·2074·6865·6e0a·0a63·6867·7270·2030··};·then..chgrp·0 | ||
| 000f0690:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | 000f0690:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | ||
| 000f06a0:·722e·6366·670a·0a65·6c73·650a·2020·2020··r.cfg..else.···· | 000f06a0:·722e·6366·670a·0a65·6c73·650a·2020·2020··r.cfg..else.···· | ||
| Offset 61923, 22 lines modified | Offset 61923, 22 lines modified | ||
| 000f1e20:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 000f1e20:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 000f1e30:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 000f1e30:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 000f1e40:·7562·322f·7573·6572·2e63·6667·0a20·2073··ub2/user.cfg.··s | 000f1e40:·7562·322f·7573·6572·2e63·6667·0a20·2073··ub2/user.cfg.··s | ||
| 000f1e50:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 000f1e50:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 000f1e60:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000f1e60:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000f1e70:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 000f1e70:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 000f1e80:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 000f1e80:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 000f1e90:·656e·3a0a·2020·2d20·2722· | 000f1e90:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 000f1ea0:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 000f1eb0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000f1ec0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000f1ed0:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 000f1e | 000f1ea0:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 000f1e | 000f1eb0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 000f1ec0:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 000f1ed0:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 000f1ee0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 000f1ef0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 000f1f00:· | 000f1f00:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 000f1f10:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 000f1f10:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 000f1f20:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 000f1f20:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 000f1f30:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 000f1f30:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 000f1f40:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 000f1f40:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 000f1f50:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 000f1f50:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 000f1f60:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | 000f1f60:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 000f1f70:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | 000f1f70:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | ||
| Offset 61958, 22 lines modified | Offset 61958, 22 lines modified | ||
| 000f2050:·6e65·6564·6564·0a0a·2d20·6e61·6d65·3a20··needed..-·name:· | 000f2050:·6e65·6564·6564·0a0a·2d20·6e61·6d65·3a20··needed..-·name:· | ||
| 000f2060:·456e·7375·7265·206f·776e·6572·2030·206f··Ensure·owner·0·o | 000f2060:·456e·7375·7265·206f·776e·6572·2030·206f··Ensure·owner·0·o | ||
| 000f2070:·6e20·2f62·6f6f·742f·6772·7562·322f·7573··n·/boot/grub2/us | 000f2070:·6e20·2f62·6f6f·742f·6772·7562·322f·7573··n·/boot/grub2/us | ||
| 000f2080:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | 000f2080:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | ||
| 000f2090:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 000f2090:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 000f20a0:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 000f20a0:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 000f20b0:·2020·6f77·6e65·723a·2027·3027·0a20·2077····owner:·'0'.··w | 000f20b0:·2020·6f77·6e65·723a·2027·3027·0a20·2077····owner:·'0'.··w | ||
| 000f20c0:·6865·6e3a·0a20·202d·2027·22 | 000f20c0:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 000f20d0:·2f65·6669·2220·696e·2061·6e73·6962·6c65··/efi"·in·ansible | |||
| 000f20e0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000f20f0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000f2100:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 000f2 | 000f20d0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 000f2 | 000f20e0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 000f20f0:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000f2100:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 000f2110:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000f2120:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000f2130:· | 000f2130:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 000f2140:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 000f2140:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 000f2150:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 000f2150:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 000f2160:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 000f2160:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 000f2170:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 000f2170:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 000f2180:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 000f2180:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 000f2190:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | 000f2190:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | ||
| Max diff block lines reached; 13154/22944 bytes (57.33%) of diff not shown. | |||
| Offset 8245, 16 lines modified | Offset 8245, 16 lines modified | ||
| 8245 | ··-·no_reboot_needed | 8245 | ··-·no_reboot_needed |
| 8246 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8246 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8247 | ··stat: | 8247 | ··stat: |
| 8248 | ····path:·/boot/grub2/user.cfg | 8248 | ····path:·/boot/grub2/user.cfg |
| 8249 | ··register:·file_exists | 8249 | ··register:·file_exists |
| 8250 | ··when: | 8250 | ··when: |
| 8251 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8252 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8251 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8252 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8254 | ··tags: | 8254 | ··tags: |
| 8255 | ··-·CJIS-5.5.2.2 | 8255 | ··-·CJIS-5.5.2.2 |
| 8256 | ··-·NIST-800-171-3.4.5 | 8256 | ··-·NIST-800-171-3.4.5 |
| 8257 | ··-·NIST-800-53-AC-6(1) | 8257 | ··-·NIST-800-53-AC-6(1) |
| 8258 | ··-·NIST-800-53-CM-6(a) | 8258 | ··-·NIST-800-53-CM-6(a) |
| 8259 | ··-·PCI-DSS-Req-7.1 | 8259 | ··-·PCI-DSS-Req-7.1 |
| Offset 8266, 16 lines modified | Offset 8266, 16 lines modified | ||
| 8266 | ··-·no_reboot_needed | 8266 | ··-·no_reboot_needed |
| 8267 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8267 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8268 | ··file: | 8268 | ··file: |
| 8269 | ····path:·/boot/grub2/user.cfg | 8269 | ····path:·/boot/grub2/user.cfg |
| 8270 | ····group:·'0' | 8270 | ····group:·'0' |
| 8271 | ··when: | 8271 | ··when: |
| 8272 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8273 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8272 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8273 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8274 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8274 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8275 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8275 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8276 | ··tags: | 8276 | ··tags: |
| 8277 | ··-·CJIS-5.5.2.2 | 8277 | ··-·CJIS-5.5.2.2 |
| 8278 | ··-·NIST-800-171-3.4.5 | 8278 | ··-·NIST-800-171-3.4.5 |
| 8279 | ··-·NIST-800-53-AC-6(1) | 8279 | ··-·NIST-800-53-AC-6(1) |
| 8280 | ··-·NIST-800-53-CM-6(a) | 8280 | ··-·NIST-800-53-CM-6(a) |
| Offset 8287, 15 lines modified | Offset 8287, 15 lines modified | ||
| 8287 | ··-·medium_severity | 8287 | ··-·medium_severity |
| 8288 | ··-·no_reboot_needed | 8288 | ··-·no_reboot_needed |
| 8289 | Remediation_Shell_script_⇲ | 8289 | Remediation_Shell_script_⇲ |
| 8290 | Complexity:·low | 8290 | Complexity:·low |
| 8291 | Disruption:·low | 8291 | Disruption:·low |
| 8292 | Strategy:···configure | 8292 | Strategy:···configure |
| 8293 | #·Remediation·is·applicable·only·in·certain·platforms | 8293 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8294 | if· | 8294 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8295 | chgrp·0·/boot/grub2/user.cfg | 8295 | chgrp·0·/boot/grub2/user.cfg |
| 8296 | else | 8296 | else |
| 8297 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8297 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8298 | fi | 8298 | fi |
| 8299 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 8299 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 8326, 16 lines modified | Offset 8326, 16 lines modified | ||
| 8326 | ··-·no_reboot_needed | 8326 | ··-·no_reboot_needed |
| 8327 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8327 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8328 | ··stat: | 8328 | ··stat: |
| 8329 | ····path:·/boot/grub2/user.cfg | 8329 | ····path:·/boot/grub2/user.cfg |
| 8330 | ··register:·file_exists | 8330 | ··register:·file_exists |
| 8331 | ··when: | 8331 | ··when: |
| 8332 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8333 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8332 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8333 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8334 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8334 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8335 | ··tags: | 8335 | ··tags: |
| 8336 | ··-·CJIS-5.5.2.2 | 8336 | ··-·CJIS-5.5.2.2 |
| 8337 | ··-·NIST-800-171-3.4.5 | 8337 | ··-·NIST-800-171-3.4.5 |
| 8338 | ··-·NIST-800-53-AC-6(1) | 8338 | ··-·NIST-800-53-AC-6(1) |
| 8339 | ··-·NIST-800-53-CM-6(a) | 8339 | ··-·NIST-800-53-CM-6(a) |
| 8340 | ··-·PCI-DSS-Req-7.1 | 8340 | ··-·PCI-DSS-Req-7.1 |
| Offset 8347, 16 lines modified | Offset 8347, 16 lines modified | ||
| 8347 | ··-·no_reboot_needed | 8347 | ··-·no_reboot_needed |
| 8348 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 8348 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 8349 | ··file: | 8349 | ··file: |
| 8350 | ····path:·/boot/grub2/user.cfg | 8350 | ····path:·/boot/grub2/user.cfg |
| 8351 | ····owner:·'0' | 8351 | ····owner:·'0' |
| 8352 | ··when: | 8352 | ··when: |
| 8353 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8354 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8353 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8354 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8355 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8355 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8356 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8356 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8357 | ··tags: | 8357 | ··tags: |
| 8358 | ··-·CJIS-5.5.2.2 | 8358 | ··-·CJIS-5.5.2.2 |
| 8359 | ··-·NIST-800-171-3.4.5 | 8359 | ··-·NIST-800-171-3.4.5 |
| 8360 | ··-·NIST-800-53-AC-6(1) | 8360 | ··-·NIST-800-53-AC-6(1) |
| 8361 | ··-·NIST-800-53-CM-6(a) | 8361 | ··-·NIST-800-53-CM-6(a) |
| Offset 8368, 15 lines modified | Offset 8368, 15 lines modified | ||
| 8368 | ··-·medium_severity | 8368 | ··-·medium_severity |
| 8369 | ··-·no_reboot_needed | 8369 | ··-·no_reboot_needed |
| 8370 | Remediation_Shell_script_⇲ | 8370 | Remediation_Shell_script_⇲ |
| 8371 | Complexity:·low | 8371 | Complexity:·low |
| 8372 | Disruption:·low | 8372 | Disruption:·low |
| 8373 | Strategy:···configure | 8373 | Strategy:···configure |
| 8374 | #·Remediation·is·applicable·only·in·certain·platforms | 8374 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8375 | if· | 8375 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8376 | chown·0·/boot/grub2/user.cfg | 8376 | chown·0·/boot/grub2/user.cfg |
| 8377 | else | 8377 | else |
| 8378 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8378 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8379 | fi | 8379 | fi |
| 8380 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 8380 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 8405, 16 lines modified | Offset 8405, 16 lines modified | ||
| 8405 | ··-·no_reboot_needed | 8405 | ··-·no_reboot_needed |
| 8406 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8406 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8407 | ··stat: | 8407 | ··stat: |
| 8408 | ····path:·/boot/grub2/grub.cfg | 8408 | ····path:·/boot/grub2/grub.cfg |
| 8409 | ··register:·file_exists | 8409 | ··register:·file_exists |
| 8410 | ··when: | 8410 | ··when: |
| 8411 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8412 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8411 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8412 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8413 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8413 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8414 | ··tags: | 8414 | ··tags: |
| 8415 | ··-·NIST-800-171-3.4.5 | 8415 | ··-·NIST-800-171-3.4.5 |
| 8416 | ··-·NIST-800-53-AC-6(1) | 8416 | ··-·NIST-800-53-AC-6(1) |
| 8417 | ··-·NIST-800-53-CM-6(a) | 8417 | ··-·NIST-800-53-CM-6(a) |
| 8418 | ··-·configure_strategy | 8418 | ··-·configure_strategy |
| 8419 | ··-·file_permissions_efi_grub2_cfg | 8419 | ··-·file_permissions_efi_grub2_cfg |
| Offset 8424, 16 lines modified | Offset 8424, 16 lines modified | ||
| 8424 | ··-·no_reboot_needed | 8424 | ··-·no_reboot_needed |
| 8425 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 8425 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 8426 | ··file: | 8426 | ··file: |
| 8427 | ····path:·/boot/grub2/grub.cfg | 8427 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2977/7380 bytes (40.34%) of diff not shown. | |||
| Offset 61424, 21 lines modified | Offset 61424, 21 lines modified | ||
| 000efef0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | 000efef0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | ||
| 000eff00:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000eff00:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000eff10:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | 000eff10:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | ||
| 000eff20:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 000eff20:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 000eff30:·322f·7573·6572·2e63·6667·0a20·2072·6567··2/user.cfg.··reg | 000eff30:·322f·7573·6572·2e63·6667·0a20·2072·6567··2/user.cfg.··reg | ||
| 000eff40:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 000eff40:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 000eff50:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 000eff50:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 000eff60:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 000eff70:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 000eff80:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 000eff90:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 000eff | 000eff60:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 000eff | 000eff70:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 000eff | 000eff80:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 000eff90:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 000effa0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 000effb0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 000effc0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 000effd0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 000effd0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 000effe0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 000effe0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 000efff0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 000efff0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 000f0000:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 000f0000:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 000f0010:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 000f0010:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 000f0020:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | 000f0020:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 000f0030:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | 000f0030:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | ||
| Offset 61459, 22 lines modified | Offset 61459, 22 lines modified | ||
| 000f0120:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | 000f0120:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | ||
| 000f0130:·7265·2067·726f·7570·206f·776e·6572·2030··re·group·owner·0 | 000f0130:·7265·2067·726f·7570·206f·776e·6572·2030··re·group·owner·0 | ||
| 000f0140:·206f·6e20·2f62·6f6f·742f·6772·7562·322f···on·/boot/grub2/ | 000f0140:·206f·6e20·2f62·6f6f·742f·6772·7562·322f···on·/boot/grub2/ | ||
| 000f0150:·7573·6572·2e63·6667·0a20·2066·696c·653a··user.cfg.··file: | 000f0150:·7573·6572·2e63·6667·0a20·2066·696c·653a··user.cfg.··file: | ||
| 000f0160:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000f0160:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000f0170:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 000f0170:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 000f0180:·2020·2020·6772·6f75·703a·2027·3027·0a20······group:·'0'.· | 000f0180:·2020·2020·6772·6f75·703a·2027·3027·0a20······group:·'0'.· | ||
| 000f0190:·2077·6865·6e3a·0a20·202d·2027·22 | 000f0190:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 000f01a0:·6f74·2f65·6669·2220·696e·2061·6e73·6962··ot/efi"·in·ansib | |||
| 000f01b0:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 000f01c0:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 000f01d0:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 000f01 | 000f01a0:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 000f01 | 000f01b0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 000f0 | 000f01c0:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | ||
| 000f01d0:·742f·6566·6922·2069·6e20·616e·7369·626c··t/efi"·in·ansibl | |||
| 000f01e0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000f01f0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000f0200:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 000f0210:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 000f0210:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 000f0220:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 000f0220:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 000f0230:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 000f0230:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 000f0240:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 000f0240:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 000f0250:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 000f0250:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 000f0260:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | 000f0260:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | ||
| 000f0270:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | 000f0270:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | ||
| Offset 61525, 19 lines modified | Offset 61525, 19 lines modified | ||
| 000f0540:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | 000f0540:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 000f0550:·7464·3e63·6f6e·6669·6775·7265·3c2f·7464··td>configure</td | 000f0550:·7464·3e63·6f6e·6669·6775·7265·3c2f·7464··td>configure</td | ||
| 000f0560:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | 000f0560:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 000f0570:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | 000f0570:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 000f0580:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | 000f0580:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 000f0590:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | 000f0590:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 000f05a0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | 000f05a0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 000f05b0:·6620·5b20·2d66·202f·7379·732f·6669·726d··f·[·-f·/sys/firm | |||
| 000f05c0:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 000f05 | 000f05b0:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | ||
| 000f05 | 000f05c0:·2067·7275·6232·2d63·6f6d·6d6f·6e20·2661···grub2-common·&a | ||
| 000f05d0:·6d70·3b26·616d·703b·205b·202d·6620·2f73··mp;&·[·-f·/s | |||
| 000f05e0:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | |||
| 000f05f0:· | 000f05f0:·5d20·2661·6d70·3b26·616d·703b·207b·205b··]·&&·{·[ | ||
| 000f0600:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | 000f0600:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 000f0610:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | 000f0610:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 000f0620:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | 000f0620:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 000f0630:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | 000f0630:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 000f0640:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | 000f0640:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | ||
| 000f0650:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | 000f0650:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | ||
| 000f0660:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | 000f0660:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | ||
| Offset 61919, 22 lines modified | Offset 61919, 22 lines modified | ||
| 000f1de0:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 000f1de0:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 000f1df0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | 000f1df0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | ||
| 000f1e00:·7573·6572·2e63·6667·0a20·2073·7461·743a··user.cfg.··stat: | 000f1e00:·7573·6572·2e63·6667·0a20·2073·7461·743a··user.cfg.··stat: | ||
| 000f1e10:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000f1e10:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000f1e20:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 000f1e20:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 000f1e30:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 000f1e30:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 000f1e40:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 000f1e40:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 000f1e50:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000f1e60:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000f1e70:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000f1e80:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000f1e | 000f1e50:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 000f1e | 000f1e60:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 000f1e | 000f1e70:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 000f1e80:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000f1e90:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000f1ea0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000f1eb0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000f1ec0:·7 | 000f1ec0:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000f1ed0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000f1ed0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000f1ee0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000f1ee0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000f1ef0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000f1ef0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000f1f00:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000f1f00:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000f1f10:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 000f1f10:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 000f1f20:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 000f1f20:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 000f1f30:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | 000f1f30:·352e·322e·320a·2020·2d20·4e49·5354·2d38··5.2.2.··-·NIST-8 | ||
| Offset 61954, 22 lines modified | Offset 61954, 22 lines modified | ||
| 000f2010:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | 000f2010:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | ||
| 000f2020:·7265·206f·776e·6572·2030·206f·6e20·2f62··re·owner·0·on·/b | 000f2020:·7265·206f·776e·6572·2030·206f·6e20·2f62··re·owner·0·on·/b | ||
| 000f2030:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | 000f2030:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | ||
| 000f2040:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 000f2040:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 000f2050:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 000f2050:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 000f2060:·2f75·7365·722e·6366·670a·2020·2020·6f77··/user.cfg.····ow | 000f2060:·2f75·7365·722e·6366·670a·2020·2020·6f77··/user.cfg.····ow | ||
| 000f2070:·6e65·723a·2027·3027·0a20·2077·6865·6e3a··ner:·'0'.··when: | 000f2070:·6e65·723a·2027·3027·0a20·2077·6865·6e3a··ner:·'0'.··when: | ||
| 000f2080:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000f2090:·2220·696e·2061·6e73·6962·6c65·5f6d·6f75··"·in·ansible_mou | |||
| 000f20a0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000f20b0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000f20 | 000f2080:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | ||
| 000f20 | 000f2090:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | ||
| 000f20 | 000f20a0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | ||
| 000f20b0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000f20c0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000f20d0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000f20e0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000f20f0:· | 000f20f0:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 000f2100:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 000f2100:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 000f2110:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 000f2110:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 000f2120:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 000f2120:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 000f2130:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 000f2130:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 000f2140:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 000f2140:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 000f2150:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | 000f2150:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | ||
| Max diff block lines reached; 13154/23082 bytes (56.99%) of diff not shown. | |||
| Offset 8244, 16 lines modified | Offset 8244, 16 lines modified | ||
| 8244 | ··-·no_reboot_needed | 8244 | ··-·no_reboot_needed |
| 8245 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8245 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8246 | ··stat: | 8246 | ··stat: |
| 8247 | ····path:·/boot/grub2/user.cfg | 8247 | ····path:·/boot/grub2/user.cfg |
| 8248 | ··register:·file_exists | 8248 | ··register:·file_exists |
| 8249 | ··when: | 8249 | ··when: |
| 8250 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8251 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8250 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8251 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8253 | ··tags: | 8253 | ··tags: |
| 8254 | ··-·CJIS-5.5.2.2 | 8254 | ··-·CJIS-5.5.2.2 |
| 8255 | ··-·NIST-800-171-3.4.5 | 8255 | ··-·NIST-800-171-3.4.5 |
| 8256 | ··-·NIST-800-53-AC-6(1) | 8256 | ··-·NIST-800-53-AC-6(1) |
| 8257 | ··-·NIST-800-53-CM-6(a) | 8257 | ··-·NIST-800-53-CM-6(a) |
| 8258 | ··-·PCI-DSS-Req-7.1 | 8258 | ··-·PCI-DSS-Req-7.1 |
| Offset 8265, 16 lines modified | Offset 8265, 16 lines modified | ||
| 8265 | ··-·no_reboot_needed | 8265 | ··-·no_reboot_needed |
| 8266 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8266 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8267 | ··file: | 8267 | ··file: |
| 8268 | ····path:·/boot/grub2/user.cfg | 8268 | ····path:·/boot/grub2/user.cfg |
| 8269 | ····group:·'0' | 8269 | ····group:·'0' |
| 8270 | ··when: | 8270 | ··when: |
| 8271 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8272 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8271 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8272 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8273 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8273 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8274 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8274 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8275 | ··tags: | 8275 | ··tags: |
| 8276 | ··-·CJIS-5.5.2.2 | 8276 | ··-·CJIS-5.5.2.2 |
| 8277 | ··-·NIST-800-171-3.4.5 | 8277 | ··-·NIST-800-171-3.4.5 |
| 8278 | ··-·NIST-800-53-AC-6(1) | 8278 | ··-·NIST-800-53-AC-6(1) |
| 8279 | ··-·NIST-800-53-CM-6(a) | 8279 | ··-·NIST-800-53-CM-6(a) |
| Offset 8286, 15 lines modified | Offset 8286, 15 lines modified | ||
| 8286 | ··-·medium_severity | 8286 | ··-·medium_severity |
| 8287 | ··-·no_reboot_needed | 8287 | ··-·no_reboot_needed |
| 8288 | Remediation_Shell_script_⇲ | 8288 | Remediation_Shell_script_⇲ |
| 8289 | Complexity:·low | 8289 | Complexity:·low |
| 8290 | Disruption:·low | 8290 | Disruption:·low |
| 8291 | Strategy:···configure | 8291 | Strategy:···configure |
| 8292 | #·Remediation·is·applicable·only·in·certain·platforms | 8292 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8293 | if· | 8293 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8294 | chgrp·0·/boot/grub2/user.cfg | 8294 | chgrp·0·/boot/grub2/user.cfg |
| 8295 | else | 8295 | else |
| 8296 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8296 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8297 | fi | 8297 | fi |
| 8298 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 8298 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 8325, 16 lines modified | Offset 8325, 16 lines modified | ||
| 8325 | ··-·no_reboot_needed | 8325 | ··-·no_reboot_needed |
| 8326 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8326 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8327 | ··stat: | 8327 | ··stat: |
| 8328 | ····path:·/boot/grub2/user.cfg | 8328 | ····path:·/boot/grub2/user.cfg |
| 8329 | ··register:·file_exists | 8329 | ··register:·file_exists |
| 8330 | ··when: | 8330 | ··when: |
| 8331 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8332 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8331 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8332 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8333 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8333 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8334 | ··tags: | 8334 | ··tags: |
| 8335 | ··-·CJIS-5.5.2.2 | 8335 | ··-·CJIS-5.5.2.2 |
| 8336 | ··-·NIST-800-171-3.4.5 | 8336 | ··-·NIST-800-171-3.4.5 |
| 8337 | ··-·NIST-800-53-AC-6(1) | 8337 | ··-·NIST-800-53-AC-6(1) |
| 8338 | ··-·NIST-800-53-CM-6(a) | 8338 | ··-·NIST-800-53-CM-6(a) |
| 8339 | ··-·PCI-DSS-Req-7.1 | 8339 | ··-·PCI-DSS-Req-7.1 |
| Offset 8346, 16 lines modified | Offset 8346, 16 lines modified | ||
| 8346 | ··-·no_reboot_needed | 8346 | ··-·no_reboot_needed |
| 8347 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 8347 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 8348 | ··file: | 8348 | ··file: |
| 8349 | ····path:·/boot/grub2/user.cfg | 8349 | ····path:·/boot/grub2/user.cfg |
| 8350 | ····owner:·'0' | 8350 | ····owner:·'0' |
| 8351 | ··when: | 8351 | ··when: |
| 8352 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8353 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8352 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8353 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8354 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8354 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8355 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8355 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8356 | ··tags: | 8356 | ··tags: |
| 8357 | ··-·CJIS-5.5.2.2 | 8357 | ··-·CJIS-5.5.2.2 |
| 8358 | ··-·NIST-800-171-3.4.5 | 8358 | ··-·NIST-800-171-3.4.5 |
| 8359 | ··-·NIST-800-53-AC-6(1) | 8359 | ··-·NIST-800-53-AC-6(1) |
| 8360 | ··-·NIST-800-53-CM-6(a) | 8360 | ··-·NIST-800-53-CM-6(a) |
| Offset 8367, 15 lines modified | Offset 8367, 15 lines modified | ||
| 8367 | ··-·medium_severity | 8367 | ··-·medium_severity |
| 8368 | ··-·no_reboot_needed | 8368 | ··-·no_reboot_needed |
| 8369 | Remediation_Shell_script_⇲ | 8369 | Remediation_Shell_script_⇲ |
| 8370 | Complexity:·low | 8370 | Complexity:·low |
| 8371 | Disruption:·low | 8371 | Disruption:·low |
| 8372 | Strategy:···configure | 8372 | Strategy:···configure |
| 8373 | #·Remediation·is·applicable·only·in·certain·platforms | 8373 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8374 | if· | 8374 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8375 | chown·0·/boot/grub2/user.cfg | 8375 | chown·0·/boot/grub2/user.cfg |
| 8376 | else | 8376 | else |
| 8377 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8377 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8378 | fi | 8378 | fi |
| 8379 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 8379 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 8404, 16 lines modified | Offset 8404, 16 lines modified | ||
| 8404 | ··-·no_reboot_needed | 8404 | ··-·no_reboot_needed |
| 8405 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8405 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8406 | ··stat: | 8406 | ··stat: |
| 8407 | ····path:·/boot/grub2/grub.cfg | 8407 | ····path:·/boot/grub2/grub.cfg |
| 8408 | ··register:·file_exists | 8408 | ··register:·file_exists |
| 8409 | ··when: | 8409 | ··when: |
| 8410 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8411 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8410 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8411 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8412 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8412 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8413 | ··tags: | 8413 | ··tags: |
| 8414 | ··-·NIST-800-171-3.4.5 | 8414 | ··-·NIST-800-171-3.4.5 |
| 8415 | ··-·NIST-800-53-AC-6(1) | 8415 | ··-·NIST-800-53-AC-6(1) |
| 8416 | ··-·NIST-800-53-CM-6(a) | 8416 | ··-·NIST-800-53-CM-6(a) |
| 8417 | ··-·configure_strategy | 8417 | ··-·configure_strategy |
| 8418 | ··-·file_permissions_efi_grub2_cfg | 8418 | ··-·file_permissions_efi_grub2_cfg |
| Offset 8423, 16 lines modified | Offset 8423, 16 lines modified | ||
| 8423 | ··-·no_reboot_needed | 8423 | ··-·no_reboot_needed |
| 8424 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 8424 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 8425 | ··file: | 8425 | ··file: |
| 8426 | ····path:·/boot/grub2/grub.cfg | 8426 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2977/7380 bytes (40.34%) of diff not shown. | |||
| Offset 186671, 21 lines modified | Offset 186671, 21 lines modified | ||
| 002d92e0:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 002d92e0:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 002d92f0:·6520·2f62·6f6f·742f·6772·7562·322f·7573··e·/boot/grub2/us | 002d92f0:·6520·2f62·6f6f·742f·6772·7562·322f·7573··e·/boot/grub2/us | ||
| 002d9300:·6572·2e63·6667·0a20·2073·7461·743a·0a20··er.cfg.··stat:.· | 002d9300:·6572·2e63·6667·0a20·2073·7461·743a·0a20··er.cfg.··stat:.· | ||
| 002d9310:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 002d9310:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 002d9320:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 002d9320:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 002d9330:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 002d9330:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 002d9340:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 002d9340:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 002d9350:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 002d9360:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002d9370:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002d9380:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002d93 | 002d9350:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 002d93 | 002d9360:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 002d93 | 002d9370:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | ||
| 002d9380:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 002d9390:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 002d93a0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 002d93b0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 002d93c0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 002d93c0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 002d93d0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 002d93d0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 002d93e0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 002d93e0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 002d93f0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 002d93f0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 002d9400:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 002d9400:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 002d9410:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | 002d9410:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | ||
| 002d9420:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | 002d9420:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | ||
| Offset 186707, 21 lines modified | Offset 186707, 21 lines modified | ||
| 002d9520:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | 002d9520:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | ||
| 002d9530:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | 002d9530:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | ||
| 002d9540:·6232·2f75·7365·722e·6366·670a·2020·6669··b2/user.cfg.··fi | 002d9540:·6232·2f75·7365·722e·6366·670a·2020·6669··b2/user.cfg.··fi | ||
| 002d9550:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | 002d9550:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | ||
| 002d9560:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | 002d9560:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | ||
| 002d9570:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | 002d9570:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | ||
| 002d9580:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 002d9580:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 002d9590:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 002d95a0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002d95b0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002d95c0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002d95 | 002d9590:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | ||
| 002d95 | 002d95a0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 002d95 | 002d95b0:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | ||
| 002d95c0:·626f·6f74·2f65·6669·2220·696e·2061·6e73··boot/efi"·in·ans | |||
| 002d95d0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002d95e0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002d95f0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002d9600:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 002d9600:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 002d9610:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 002d9610:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 002d9620:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 002d9620:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 002d9630:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 002d9630:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 002d9640:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 002d9640:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 002d9650:·696e·6572·225d·0a20·202d·2066·696c·655f··iner"].··-·file_ | 002d9650:·696e·6572·225d·0a20·202d·2066·696c·655f··iner"].··-·file_ | ||
| 002d9660:·6578·6973·7473·2e73·7461·7420·6973·2064··exists.stat·is·d | 002d9660:·6578·6973·7473·2e73·7461·7420·6973·2064··exists.stat·is·d | ||
| Offset 186772, 19 lines modified | Offset 186772, 19 lines modified | ||
| 002d9930:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | 002d9930:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 002d9940:·683e·3c74·643e·636f·6e66·6967·7572·653c··h><td>configure< | 002d9940:·683e·3c74·643e·636f·6e66·6967·7572·653c··h><td>configure< | ||
| 002d9950:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | 002d9950:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 002d9960:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | 002d9960:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 002d9970:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | 002d9970:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 002d9980:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | 002d9980:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 002d9990:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | 002d9990:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 002d99a0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 002d99a0:·730a·6966·205b·202d·6620·2f73·7973·2f66··s.if·[·-f·/sys/f | |||
| 002d99b0:·6972·6d77·6172·652f·6566·6920·5d20·2661··irmware/efi·]·&a | |||
| 002d99c0:·6d70·3b26·616d·703b·2072·706d·202d·2d71··mp;&·rpm·--q | |||
| 002d99 | 002d99b0:·202d·7120·6772·7562·322d·636f·6d6d·6f6e···-q·grub2-common | ||
| 002d99c0:·2026·616d·703b·2661·6d70·3b20·5b20·2d66···&&·[·-f | |||
| 002d99d0:·202f·7379·732f·6669·726d·7761·7265·2f65···/sys/firmware/e | |||
| 002d99e0:·6 | 002d99e0:·6669·205d·2026·616d·703b·2661·6d70·3b20··fi·]·&&· | ||
| 002d99f0:·7b20·5b20·2120·2d66·202f·2e64·6f63·6b65··{·[·!·-f·/.docke | 002d99f0:·7b20·5b20·2120·2d66·202f·2e64·6f63·6b65··{·[·!·-f·/.docke | ||
| 002d9a00:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | 002d9a00:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | ||
| 002d9a10:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | 002d9a10:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | ||
| 002d9a20:·6f6e·7461·696e·6572·656e·7620·5d3b·207d··ontainerenv·];·} | 002d9a20:·6f6e·7461·696e·6572·656e·7620·5d3b·207d··ontainerenv·];·} | ||
| 002d9a30:·3b20·7468·656e·0a0a·6368·6772·7020·3020··;·then..chgrp·0· | 002d9a30:·3b20·7468·656e·0a0a·6368·6772·7020·3020··;·then..chgrp·0· | ||
| 002d9a40:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 002d9a40:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 002d9a50:·2e63·6667·0a0a·656c·7365·0a20·2020·2026··.cfg..else.····& | 002d9a50:·2e63·6667·0a0a·656c·7365·0a20·2020·2026··.cfg..else.····& | ||
| Offset 187166, 22 lines modified | Offset 187166, 22 lines modified | ||
| 002db1d0:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | 002db1d0:·6d65·3a20·5465·7374·2066·6f72·2065·7869··me:·Test·for·exi | ||
| 002db1e0:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | 002db1e0:·7374·656e·6365·202f·626f·6f74·2f67·7275··stence·/boot/gru | ||
| 002db1f0:·6232·2f75·7365·722e·6366·670a·2020·7374··b2/user.cfg.··st | 002db1f0:·6232·2f75·7365·722e·6366·670a·2020·7374··b2/user.cfg.··st | ||
| 002db200:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | 002db200:·6174·3a0a·2020·2020·7061·7468·3a20·2f62··at:.····path:·/b | ||
| 002db210:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | 002db210:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | ||
| 002db220:·6667·0a20·2072·6567·6973·7465·723a·2066··fg.··register:·f | 002db220:·6667·0a20·2072·6567·6973·7465·723a·2066··fg.··register:·f | ||
| 002db230:·696c·655f·6578·6973·7473·0a20·2077·6865··ile_exists.··whe | 002db230:·696c·655f·6578·6973·7473·0a20·2077·6865··ile_exists.··whe | ||
| 002db240:·6e3a·0a20·202d·2027·22 | 002db240:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 002db250:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 002db260:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002db270:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002db280:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 002db2 | 002db250:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 002db2 | 002db260:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 002db270:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 002db280:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 002db290:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002db2a0:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002db2b0:·6 | 002db2b0:·6c69·7374·270a·2020·2d20·616e·7369·626c··list'.··-·ansibl | ||
| 002db2c0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 002db2c0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 002db2d0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 002db2d0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 002db2e0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 002db2e0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 002db2f0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 002db2f0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 002db300:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | 002db300:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 002db310:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | 002db310:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 002db320:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | 002db320:·2d35·2e35·2e32·2e32·0a20·202d·204e·4953··-5.5.2.2.··-·NIS | ||
| Offset 187201, 22 lines modified | Offset 187201, 22 lines modified | ||
| 002db400:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | 002db400:·6565·6465·640a·0a2d·206e·616d·653a·2045··eeded..-·name:·E | ||
| 002db410:·6e73·7572·6520·6f77·6e65·7220·3020·6f6e··nsure·owner·0·on | 002db410:·6e73·7572·6520·6f77·6e65·7220·3020·6f6e··nsure·owner·0·on | ||
| 002db420:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | 002db420:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | ||
| 002db430:·722e·6366·670a·2020·6669·6c65·3a0a·2020··r.cfg.··file:.·· | 002db430:·722e·6366·670a·2020·6669·6c65·3a0a·2020··r.cfg.··file:.·· | ||
| 002db440:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 002db440:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 002db450:·7562·322f·7573·6572·2e63·6667·0a20·2020··ub2/user.cfg.··· | 002db450:·7562·322f·7573·6572·2e63·6667·0a20·2020··ub2/user.cfg.··· | ||
| 002db460:·206f·776e·6572·3a20·2730·270a·2020·7768···owner:·'0'.··wh | 002db460:·206f·776e·6572·3a20·2730·270a·2020·7768···owner:·'0'.··wh | ||
| 002db470:·656e·3a0a·2020·2d20·2722· | 002db470:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 002db480:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 002db490:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002db4a0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002db4b0:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 002db4 | 002db480:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 002db4 | 002db490:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 002db4a0:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 002db4b0:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 002db4c0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002db4d0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002db4e0:· | 002db4e0:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 002db4f0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 002db4f0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 002db500:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 002db500:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 002db510:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 002db510:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 002db520:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 002db520:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 002db530:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 002db530:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 002db540:·0a20·202d·2066·696c·655f·6578·6973·7473··.··-·file_exists | 002db540:·0a20·202d·2066·696c·655f·6578·6973·7473··.··-·file_exists | ||
| Max diff block lines reached; 13168/22968 bytes (57.33%) of diff not shown. | |||
| Offset 41737, 16 lines modified | Offset 41737, 16 lines modified | ||
| 41737 | ··-·no_reboot_needed | 41737 | ··-·no_reboot_needed |
| 41738 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 41738 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 41739 | ··stat: | 41739 | ··stat: |
| 41740 | ····path:·/boot/grub2/user.cfg | 41740 | ····path:·/boot/grub2/user.cfg |
| 41741 | ··register:·file_exists | 41741 | ··register:·file_exists |
| 41742 | ··when: | 41742 | ··when: |
| 41743 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41744 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41743 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41744 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41745 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41745 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41746 | ··tags: | 41746 | ··tags: |
| 41747 | ··-·CJIS-5.5.2.2 | 41747 | ··-·CJIS-5.5.2.2 |
| 41748 | ··-·NIST-800-171-3.4.5 | 41748 | ··-·NIST-800-171-3.4.5 |
| 41749 | ··-·NIST-800-53-AC-6(1) | 41749 | ··-·NIST-800-53-AC-6(1) |
| 41750 | ··-·NIST-800-53-CM-6(a) | 41750 | ··-·NIST-800-53-CM-6(a) |
| 41751 | ··-·PCI-DSS-Req-7.1 | 41751 | ··-·PCI-DSS-Req-7.1 |
| Offset 41758, 16 lines modified | Offset 41758, 16 lines modified | ||
| 41758 | ··-·no_reboot_needed | 41758 | ··-·no_reboot_needed |
| 41759 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 41759 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 41760 | ··file: | 41760 | ··file: |
| 41761 | ····path:·/boot/grub2/user.cfg | 41761 | ····path:·/boot/grub2/user.cfg |
| 41762 | ····group:·'0' | 41762 | ····group:·'0' |
| 41763 | ··when: | 41763 | ··when: |
| 41764 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41765 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41764 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41765 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41767 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41767 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41768 | ··tags: | 41768 | ··tags: |
| 41769 | ··-·CJIS-5.5.2.2 | 41769 | ··-·CJIS-5.5.2.2 |
| 41770 | ··-·NIST-800-171-3.4.5 | 41770 | ··-·NIST-800-171-3.4.5 |
| 41771 | ··-·NIST-800-53-AC-6(1) | 41771 | ··-·NIST-800-53-AC-6(1) |
| 41772 | ··-·NIST-800-53-CM-6(a) | 41772 | ··-·NIST-800-53-CM-6(a) |
| Offset 41779, 15 lines modified | Offset 41779, 15 lines modified | ||
| 41779 | ··-·medium_severity | 41779 | ··-·medium_severity |
| 41780 | ··-·no_reboot_needed | 41780 | ··-·no_reboot_needed |
| 41781 | Remediation_Shell_script_⇲ | 41781 | Remediation_Shell_script_⇲ |
| 41782 | Complexity:·low | 41782 | Complexity:·low |
| 41783 | Disruption:·low | 41783 | Disruption:·low |
| 41784 | Strategy:···configure | 41784 | Strategy:···configure |
| 41785 | #·Remediation·is·applicable·only·in·certain·platforms | 41785 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41786 | if· | 41786 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41787 | chgrp·0·/boot/grub2/user.cfg | 41787 | chgrp·0·/boot/grub2/user.cfg |
| 41788 | else | 41788 | else |
| 41789 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41789 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41790 | fi | 41790 | fi |
| 41791 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 41791 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 41818, 16 lines modified | Offset 41818, 16 lines modified | ||
| 41818 | ··-·no_reboot_needed | 41818 | ··-·no_reboot_needed |
| 41819 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 41819 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 41820 | ··stat: | 41820 | ··stat: |
| 41821 | ····path:·/boot/grub2/user.cfg | 41821 | ····path:·/boot/grub2/user.cfg |
| 41822 | ··register:·file_exists | 41822 | ··register:·file_exists |
| 41823 | ··when: | 41823 | ··when: |
| 41824 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41825 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41824 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41825 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41826 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41826 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41827 | ··tags: | 41827 | ··tags: |
| 41828 | ··-·CJIS-5.5.2.2 | 41828 | ··-·CJIS-5.5.2.2 |
| 41829 | ··-·NIST-800-171-3.4.5 | 41829 | ··-·NIST-800-171-3.4.5 |
| 41830 | ··-·NIST-800-53-AC-6(1) | 41830 | ··-·NIST-800-53-AC-6(1) |
| 41831 | ··-·NIST-800-53-CM-6(a) | 41831 | ··-·NIST-800-53-CM-6(a) |
| 41832 | ··-·PCI-DSS-Req-7.1 | 41832 | ··-·PCI-DSS-Req-7.1 |
| Offset 41839, 16 lines modified | Offset 41839, 16 lines modified | ||
| 41839 | ··-·no_reboot_needed | 41839 | ··-·no_reboot_needed |
| 41840 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 41840 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 41841 | ··file: | 41841 | ··file: |
| 41842 | ····path:·/boot/grub2/user.cfg | 41842 | ····path:·/boot/grub2/user.cfg |
| 41843 | ····owner:·'0' | 41843 | ····owner:·'0' |
| 41844 | ··when: | 41844 | ··when: |
| 41845 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41846 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41845 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41846 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41847 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41847 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41848 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 41848 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 41849 | ··tags: | 41849 | ··tags: |
| 41850 | ··-·CJIS-5.5.2.2 | 41850 | ··-·CJIS-5.5.2.2 |
| 41851 | ··-·NIST-800-171-3.4.5 | 41851 | ··-·NIST-800-171-3.4.5 |
| 41852 | ··-·NIST-800-53-AC-6(1) | 41852 | ··-·NIST-800-53-AC-6(1) |
| 41853 | ··-·NIST-800-53-CM-6(a) | 41853 | ··-·NIST-800-53-CM-6(a) |
| Offset 41860, 15 lines modified | Offset 41860, 15 lines modified | ||
| 41860 | ··-·medium_severity | 41860 | ··-·medium_severity |
| 41861 | ··-·no_reboot_needed | 41861 | ··-·no_reboot_needed |
| 41862 | Remediation_Shell_script_⇲ | 41862 | Remediation_Shell_script_⇲ |
| 41863 | Complexity:·low | 41863 | Complexity:·low |
| 41864 | Disruption:·low | 41864 | Disruption:·low |
| 41865 | Strategy:···configure | 41865 | Strategy:···configure |
| 41866 | #·Remediation·is·applicable·only·in·certain·platforms | 41866 | #·Remediation·is·applicable·only·in·certain·platforms |
| 41867 | if· | 41867 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 41868 | chown·0·/boot/grub2/user.cfg | 41868 | chown·0·/boot/grub2/user.cfg |
| 41869 | else | 41869 | else |
| 41870 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 41870 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 41871 | fi | 41871 | fi |
| 41872 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 41872 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 41897, 16 lines modified | Offset 41897, 16 lines modified | ||
| 41897 | ··-·no_reboot_needed | 41897 | ··-·no_reboot_needed |
| 41898 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 41898 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 41899 | ··stat: | 41899 | ··stat: |
| 41900 | ····path:·/boot/grub2/grub.cfg | 41900 | ····path:·/boot/grub2/grub.cfg |
| 41901 | ··register:·file_exists | 41901 | ··register:·file_exists |
| 41902 | ··when: | 41902 | ··when: |
| 41903 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41904 | ··-·'"grub2-common"·in·ansible_facts.packages' | 41903 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 41904 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 41905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 41905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 41906 | ··tags: | 41906 | ··tags: |
| 41907 | ··-·NIST-800-171-3.4.5 | 41907 | ··-·NIST-800-171-3.4.5 |
| 41908 | ··-·NIST-800-53-AC-6(1) | 41908 | ··-·NIST-800-53-AC-6(1) |
| 41909 | ··-·NIST-800-53-CM-6(a) | 41909 | ··-·NIST-800-53-CM-6(a) |
| 41910 | ··-·configure_strategy | 41910 | ··-·configure_strategy |
| 41911 | ··-·file_permissions_efi_grub2_cfg | 41911 | ··-·file_permissions_efi_grub2_cfg |
| Offset 41916, 16 lines modified | Offset 41916, 16 lines modified | ||
| 41916 | ··-·no_reboot_needed | 41916 | ··-·no_reboot_needed |
| 41917 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 41917 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 41918 | ··file: | 41918 | ··file: |
| 41919 | ····path:·/boot/grub2/grub.cfg | 41919 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2985/7404 bytes (40.32%) of diff not shown. | |||
| Offset 416870, 22 lines modified | Offset 416870, 22 lines modified | ||
| 0065c650:·6374·696f·6e73·5c73·2a3d·5c73·2a0a·2020··ctions\s*=\s*.·· | 0065c650:·6374·696f·6e73·5c73·2a3d·5c73·2a0a·2020··ctions\s*=\s*.·· | ||
| 0065c660:·2020·2020·6c69·6e65·3a20·736d·7470·645f······line:·smtpd_ | 0065c660:·2020·2020·6c69·6e65·3a20·736d·7470·645f······line:·smtpd_ | ||
| 0065c670:·636c·6965·6e74·5f72·6573·7472·6963·7469··client_restricti | 0065c670:·636c·6965·6e74·5f72·6573·7472·6963·7469··client_restricti | ||
| 0065c680:·6f6e·7320·3d20·7065·726d·6974·5f6d·796e··ons·=·permit_myn | 0065c680:·6f6e·7320·3d20·7065·726d·6974·5f6d·796e··ons·=·permit_myn | ||
| 0065c690:·6574·776f·726b·732c·7265·6a65·6374·0a20··etworks,reject.· | 0065c690:·6574·776f·726b·732c·7265·6a65·6374·0a20··etworks,reject.· | ||
| 0065c6a0:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 0065c6a0:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 0065c6b0:·656e·740a·2020·7768·656e·3a0a·2020·2d20··ent.··when:.··-· | 0065c6b0:·656e·740a·2020·7768·656e·3a0a·2020·2d20··ent.··when:.··-· | ||
| 0065c6c0:·2722·706f·7374·6669·7822·2069·6e20·616e··'"postfix"·in·an | |||
| 0065c6d0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0065c6e0:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 0065c6f0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0065c700:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0065c710:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0065c720:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0065c | 0065c6c0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 0065c6d0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0065c6e0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0065c6f0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0065c700:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0065c710:·6e65·7222·5d0a·2020·2d20·2722·706f·7374··ner"].··-·'"post | |||
| 0065c720:·6669·7822·2069·6e20·616e·7369·626c·655f··fix"·in·ansible_ | |||
| 0065c730:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0065c740:·2020·7461·6773·3a0a·2020·2d20·6c6f·775f····tags:.··-·low_ | 0065c740:·2020·7461·6773·3a0a·2020·2d20·6c6f·775f····tags:.··-·low_ | ||
| 0065c750:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | 0065c750:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | ||
| 0065c760:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | 0065c760:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | ||
| 0065c770:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | 0065c770:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | ||
| 0065c780:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | 0065c780:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | ||
| 0065c790:·6e65·6564·6564·0a20·202d·2070·6f73·7466··needed.··-·postf | 0065c790:·6e65·6564·6564·0a20·202d·2070·6f73·7466··needed.··-·postf | ||
| 0065c7a0:·6978·5f70·7265·7665·6e74·5f75·6e72·6573··ix_prevent_unres | 0065c7a0:·6978·5f70·7265·7665·6e74·5f75·6e72·6573··ix_prevent_unres | ||
| Offset 416908, 20 lines modified | Offset 416908, 20 lines modified | ||
| 0065c8b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | 0065c8b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0065c8c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | 0065c8c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0065c8d0:·6964·3d22·6964·6d36·3632·3934·223e·3c70··id="idm66294"><p | 0065c8d0:·6964·3d22·6964·6d36·3632·3934·223e·3c70··id="idm66294"><p | ||
| 0065c8e0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | 0065c8e0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0065c8f0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | 0065c8f0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0065c900:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | 0065c900:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0065c910:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | 0065c910:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0065c920:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0065c930:·2070·6f73·7466·6978·2026·616d·703b·2661···postfix·&&a | |||
| 0065c9 | 0065c920:·6620·5b20·2120·2d66·202f·2e64·6f63·6b65··f·[·!·-f·/.docke | ||
| 0065c9 | 0065c930:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | ||
| 0065c9 | 0065c940:·3b20·5b20·2120·2d66·202f·7275·6e2f·2e63··;·[·!·-f·/run/.c | ||
| 0065c9 | 0065c950:·6f6e·7461·696e·6572·656e·7620·5d20·2661··ontainerenv·]·&a | ||
| 0065c960:·6d70·3b26·616d·703b·2072·706d·202d·2d71··mp;&·rpm·--q | |||
| 0065c970:·7569·6574·202d·7120·706f·7374·6669·783b··uiet·-q·postfix; | |||
| 0065c980:·2074·6865·6e0a·0a69·6620·2120·6772·6570···then..if·!·grep | 0065c980:·2074·6865·6e0a·0a69·6620·2120·6772·6570···then..if·!·grep | ||
| 0065c990:·202d·7120·5e73·6d74·7064·5f63·6c69·656e···-q·^smtpd_clien | 0065c990:·202d·7120·5e73·6d74·7064·5f63·6c69·656e···-q·^smtpd_clien | ||
| 0065c9a0:·745f·7265·7374·7269·6374·696f·6e73·202f··t_restrictions·/ | 0065c9a0:·745f·7265·7374·7269·6374·696f·6e73·202f··t_restrictions·/ | ||
| 0065c9b0:·6574·632f·706f·7374·6669·782f·6d61·696e··etc/postfix/main | 0065c9b0:·6574·632f·706f·7374·6669·782f·6d61·696e··etc/postfix/main | ||
| 0065c9c0:·2e63·663b·2074·6865·6e0a·0965·6368·6f20··.cf;·then..echo· | 0065c9c0:·2e63·663b·2074·6865·6e0a·0965·6368·6f20··.cf;·then..echo· | ||
| 0065c9d0:·2273·6d74·7064·5f63·6c69·656e·745f·7265··"smtpd_client_re | 0065c9d0:·2273·6d74·7064·5f63·6c69·656e·745f·7265··"smtpd_client_re | ||
| 0065c9e0:·7374·7269·6374·696f·6e73·203d·2070·6572··strictions·=·per | 0065c9e0:·7374·7269·6374·696f·6e73·203d·2070·6572··strictions·=·per |
| Offset 88767, 26 lines modified | Offset 88767, 26 lines modified | ||
| 88767 | ····lineinfile: | 88767 | ····lineinfile: |
| 88768 | ······path:·/etc/postfix/main.cf | 88768 | ······path:·/etc/postfix/main.cf |
| 88769 | ······create:·true | 88769 | ······create:·true |
| 88770 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 88770 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 88771 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 88771 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 88772 | ······state:·present | 88772 | ······state:·present |
| 88773 | ··when: | 88773 | ··when: |
| 88774 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 88775 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 88774 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 88775 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 88776 | ··tags: | 88776 | ··tags: |
| 88777 | ··-·low_complexity | 88777 | ··-·low_complexity |
| 88778 | ··-·low_disruption | 88778 | ··-·low_disruption |
| 88779 | ··-·medium_severity | 88779 | ··-·medium_severity |
| 88780 | ··-·no_reboot_needed | 88780 | ··-·no_reboot_needed |
| 88781 | ··-·postfix_prevent_unrestricted_relay | 88781 | ··-·postfix_prevent_unrestricted_relay |
| 88782 | ··-·restrict_strategy | 88782 | ··-·restrict_strategy |
| 88783 | Remediation_Shell_script_⇲ | 88783 | Remediation_Shell_script_⇲ |
| 88784 | #·Remediation·is·applicable·only·in·certain·platforms | 88784 | #·Remediation·is·applicable·only·in·certain·platforms |
| 88785 | if· | 88785 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 88786 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 88786 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 88787 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 88787 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 88788 | else | 88788 | else |
| 88789 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 88789 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 88790 | fi | 88790 | fi |
| Offset 416544, 23 lines modified | Offset 416544, 23 lines modified | ||
| 0065b1f0:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | 0065b1f0:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | ||
| 0065b200:·7469·6f6e·735c·732a·3d5c·732a·0a20·2020··tions\s*=\s*.··· | 0065b200:·7469·6f6e·735c·732a·3d5c·732a·0a20·2020··tions\s*=\s*.··· | ||
| 0065b210:·2020·206c·696e·653a·2073·6d74·7064·5f63·····line:·smtpd_c | 0065b210:·2020·206c·696e·653a·2073·6d74·7064·5f63·····line:·smtpd_c | ||
| 0065b220:·6c69·656e·745f·7265·7374·7269·6374·696f··lient_restrictio | 0065b220:·6c69·656e·745f·7265·7374·7269·6374·696f··lient_restrictio | ||
| 0065b230:·6e73·203d·2070·6572·6d69·745f·6d79·6e65··ns·=·permit_myne | 0065b230:·6e73·203d·2070·6572·6d69·745f·6d79·6e65··ns·=·permit_myne | ||
| 0065b240:·7477·6f72·6b73·2c72·656a·6563·740a·2020··tworks,reject.·· | 0065b240:·7477·6f72·6b73·2c72·656a·6563·740a·2020··tworks,reject.·· | ||
| 0065b250:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | 0065b250:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | ||
| 0065b260:·6e74·0a20·2077·6865·6e3a·0a20·202d·20 | 0065b260:·6e74·0a20·2077·6865·6e3a·0a20·202d·2061··nt.··when:.··-·a | ||
| 0065b270:·2270·6f73·7466·6978·2220·696e·2061·6e73··"postfix"·in·ans | |||
| 0065b280:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0065b290:·6765·7327·0a20·202d·2061·6e73·6962·6c65··ges'.··-·ansible | |||
| 0065b2a0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0065b2b0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0065b2c0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0065b2d0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0065b2 | 0065b270:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 0065b280:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0065b290:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0065b2a0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0065b2b0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0065b2c0:·6572·225d·0a20·202d·2027·2270·6f73·7466··er"].··-·'"postf | |||
| 0065b2d0:·6978·2220·696e·2061·6e73·6962·6c65·5f66··ix"·in·ansible_f | |||
| 0065b2e0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0065b2f0:·2074·6167·733a·0a20·202d·206c·6f77·5f63···tags:.··-·low_c | 0065b2f0:·2074·6167·733a·0a20·202d·206c·6f77·5f63···tags:.··-·low_c | ||
| 0065b300:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | 0065b300:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | ||
| 0065b310:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | 0065b310:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | ||
| 0065b320:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | 0065b320:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | ||
| 0065b330:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | 0065b330:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0065b340:·6565·6465·640a·2020·2d20·706f·7374·6669··eeded.··-·postfi | 0065b340:·6565·6465·640a·2020·2d20·706f·7374·6669··eeded.··-·postfi | ||
| 0065b350:·785f·7072·6576·656e·745f·756e·7265·7374··x_prevent_unrest | 0065b350:·785f·7072·6576·656e·745f·756e·7265·7374··x_prevent_unrest | ||
| Offset 416583, 20 lines modified | Offset 416583, 20 lines modified | ||
| 0065b460:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | 0065b460:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0065b470:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | 0065b470:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0065b480:·643d·2269·646d·3636·3239·3422·3e3c·7072··d="idm66294"><pr | 0065b480:·643d·2269·646d·3636·3239·3422·3e3c·7072··d="idm66294"><pr | ||
| 0065b490:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 0065b490:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0065b4a0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 0065b4a0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0065b4b0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 0065b4b0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0065b4c0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 0065b4c0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0065b4d0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0065b4e0:·706f·7374·6669·7820·2661·6d70·3b26·616d··postfix·&&am | |||
| 0065b4 | 0065b4d0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| 0065b | 0065b4e0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | ||
| 0065b | 0065b4f0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | ||
| 0065b5 | 0065b500:·6e74·6169·6e65·7265·6e76·205d·2026·616d··ntainerenv·]·&am | ||
| 0065b510:·703b·2661·6d70·3b20·7270·6d20·2d2d·7175··p;&·rpm·--qu | |||
| 0065b520:·6965·7420·2d71·2070·6f73·7466·6978·3b20··iet·-q·postfix;· | |||
| 0065b530:·7468·656e·0a0a·6966·2021·2067·7265·7020··then..if·!·grep· | 0065b530:·7468·656e·0a0a·6966·2021·2067·7265·7020··then..if·!·grep· | ||
| 0065b540:·2d71·205e·736d·7470·645f·636c·6965·6e74··-q·^smtpd_client | 0065b540:·2d71·205e·736d·7470·645f·636c·6965·6e74··-q·^smtpd_client | ||
| 0065b550:·5f72·6573·7472·6963·7469·6f6e·7320·2f65··_restrictions·/e | 0065b550:·5f72·6573·7472·6963·7469·6f6e·7320·2f65··_restrictions·/e | ||
| 0065b560:·7463·2f70·6f73·7466·6978·2f6d·6169·6e2e··tc/postfix/main. | 0065b560:·7463·2f70·6f73·7466·6978·2f6d·6169·6e2e··tc/postfix/main. | ||
| 0065b570:·6366·3b20·7468·656e·0a09·6563·686f·2022··cf;·then..echo·" | 0065b570:·6366·3b20·7468·656e·0a09·6563·686f·2022··cf;·then..echo·" | ||
| 0065b580:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | 0065b580:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | ||
| 0065b590:·7472·6963·7469·6f6e·7320·3d20·7065·726d··trictions·=·perm | 0065b590:·7472·6963·7469·6f6e·7320·3d20·7065·726d··trictions·=·perm |
| Offset 88694, 26 lines modified | Offset 88694, 26 lines modified | ||
| 88694 | ····lineinfile: | 88694 | ····lineinfile: |
| 88695 | ······path:·/etc/postfix/main.cf | 88695 | ······path:·/etc/postfix/main.cf |
| 88696 | ······create:·true | 88696 | ······create:·true |
| 88697 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 88697 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 88698 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 88698 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 88699 | ······state:·present | 88699 | ······state:·present |
| 88700 | ··when: | 88700 | ··when: |
| 88701 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 88702 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 88701 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 88702 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 88703 | ··tags: | 88703 | ··tags: |
| 88704 | ··-·low_complexity | 88704 | ··-·low_complexity |
| 88705 | ··-·low_disruption | 88705 | ··-·low_disruption |
| 88706 | ··-·medium_severity | 88706 | ··-·medium_severity |
| 88707 | ··-·no_reboot_needed | 88707 | ··-·no_reboot_needed |
| 88708 | ··-·postfix_prevent_unrestricted_relay | 88708 | ··-·postfix_prevent_unrestricted_relay |
| 88709 | ··-·restrict_strategy | 88709 | ··-·restrict_strategy |
| 88710 | Remediation_Shell_script_⇲ | 88710 | Remediation_Shell_script_⇲ |
| 88711 | #·Remediation·is·applicable·only·in·certain·platforms | 88711 | #·Remediation·is·applicable·only·in·certain·platforms |
| 88712 | if· | 88712 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 88713 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 88713 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 88714 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 88714 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 88715 | else | 88715 | else |
| 88716 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 88716 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 88717 | fi | 88717 | fi |
| Offset 54073, 23 lines modified | Offset 54073, 23 lines modified | ||
| 000d3380:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | 000d3380:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | ||
| 000d3390:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | 000d3390:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 000d33a0:·790a·0a2d·206e·616d·653a·2053·6574·2061··y..-·name:·Set·a | 000d33a0:·790a·0a2d·206e·616d·653a·2053·6574·2061··y..-·name:·Set·a | ||
| 000d33b0:·7263·6869·7465·6374·7572·6520·666f·7220··rchitecture·for· | 000d33b0:·7263·6869·7465·6374·7572·6520·666f·7220··rchitecture·for· | ||
| 000d33c0:·6175·6469·7420·6368·6d6f·6420·7461·736b··audit·chmod·task | 000d33c0:·6175·6469·7420·6368·6d6f·6420·7461·736b··audit·chmod·task | ||
| 000d33d0:·730a·2020·7365·745f·6661·6374·3a0a·2020··s.··set_fact:.·· | 000d33d0:·730a·2020·7365·745f·6661·6374·3a0a·2020··s.··set_fact:.·· | ||
| 000d33e0:·2020·6175·6469·745f·6172·6368·3a20·6236····audit_arch:·b6 | 000d33e0:·2020·6175·6469·745f·6172·6368·3a20·6236····audit_arch:·b6 | ||
| 000d33f0:·340a·2020·7768·656e·3a0a·2020·2d20· | 000d33f0:·340a·2020·7768·656e·3a0a·2020·2d20·2722··4.··when:.··-·'" | ||
| 000d3400:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000d3410:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000d3420:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000d3430:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000d3440:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000d3450:·7222·5d0a·2020·2d20·2722·6175·6469·7422··r"].··-·'"audit" | |||
| 000d3460:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000d34 | 000d3400:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | ||
| 000d3410:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 000d3420:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | |||
| 000d3430:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000d3440:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000d3450:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000d3460:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000d3470:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000d3480:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | 000d3480:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | ||
| 000d3490:·7475·7265·203d·3d20·2261·6172·6368·3634··ture·==·"aarch64 | 000d3490:·7475·7265·203d·3d20·2261·6172·6368·3634··ture·==·"aarch64 | ||
| 000d34a0:·2220·6f72·2061·6e73·6962·6c65·5f61·7263··"·or·ansible_arc | 000d34a0:·2220·6f72·2061·6e73·6962·6c65·5f61·7263··"·or·ansible_arc | ||
| 000d34b0:·6869·7465·6374·7572·6520·3d3d·2022·7070··hitecture·==·"pp | 000d34b0:·6869·7465·6374·7572·6520·3d3d·2022·7070··hitecture·==·"pp | ||
| 000d34c0:·6336·3422·206f·7220·616e·7369·626c·655f··c64"·or·ansible_ | 000d34c0:·6336·3422·206f·7220·616e·7369·626c·655f··c64"·or·ansible_ | ||
| 000d34d0:·6172·6368·6974·6563·7475·7265·0a20·2020··architecture.··· | 000d34d0:·6172·6368·6974·6563·7475·7265·0a20·2020··architecture.··· | ||
| 000d34e0:·203d·3d20·2270·7063·3634·6c65·2220·6f72···==·"ppc64le"·or | 000d34e0:·203d·3d20·2270·7063·3634·6c65·2220·6f72···==·"ppc64le"·or | ||
| Offset 54395, 23 lines modified | Offset 54395, 23 lines modified | ||
| 000d47a0:·726d·5f6d·6f64·0a20·2020·2020·2063·7265··rm_mod.······cre | 000d47a0:·726d·5f6d·6f64·0a20·2020·2020·2063·7265··rm_mod.······cre | ||
| 000d47b0:·6174·653a·2074·7275·650a·2020·2020·2020··ate:·true.······ | 000d47b0:·6174·653a·2074·7275·650a·2020·2020·2020··ate:·true.······ | ||
| 000d47c0:·6d6f·6465·3a20·6f2d·7277·780a·2020·2020··mode:·o-rwx.···· | 000d47c0:·6d6f·6465·3a20·6f2d·7277·780a·2020·2020··mode:·o-rwx.···· | ||
| 000d47d0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | 000d47d0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | ||
| 000d47e0:·0a20·2020·2077·6865·6e3a·2073·7973·6361··.····when:·sysca | 000d47e0:·0a20·2020·2077·6865·6e3a·2073·7973·6361··.····when:·sysca | ||
| 000d47f0:·6c6c·735f·666f·756e·6420·7c20·6c65·6e67··lls_found·|·leng | 000d47f0:·6c6c·735f·666f·756e·6420·7c20·6c65·6e67··lls_found·|·leng | ||
| 000d4800:·7468·203d·3d20·300a·2020·7768·656e·3a0a··th·==·0.··when:. | 000d4800:·7468·203d·3d20·300a·2020·7768·656e·3a0a··th·==·0.··when:. | ||
| 000d4810:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 000d4820:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000d4830:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000d4840:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 000d4850:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 000d4860:·6e74·6169·6e65·7222·5d0a·2020·2d20·2722··ntainer"].··-·'" | |||
| 000d4870:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | |||
| 000d48 | 000d4810:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | ||
| 000d4820:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 000d4830:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 000d4840:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000d4850:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000d4860:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000d4870:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000d4880:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 000d4890:· | 000d4890:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | ||
| 000d48a0:·4953·2d35·2e34·2e31·2e31·0a20·202d·204e··IS-5.4.1.1.··-·N | 000d48a0:·4953·2d35·2e34·2e31·2e31·0a20·202d·204e··IS-5.4.1.1.··-·N | ||
| 000d48b0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 000d48b0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 000d48c0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 000d48c0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 000d48d0:·332d·4155·2d31·3228·6329·0a20·202d·204e··3-AU-12(c).··-·N | 000d48d0:·332d·4155·2d31·3228·6329·0a20·202d·204e··3-AU-12(c).··-·N | ||
| 000d48e0:·4953·542d·3830·302d·3533·2d41·552d·3228··IST-800-53-AU-2( | 000d48e0:·4953·542d·3830·302d·3533·2d41·552d·3228··IST-800-53-AU-2( | ||
| 000d48f0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | 000d48f0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 000d4900:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | 000d4900:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | ||
| Offset 54705, 22 lines modified | Offset 54705, 22 lines modified | ||
| 000d5b00:·6d6f·640a·2020·2020·2020·6372·6561·7465··mod.······create | 000d5b00:·6d6f·640a·2020·2020·2020·6372·6561·7465··mod.······create | ||
| 000d5b10:·3a20·7472·7565·0a20·2020·2020·206d·6f64··:·true.······mod | 000d5b10:·3a20·7472·7565·0a20·2020·2020·206d·6f64··:·true.······mod | ||
| 000d5b20:·653a·206f·2d72·7778·0a20·2020·2020·2073··e:·o-rwx.······s | 000d5b20:·653a·206f·2d72·7778·0a20·2020·2020·2073··e:·o-rwx.······s | ||
| 000d5b30:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | 000d5b30:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | ||
| 000d5b40:·2020·7768·656e·3a20·7379·7363·616c·6c73····when:·syscalls | 000d5b40:·2020·7768·656e·3a20·7379·7363·616c·6c73····when:·syscalls | ||
| 000d5b50:·5f66·6f75·6e64·207c·206c·656e·6774·6820··_found·|·length· | 000d5b50:·5f66·6f75·6e64·207c·206c·656e·6774·6820··_found·|·length· | ||
| 000d5b60:·3d3d·2030·0a20·2077·6865·6e3a·0a20·202d··==·0.··when:.··- | 000d5b60:·3d3d·2030·0a20·2077·6865·6e3a·0a20·202d··==·0.··when:.··- | ||
| 000d5b70:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000d5b80:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000d5b90:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000d5ba0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000d5bb0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000d5bc0:·696e·6572·225d·0a20·202d·2027·2261·7564··iner"].··-·'"aud | |||
| 000d5bd0:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | |||
| 000d5b | 000d5b70:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | ||
| 000d5b80:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 000d5b90:·6765·7327·0a20·202d·2061·6e73·6962·6c65··ges'.··-·ansible | |||
| 000d5ba0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000d5bb0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000d5bc0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000d5bd0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000d5be0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 000d5bf0:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | 000d5bf0:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | ||
| 000d5c00:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | 000d5c00:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | ||
| 000d5c10:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | 000d5c10:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | ||
| 000d5c20:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | 000d5c20:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 000d5c30:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | 000d5c30:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | ||
| 000d5c40:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | 000d5c40:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | ||
| 000d5c50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | 000d5c50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| Offset 54753, 20 lines modified | Offset 54753, 20 lines modified | ||
| 000d5e00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 000d5e00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 000d5e10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 000d5e10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 000d5e20:·3d22·6964·6d31·3632·3838·223e·3c70·7265··="idm16288"><pre | 000d5e20:·3d22·6964·6d31·3632·3838·223e·3c70·7265··="idm16288"><pre | ||
| 000d5e30:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 000d5e30:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 000d5e40:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 000d5e40:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 000d5e50:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 000d5e50:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 000d5e60:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 000d5e60:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 000d5e70:·7270·6d20·2d2d·7175·6965·7420·2d71·2061··rpm·--quiet·-q·a | |||
| 000d5e80:·7564·6974·2026·616d·703b·2661·6d70·3b20··udit·&&· | |||
| 000d5e | 000d5e90:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 000d5e | 000d5ea0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 000d5e | 000d5eb0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 000d5e | 000d5ec0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | ||
| 000d5eb0:·3b26·616d·703b·2072·706d·202d·2d71·7569··;&·rpm·--qui | |||
| 000d5ec0:·6574·202d·7120·6175·6469·743b·2074·6865··et·-q·audit;·the | |||
| 000d5ed0:·6e0a·0a23·2046·6972·7374·2070·6572·666f··n..#·First·perfo | 000d5ed0:·6e0a·0a23·2046·6972·7374·2070·6572·666f··n..#·First·perfo | ||
| 000d5ee0:·726d·2074·6865·2072·656d·6564·6961·7469··rm·the·remediati | 000d5ee0:·726d·2074·6865·2072·656d·6564·6961·7469··rm·the·remediati | ||
| 000d5ef0:·6f6e·206f·6620·7468·6520·7379·7363·616c··on·of·the·syscal | 000d5ef0:·6f6e·206f·6620·7468·6520·7379·7363·616c··on·of·the·syscal | ||
| 000d5f00:·6c20·7275·6c65·0a23·2052·6574·7269·6576··l·rule.#·Retriev | 000d5f00:·6c20·7275·6c65·0a23·2052·6574·7269·6576··l·rule.#·Retriev | ||
| 000d5f10:·6520·6861·7264·7761·7265·2061·7263·6869··e·hardware·archi | 000d5f10:·6520·6861·7264·7761·7265·2061·7263·6869··e·hardware·archi | ||
| 000d5f20:·7465·6374·7572·6520·6f66·2074·6865·2075··tecture·of·the·u | 000d5f20:·7465·6374·7572·6520·6f66·2074·6865·2075··tecture·of·the·u | ||
| 000d5f30:·6e64·6572·6c79·696e·6720·7379·7374·656d··nderlying·system | 000d5f30:·6e64·6572·6c79·696e·6720·7379·7374·656d··nderlying·system | ||
| Offset 56550, 23 lines modified | Offset 56550, 23 lines modified | ||
| 000dce50:·7175·6972·6564·0a20·202d·2072·6573·7472··quired.··-·restr | 000dce50:·7175·6972·6564·0a20·202d·2072·6573·7472··quired.··-·restr | ||
| 000dce60:·6963·745f·7374·7261·7465·6779·0a0a·2d20··ict_strategy..-· | 000dce60:·6963·745f·7374·7261·7465·6779·0a0a·2d20··ict_strategy..-· | ||
| 000dce70:·6e61·6d65·3a20·5365·7420·6172·6368·6974··name:·Set·archit | 000dce70:·6e61·6d65·3a20·5365·7420·6172·6368·6974··name:·Set·archit | ||
| 000dce80:·6563·7475·7265·2066·6f72·2061·7564·6974··ecture·for·audit | 000dce80:·6563·7475·7265·2066·6f72·2061·7564·6974··ecture·for·audit | ||
| 000dce90:·2063·686f·776e·2074·6173·6b73·0a20·2073···chown·tasks.··s | 000dce90:·2063·686f·776e·2074·6173·6b73·0a20·2073···chown·tasks.··s | ||
| 000dcea0:·6574·5f66·6163·743a·0a20·2020·2061·7564··et_fact:.····aud | 000dcea0:·6574·5f66·6163·743a·0a20·2020·2061·7564··et_fact:.····aud | ||
| 000dceb0:·6974·5f61·7263·683a·2062·3634·0a20·2077··it_arch:·b64.··w | 000dceb0:·6974·5f61·7263·683a·2062·3634·0a20·2077··it_arch:·b64.··w | ||
| 000dcec0:·6865·6e3a·0a20·202d·20 | 000dcec0:·6865·6e3a·0a20·202d·2027·2261·7564·6974··hen:.··-·'"audit | ||
| 000dced0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000dcee0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000dcef0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000dcf00:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| Max diff block lines reached; 930910/941114 bytes (98.92%) of diff not shown. | |||
| Offset 7722, 16 lines modified | Offset 7722, 16 lines modified | ||
| 7722 | ··-·reboot_required | 7722 | ··-·reboot_required |
| 7723 | ··-·restrict_strategy | 7723 | ··-·restrict_strategy |
| 7724 | -·name:·Set·architecture·for·audit·chmod·tasks | 7724 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 7725 | ··set_fact: | 7725 | ··set_fact: |
| 7726 | ····audit_arch:·b64 | 7726 | ····audit_arch:·b64 |
| 7727 | ··when: | 7727 | ··when: |
| 7728 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7729 | ··-·'"audit"·in·ansible_facts.packages' | 7728 | ··-·'"audit"·in·ansible_facts.packages' |
| 7729 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7730 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 7730 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 7731 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 7731 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 7732 | ··tags: | 7732 | ··tags: |
| 7733 | ··-·CJIS-5.4.1.1 | 7733 | ··-·CJIS-5.4.1.1 |
| 7734 | ··-·NIST-800-171-3.1.7 | 7734 | ··-·NIST-800-171-3.1.7 |
| 7735 | ··-·NIST-800-53-AU-12(c) | 7735 | ··-·NIST-800-53-AU-12(c) |
| 7736 | ··-·NIST-800-53-AU-2(d) | 7736 | ··-·NIST-800-53-AU-2(d) |
| Offset 7867, 16 lines modified | Offset 7867, 16 lines modified | ||
| 7867 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7867 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7868 | ········-F·auid!=unset·-F·key=perm_mod | 7868 | ········-F·auid!=unset·-F·key=perm_mod |
| 7869 | ······create:·true | 7869 | ······create:·true |
| 7870 | ······mode:·o-rwx | 7870 | ······mode:·o-rwx |
| 7871 | ······state:·present | 7871 | ······state:·present |
| 7872 | ····when:·syscalls_found·|·length·==·0 | 7872 | ····when:·syscalls_found·|·length·==·0 |
| 7873 | ··when: | 7873 | ··when: |
| 7874 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7875 | ··-·'"audit"·in·ansible_facts.packages' | 7874 | ··-·'"audit"·in·ansible_facts.packages' |
| 7875 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7876 | ··tags: | 7876 | ··tags: |
| 7877 | ··-·CJIS-5.4.1.1 | 7877 | ··-·CJIS-5.4.1.1 |
| 7878 | ··-·NIST-800-171-3.1.7 | 7878 | ··-·NIST-800-171-3.1.7 |
| 7879 | ··-·NIST-800-53-AU-12(c) | 7879 | ··-·NIST-800-53-AU-12(c) |
| 7880 | ··-·NIST-800-53-AU-2(d) | 7880 | ··-·NIST-800-53-AU-2(d) |
| 7881 | ··-·NIST-800-53-CM-6(a) | 7881 | ··-·NIST-800-53-CM-6(a) |
| 7882 | ··-·PCI-DSS-Req-10.5.5 | 7882 | ··-·PCI-DSS-Req-10.5.5 |
| Offset 8010, 16 lines modified | Offset 8010, 16 lines modified | ||
| 8010 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 8010 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 8011 | ········-F·auid!=unset·-F·key=perm_mod | 8011 | ········-F·auid!=unset·-F·key=perm_mod |
| 8012 | ······create:·true | 8012 | ······create:·true |
| 8013 | ······mode:·o-rwx | 8013 | ······mode:·o-rwx |
| 8014 | ······state:·present | 8014 | ······state:·present |
| 8015 | ····when:·syscalls_found·|·length·==·0 | 8015 | ····when:·syscalls_found·|·length·==·0 |
| 8016 | ··when: | 8016 | ··when: |
| 8017 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8018 | ··-·'"audit"·in·ansible_facts.packages' | 8017 | ··-·'"audit"·in·ansible_facts.packages' |
| 8018 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8019 | ··-·audit_arch·==·"b64" | 8019 | ··-·audit_arch·==·"b64" |
| 8020 | ··tags: | 8020 | ··tags: |
| 8021 | ··-·CJIS-5.4.1.1 | 8021 | ··-·CJIS-5.4.1.1 |
| 8022 | ··-·NIST-800-171-3.1.7 | 8022 | ··-·NIST-800-171-3.1.7 |
| 8023 | ··-·NIST-800-53-AU-12(c) | 8023 | ··-·NIST-800-53-AU-12(c) |
| 8024 | ··-·NIST-800-53-AU-2(d) | 8024 | ··-·NIST-800-53-AU-2(d) |
| 8025 | ··-·NIST-800-53-CM-6(a) | 8025 | ··-·NIST-800-53-CM-6(a) |
| Offset 8028, 15 lines modified | Offset 8028, 15 lines modified | ||
| 8028 | ··-·low_complexity | 8028 | ··-·low_complexity |
| 8029 | ··-·low_disruption | 8029 | ··-·low_disruption |
| 8030 | ··-·medium_severity | 8030 | ··-·medium_severity |
| 8031 | ··-·reboot_required | 8031 | ··-·reboot_required |
| 8032 | ··-·restrict_strategy | 8032 | ··-·restrict_strategy |
| 8033 | Remediation_Shell_script_⇲ | 8033 | Remediation_Shell_script_⇲ |
| 8034 | #·Remediation·is·applicable·only·in·certain·platforms | 8034 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8035 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 8035 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 8036 | #·First·perform·the·remediation·of·the·syscall·rule | 8036 | #·First·perform·the·remediation·of·the·syscall·rule |
| 8037 | #·Retrieve·hardware·architecture·of·the·underlying·system | 8037 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 8038 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 8038 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 8039 | for·ARCH·in·"${RULE_ARCHS[@]}" | 8039 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 8040 | do | 8040 | do |
| Offset 8396, 16 lines modified | Offset 8396, 16 lines modified | ||
| 8396 | ··-·reboot_required | 8396 | ··-·reboot_required |
| 8397 | ··-·restrict_strategy | 8397 | ··-·restrict_strategy |
| 8398 | -·name:·Set·architecture·for·audit·chown·tasks | 8398 | -·name:·Set·architecture·for·audit·chown·tasks |
| 8399 | ··set_fact: | 8399 | ··set_fact: |
| 8400 | ····audit_arch:·b64 | 8400 | ····audit_arch:·b64 |
| 8401 | ··when: | 8401 | ··when: |
| 8402 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8403 | ··-·'"audit"·in·ansible_facts.packages' | 8402 | ··-·'"audit"·in·ansible_facts.packages' |
| 8403 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8404 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 8404 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 8405 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 8405 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 8406 | ··tags: | 8406 | ··tags: |
| 8407 | ··-·CJIS-5.4.1.1 | 8407 | ··-·CJIS-5.4.1.1 |
| 8408 | ··-·NIST-800-171-3.1.7 | 8408 | ··-·NIST-800-171-3.1.7 |
| 8409 | ··-·NIST-800-53-AU-12(c) | 8409 | ··-·NIST-800-53-AU-12(c) |
| 8410 | ··-·NIST-800-53-AU-2(d) | 8410 | ··-·NIST-800-53-AU-2(d) |
| Offset 8543, 16 lines modified | Offset 8543, 16 lines modified | ||
| 8543 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 8543 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 8544 | ········-F·auid!=unset·-F·key=perm_mod | 8544 | ········-F·auid!=unset·-F·key=perm_mod |
| 8545 | ······create:·true | 8545 | ······create:·true |
| 8546 | ······mode:·o-rwx | 8546 | ······mode:·o-rwx |
| 8547 | ······state:·present | 8547 | ······state:·present |
| 8548 | ····when:·syscalls_found·|·length·==·0 | 8548 | ····when:·syscalls_found·|·length·==·0 |
| 8549 | ··when: | 8549 | ··when: |
| 8550 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8551 | ··-·'"audit"·in·ansible_facts.packages' | 8550 | ··-·'"audit"·in·ansible_facts.packages' |
| 8551 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8552 | ··tags: | 8552 | ··tags: |
| 8553 | ··-·CJIS-5.4.1.1 | 8553 | ··-·CJIS-5.4.1.1 |
| 8554 | ··-·NIST-800-171-3.1.7 | 8554 | ··-·NIST-800-171-3.1.7 |
| 8555 | ··-·NIST-800-53-AU-12(c) | 8555 | ··-·NIST-800-53-AU-12(c) |
| 8556 | ··-·NIST-800-53-AU-2(d) | 8556 | ··-·NIST-800-53-AU-2(d) |
| 8557 | ··-·NIST-800-53-CM-6(a) | 8557 | ··-·NIST-800-53-CM-6(a) |
| 8558 | ··-·PCI-DSS-Req-10.5.5 | 8558 | ··-·PCI-DSS-Req-10.5.5 |
| Offset 8688, 16 lines modified | Offset 8688, 16 lines modified | ||
| 8688 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 8688 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 8689 | ········-F·auid!=unset·-F·key=perm_mod | 8689 | ········-F·auid!=unset·-F·key=perm_mod |
| 8690 | ······create:·true | 8690 | ······create:·true |
| 8691 | ······mode:·o-rwx | 8691 | ······mode:·o-rwx |
| 8692 | ······state:·present | 8692 | ······state:·present |
| 8693 | ····when:·syscalls_found·|·length·==·0 | 8693 | ····when:·syscalls_found·|·length·==·0 |
| 8694 | ··when: | 8694 | ··when: |
| 8695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8696 | ··-·'"audit"·in·ansible_facts.packages' | 8695 | ··-·'"audit"·in·ansible_facts.packages' |
| 8696 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8697 | ··-·audit_arch·==·"b64" | 8697 | ··-·audit_arch·==·"b64" |
| 8698 | ··tags: | 8698 | ··tags: |
| 8699 | ··-·CJIS-5.4.1.1 | 8699 | ··-·CJIS-5.4.1.1 |
| 8700 | ··-·NIST-800-171-3.1.7 | 8700 | ··-·NIST-800-171-3.1.7 |
| 8701 | ··-·NIST-800-53-AU-12(c) | 8701 | ··-·NIST-800-53-AU-12(c) |
| 8702 | ··-·NIST-800-53-AU-2(d) | 8702 | ··-·NIST-800-53-AU-2(d) |
| 8703 | ··-·NIST-800-53-CM-6(a) | 8703 | ··-·NIST-800-53-CM-6(a) |
| Offset 8706, 15 lines modified | Offset 8706, 15 lines modified | ||
| 8706 | ··-·low_complexity | 8706 | ··-·low_complexity |
| 8707 | ··-·low_disruption | 8707 | ··-·low_disruption |
| 8708 | ··-·medium_severity | 8708 | ··-·medium_severity |
| Max diff block lines reached; 289549/294151 bytes (98.44%) of diff not shown. | |||
| Offset 51695, 23 lines modified | Offset 51695, 23 lines modified | ||
| 000c9ee0:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | 000c9ee0:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | ||
| 000c9ef0:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | 000c9ef0:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | ||
| 000c9f00:·653a·2053·6574·2061·7263·6869·7465·6374··e:·Set·architect | 000c9f00:·653a·2053·6574·2061·7263·6869·7465·6374··e:·Set·architect | ||
| 000c9f10:·7572·6520·666f·7220·6175·6469·7420·6368··ure·for·audit·ch | 000c9f10:·7572·6520·666f·7220·6175·6469·7420·6368··ure·for·audit·ch | ||
| 000c9f20:·6d6f·6420·7461·736b·730a·2020·7365·745f··mod·tasks.··set_ | 000c9f20:·6d6f·6420·7461·736b·730a·2020·7365·745f··mod·tasks.··set_ | ||
| 000c9f30:·6661·6374·3a0a·2020·2020·6175·6469·745f··fact:.····audit_ | 000c9f30:·6661·6374·3a0a·2020·2020·6175·6469·745f··fact:.····audit_ | ||
| 000c9f40:·6172·6368·3a20·6236·340a·2020·7768·656e··arch:·b64.··when | 000c9f40:·6172·6368·3a20·6236·340a·2020·7768·656e··arch:·b64.··when | ||
| 000c9f50:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 000c9f60:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000c9f70:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000c9f80:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000c9f90:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000c9fa0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000c9fb0:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 000c9f | 000c9f50:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 000c9f60:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000c9f70:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 000c9f80:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000c9f90:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000c9fa0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000c9fb0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000c9fc0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000c9fd0:· | 000c9fd0:·7222·5d0a·2020·2d20·616e·7369·626c·655f··r"].··-·ansible_ | ||
| 000c9fe0:·6172·6368·6974·6563·7475·7265·203d·3d20··architecture·==· | 000c9fe0:·6172·6368·6974·6563·7475·7265·203d·3d20··architecture·==· | ||
| 000c9ff0:·2261·6172·6368·3634·2220·6f72·2061·6e73··"aarch64"·or·ans | 000c9ff0:·2261·6172·6368·3634·2220·6f72·2061·6e73··"aarch64"·or·ans | ||
| 000ca000:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | 000ca000:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 000ca010:·6520·3d3d·2022·7070·6336·3422·206f·7220··e·==·"ppc64"·or· | 000ca010:·6520·3d3d·2022·7070·6336·3422·206f·7220··e·==·"ppc64"·or· | ||
| 000ca020:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | 000ca020:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | ||
| 000ca030:·7475·7265·0a20·2020·203d·3d20·2270·7063··ture.····==·"ppc | 000ca030:·7475·7265·0a20·2020·203d·3d20·2270·7063··ture.····==·"ppc | ||
| 000ca040:·3634·6c65·2220·6f72·2061·6e73·6962·6c65··64le"·or·ansible | 000ca040:·3634·6c65·2220·6f72·2061·6e73·6962·6c65··64le"·or·ansible | ||
| Offset 52016, 23 lines modified | Offset 52016, 23 lines modified | ||
| 000cb2f0:·4620·6b65·793d·7065·726d·5f6d·6f64·0a20··F·key=perm_mod.· | 000cb2f0:·4620·6b65·793d·7065·726d·5f6d·6f64·0a20··F·key=perm_mod.· | ||
| 000cb300:·2020·2020·2063·7265·6174·653a·2074·7275·······create:·tru | 000cb300:·2020·2020·2063·7265·6174·653a·2074·7275·······create:·tru | ||
| 000cb310:·650a·2020·2020·2020·6d6f·6465·3a20·6f2d··e.······mode:·o- | 000cb310:·650a·2020·2020·2020·6d6f·6465·3a20·6f2d··e.······mode:·o- | ||
| 000cb320:·7277·780a·2020·2020·2020·7374·6174·653a··rwx.······state: | 000cb320:·7277·780a·2020·2020·2020·7374·6174·653a··rwx.······state: | ||
| 000cb330:·2070·7265·7365·6e74·0a20·2020·2077·6865···present.····whe | 000cb330:·2070·7265·7365·6e74·0a20·2020·2077·6865···present.····whe | ||
| 000cb340:·6e3a·2073·7973·6361·6c6c·735f·666f·756e··n:·syscalls_foun | 000cb340:·6e3a·2073·7973·6361·6c6c·735f·666f·756e··n:·syscalls_foun | ||
| 000cb350:·6420·7c20·6c65·6e67·7468·203d·3d20·300a··d·|·length·==·0. | 000cb350:·6420·7c20·6c65·6e67·7468·203d·3d20·300a··d·|·length·==·0. | ||
| 000cb360:·2020·7768·656e·3a0a·2020·2d20· | 000cb360:·2020·7768·656e·3a0a·2020·2d20·2722·6175····when:.··-·'"au | ||
| 000cb370:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000cb380:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000cb390:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000cb3a0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000cb3b0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 000cb3c0:·5d0a·2020·2d20·2722·6175·6469·7422·2069··].··-·'"audit"·i | |||
| 000cb3d0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000cb3 | 000cb370:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | ||
| 000cb380:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000cb390:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 000cb3a0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000cb3b0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000cb3c0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 000cb3d0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 000cb3e0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 000cb3f0:·3a0a·2020·2d20·434a·4953·2d35·2e34·2e31··:.··-·CJIS-5.4.1 | 000cb3f0:·3a0a·2020·2d20·434a·4953·2d35·2e34·2e31··:.··-·CJIS-5.4.1 | ||
| 000cb400:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | 000cb400:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 000cb410:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | 000cb410:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | ||
| 000cb420:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | 000cb420:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | ||
| 000cb430:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | 000cb430:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 000cb440:·3533·2d41·552d·3228·6429·0a20·202d·204e··53-AU-2(d).··-·N | 000cb440:·3533·2d41·552d·3228·6429·0a20·202d·204e··53-AU-2(d).··-·N | ||
| 000cb450:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | 000cb450:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| Offset 52326, 23 lines modified | Offset 52326, 23 lines modified | ||
| 000cc650:·6579·3d70·6572·6d5f·6d6f·640a·2020·2020··ey=perm_mod.···· | 000cc650:·6579·3d70·6572·6d5f·6d6f·640a·2020·2020··ey=perm_mod.···· | ||
| 000cc660:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | 000cc660:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | ||
| 000cc670:·2020·2020·206d·6f64·653a·206f·2d72·7778·······mode:·o-rwx | 000cc670:·2020·2020·206d·6f64·653a·206f·2d72·7778·······mode:·o-rwx | ||
| 000cc680:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | 000cc680:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | ||
| 000cc690:·6573·656e·740a·2020·2020·7768·656e·3a20··esent.····when:· | 000cc690:·6573·656e·740a·2020·2020·7768·656e·3a20··esent.····when:· | ||
| 000cc6a0:·7379·7363·616c·6c73·5f66·6f75·6e64·207c··syscalls_found·| | 000cc6a0:·7379·7363·616c·6c73·5f66·6f75·6e64·207c··syscalls_found·| | ||
| 000cc6b0:·206c·656e·6774·6820·3d3d·2030·0a20·2077···length·==·0.··w | 000cc6b0:·206c·656e·6774·6820·3d3d·2030·0a20·2077···length·==·0.··w | ||
| 000cc6c0:·6865·6e3a·0a20·202d·20 | 000cc6c0:·6865·6e3a·0a20·202d·2027·2261·7564·6974··hen:.··-·'"audit | ||
| 000cc6d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000cc6e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000cc6f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000cc700:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000cc710:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 000cc720:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | |||
| 000cc | 000cc6d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 000cc6e0:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000cc6f0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000cc700:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000cc710:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000cc720:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000cc730:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000cc740:·6 | 000cc740:·696e·6572·225d·0a20·202d·2061·7564·6974··iner"].··-·audit | ||
| 000cc750:·5f61·7263·6820·3d3d·2022·6236·3422·0a20··_arch·==·"b64".· | 000cc750:·5f61·7263·6820·3d3d·2022·6236·3422·0a20··_arch·==·"b64".· | ||
| 000cc760:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | 000cc760:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | ||
| 000cc770:·352e·342e·312e·310a·2020·2d20·4e49·5354··5.4.1.1.··-·NIST | 000cc770:·352e·342e·312e·310a·2020·2d20·4e49·5354··5.4.1.1.··-·NIST | ||
| 000cc780:·2d38·3030·2d31·3731·2d33·2e31·2e37·0a20··-800-171-3.1.7.· | 000cc780:·2d38·3030·2d31·3731·2d33·2e31·2e37·0a20··-800-171-3.1.7.· | ||
| 000cc790:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 000cc790:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 000cc7a0:·552d·3132·2863·290a·2020·2d20·4e49·5354··U-12(c).··-·NIST | 000cc7a0:·552d·3132·2863·290a·2020·2d20·4e49·5354··U-12(c).··-·NIST | ||
| 000cc7b0:·2d38·3030·2d35·332d·4155·2d32·2864·290a··-800-53-AU-2(d). | 000cc7b0:·2d38·3030·2d35·332d·4155·2d32·2864·290a··-800-53-AU-2(d). | ||
| Offset 52374, 21 lines modified | Offset 52374, 21 lines modified | ||
| 000cc950:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | 000cc950:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 000cc960:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | 000cc960:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 000cc970:·6170·7365·2220·6964·3d22·6964·6d31·3632··apse"·id="idm162 | 000cc970:·6170·7365·2220·6964·3d22·6964·6d31·3632··apse"·id="idm162 | ||
| 000cc980:·3838·223e·3c70·7265·3e3c·636f·6465·3e23··88"><pre><code># | 000cc980:·3838·223e·3c70·7265·3e3c·636f·6465·3e23··88"><pre><code># | ||
| 000cc990:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | 000cc990:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 000cc9a0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | 000cc9a0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 000cc9b0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | 000cc9b0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 000cc9c0:·6f72·6d73·0a69·6620· | 000cc9c0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | ||
| 000cc9d0:· | 000cc9d0:·6965·7420·2d71·2061·7564·6974·2026·616d··iet·-q·audit·&am | ||
| 000cc9e0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | 000cc9e0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 000cc9f0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 000cca00:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 000cc | 000cca10:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 000cca00:·7620·5d20·2661·6d70·3b26·616d·703b·2072··v·]·&&·r | |||
| 000cca10:·706d·202d·2d71·7569·6574·202d·7120·6175··pm·--quiet·-q·au | |||
| 000cca20:· | 000cca20:·7620·5d3b·2074·6865·6e0a·0a23·2046·6972··v·];·then..#·Fir | ||
| 000cca30:·7374·2070·6572·666f·726d·2074·6865·2072··st·perform·the·r | 000cca30:·7374·2070·6572·666f·726d·2074·6865·2072··st·perform·the·r | ||
| 000cca40:·656d·6564·6961·7469·6f6e·206f·6620·7468··emediation·of·th | 000cca40:·656d·6564·6961·7469·6f6e·206f·6620·7468··emediation·of·th | ||
| 000cca50:·6520·7379·7363·616c·6c20·7275·6c65·0a23··e·syscall·rule.# | 000cca50:·6520·7379·7363·616c·6c20·7275·6c65·0a23··e·syscall·rule.# | ||
| 000cca60:·2052·6574·7269·6576·6520·6861·7264·7761···Retrieve·hardwa | 000cca60:·2052·6574·7269·6576·6520·6861·7264·7761···Retrieve·hardwa | ||
| 000cca70:·7265·2061·7263·6869·7465·6374·7572·6520··re·architecture· | 000cca70:·7265·2061·7263·6869·7465·6374·7572·6520··re·architecture· | ||
| 000cca80:·6f66·2074·6865·2075·6e64·6572·6c79·696e··of·the·underlyin | 000cca80:·6f66·2074·6865·2075·6e64·6572·6c79·696e··of·the·underlyin | ||
| 000cca90:·6720·7379·7374·656d·0a5b·2022·2428·6765··g·system.[·"$(ge | 000cca90:·6720·7379·7374·656d·0a5b·2022·2428·6765··g·system.[·"$(ge | ||
| Offset 54172, 22 lines modified | Offset 54172, 22 lines modified | ||
| 000d39b0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | 000d39b0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 000d39c0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | 000d39c0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | ||
| 000d39d0:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | 000d39d0:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | ||
| 000d39e0:·6f72·2061·7564·6974·2063·686f·776e·2074··or·audit·chown·t | 000d39e0:·6f72·2061·7564·6974·2063·686f·776e·2074··or·audit·chown·t | ||
| 000d39f0:·6173·6b73·0a20·2073·6574·5f66·6163·743a··asks.··set_fact: | 000d39f0:·6173·6b73·0a20·2073·6574·5f66·6163·743a··asks.··set_fact: | ||
| 000d3a00:·0a20·2020·2061·7564·6974·5f61·7263·683a··.····audit_arch: | 000d3a00:·0a20·2020·2061·7564·6974·5f61·7263·683a··.····audit_arch: | ||
| 000d3a10:·2062·3634·0a20·2077·6865·6e3a·0a20·202d···b64.··when:.··- | 000d3a10:·2062·3634·0a20·2077·6865·6e3a·0a20·202d···b64.··when:.··- | ||
| 000d3a20:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000d3a30:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000d3a40:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000d3a50:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| Max diff block lines reached; 591736/602009 bytes (98.29%) of diff not shown. | |||
| Offset 6714, 16 lines modified | Offset 6714, 16 lines modified | ||
| 6714 | ··-·reboot_required | 6714 | ··-·reboot_required |
| 6715 | ··-·restrict_strategy | 6715 | ··-·restrict_strategy |
| 6716 | -·name:·Set·architecture·for·audit·chmod·tasks | 6716 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 6717 | ··set_fact: | 6717 | ··set_fact: |
| 6718 | ····audit_arch:·b64 | 6718 | ····audit_arch:·b64 |
| 6719 | ··when: | 6719 | ··when: |
| 6720 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6721 | ··-·'"audit"·in·ansible_facts.packages' | 6720 | ··-·'"audit"·in·ansible_facts.packages' |
| 6721 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6722 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 6722 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 6723 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 6723 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 6724 | ··tags: | 6724 | ··tags: |
| 6725 | ··-·CJIS-5.4.1.1 | 6725 | ··-·CJIS-5.4.1.1 |
| 6726 | ··-·NIST-800-171-3.1.7 | 6726 | ··-·NIST-800-171-3.1.7 |
| 6727 | ··-·NIST-800-53-AU-12(c) | 6727 | ··-·NIST-800-53-AU-12(c) |
| 6728 | ··-·NIST-800-53-AU-2(d) | 6728 | ··-·NIST-800-53-AU-2(d) |
| Offset 6859, 16 lines modified | Offset 6859, 16 lines modified | ||
| 6859 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 6859 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 6860 | ········-F·auid!=unset·-F·key=perm_mod | 6860 | ········-F·auid!=unset·-F·key=perm_mod |
| 6861 | ······create:·true | 6861 | ······create:·true |
| 6862 | ······mode:·o-rwx | 6862 | ······mode:·o-rwx |
| 6863 | ······state:·present | 6863 | ······state:·present |
| 6864 | ····when:·syscalls_found·|·length·==·0 | 6864 | ····when:·syscalls_found·|·length·==·0 |
| 6865 | ··when: | 6865 | ··when: |
| 6866 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6867 | ··-·'"audit"·in·ansible_facts.packages' | 6866 | ··-·'"audit"·in·ansible_facts.packages' |
| 6867 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6868 | ··tags: | 6868 | ··tags: |
| 6869 | ··-·CJIS-5.4.1.1 | 6869 | ··-·CJIS-5.4.1.1 |
| 6870 | ··-·NIST-800-171-3.1.7 | 6870 | ··-·NIST-800-171-3.1.7 |
| 6871 | ··-·NIST-800-53-AU-12(c) | 6871 | ··-·NIST-800-53-AU-12(c) |
| 6872 | ··-·NIST-800-53-AU-2(d) | 6872 | ··-·NIST-800-53-AU-2(d) |
| 6873 | ··-·NIST-800-53-CM-6(a) | 6873 | ··-·NIST-800-53-CM-6(a) |
| 6874 | ··-·PCI-DSS-Req-10.5.5 | 6874 | ··-·PCI-DSS-Req-10.5.5 |
| Offset 7002, 16 lines modified | Offset 7002, 16 lines modified | ||
| 7002 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7002 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7003 | ········-F·auid!=unset·-F·key=perm_mod | 7003 | ········-F·auid!=unset·-F·key=perm_mod |
| 7004 | ······create:·true | 7004 | ······create:·true |
| 7005 | ······mode:·o-rwx | 7005 | ······mode:·o-rwx |
| 7006 | ······state:·present | 7006 | ······state:·present |
| 7007 | ····when:·syscalls_found·|·length·==·0 | 7007 | ····when:·syscalls_found·|·length·==·0 |
| 7008 | ··when: | 7008 | ··when: |
| 7009 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7010 | ··-·'"audit"·in·ansible_facts.packages' | 7009 | ··-·'"audit"·in·ansible_facts.packages' |
| 7010 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7011 | ··-·audit_arch·==·"b64" | 7011 | ··-·audit_arch·==·"b64" |
| 7012 | ··tags: | 7012 | ··tags: |
| 7013 | ··-·CJIS-5.4.1.1 | 7013 | ··-·CJIS-5.4.1.1 |
| 7014 | ··-·NIST-800-171-3.1.7 | 7014 | ··-·NIST-800-171-3.1.7 |
| 7015 | ··-·NIST-800-53-AU-12(c) | 7015 | ··-·NIST-800-53-AU-12(c) |
| 7016 | ··-·NIST-800-53-AU-2(d) | 7016 | ··-·NIST-800-53-AU-2(d) |
| 7017 | ··-·NIST-800-53-CM-6(a) | 7017 | ··-·NIST-800-53-CM-6(a) |
| Offset 7020, 15 lines modified | Offset 7020, 15 lines modified | ||
| 7020 | ··-·low_complexity | 7020 | ··-·low_complexity |
| 7021 | ··-·low_disruption | 7021 | ··-·low_disruption |
| 7022 | ··-·medium_severity | 7022 | ··-·medium_severity |
| 7023 | ··-·reboot_required | 7023 | ··-·reboot_required |
| 7024 | ··-·restrict_strategy | 7024 | ··-·restrict_strategy |
| 7025 | Remediation_Shell_script_⇲ | 7025 | Remediation_Shell_script_⇲ |
| 7026 | #·Remediation·is·applicable·only·in·certain·platforms | 7026 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7027 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7027 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7028 | #·First·perform·the·remediation·of·the·syscall·rule | 7028 | #·First·perform·the·remediation·of·the·syscall·rule |
| 7029 | #·Retrieve·hardware·architecture·of·the·underlying·system | 7029 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 7030 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 7030 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 7031 | for·ARCH·in·"${RULE_ARCHS[@]}" | 7031 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 7032 | do | 7032 | do |
| Offset 7388, 16 lines modified | Offset 7388, 16 lines modified | ||
| 7388 | ··-·reboot_required | 7388 | ··-·reboot_required |
| 7389 | ··-·restrict_strategy | 7389 | ··-·restrict_strategy |
| 7390 | -·name:·Set·architecture·for·audit·chown·tasks | 7390 | -·name:·Set·architecture·for·audit·chown·tasks |
| 7391 | ··set_fact: | 7391 | ··set_fact: |
| 7392 | ····audit_arch:·b64 | 7392 | ····audit_arch:·b64 |
| 7393 | ··when: | 7393 | ··when: |
| 7394 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7395 | ··-·'"audit"·in·ansible_facts.packages' | 7394 | ··-·'"audit"·in·ansible_facts.packages' |
| 7395 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7396 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 7396 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 7397 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 7397 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 7398 | ··tags: | 7398 | ··tags: |
| 7399 | ··-·CJIS-5.4.1.1 | 7399 | ··-·CJIS-5.4.1.1 |
| 7400 | ··-·NIST-800-171-3.1.7 | 7400 | ··-·NIST-800-171-3.1.7 |
| 7401 | ··-·NIST-800-53-AU-12(c) | 7401 | ··-·NIST-800-53-AU-12(c) |
| 7402 | ··-·NIST-800-53-AU-2(d) | 7402 | ··-·NIST-800-53-AU-2(d) |
| Offset 7535, 16 lines modified | Offset 7535, 16 lines modified | ||
| 7535 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7535 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7536 | ········-F·auid!=unset·-F·key=perm_mod | 7536 | ········-F·auid!=unset·-F·key=perm_mod |
| 7537 | ······create:·true | 7537 | ······create:·true |
| 7538 | ······mode:·o-rwx | 7538 | ······mode:·o-rwx |
| 7539 | ······state:·present | 7539 | ······state:·present |
| 7540 | ····when:·syscalls_found·|·length·==·0 | 7540 | ····when:·syscalls_found·|·length·==·0 |
| 7541 | ··when: | 7541 | ··when: |
| 7542 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7543 | ··-·'"audit"·in·ansible_facts.packages' | 7542 | ··-·'"audit"·in·ansible_facts.packages' |
| 7543 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7544 | ··tags: | 7544 | ··tags: |
| 7545 | ··-·CJIS-5.4.1.1 | 7545 | ··-·CJIS-5.4.1.1 |
| 7546 | ··-·NIST-800-171-3.1.7 | 7546 | ··-·NIST-800-171-3.1.7 |
| 7547 | ··-·NIST-800-53-AU-12(c) | 7547 | ··-·NIST-800-53-AU-12(c) |
| 7548 | ··-·NIST-800-53-AU-2(d) | 7548 | ··-·NIST-800-53-AU-2(d) |
| 7549 | ··-·NIST-800-53-CM-6(a) | 7549 | ··-·NIST-800-53-CM-6(a) |
| 7550 | ··-·PCI-DSS-Req-10.5.5 | 7550 | ··-·PCI-DSS-Req-10.5.5 |
| Offset 7680, 16 lines modified | Offset 7680, 16 lines modified | ||
| 7680 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7680 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7681 | ········-F·auid!=unset·-F·key=perm_mod | 7681 | ········-F·auid!=unset·-F·key=perm_mod |
| 7682 | ······create:·true | 7682 | ······create:·true |
| 7683 | ······mode:·o-rwx | 7683 | ······mode:·o-rwx |
| 7684 | ······state:·present | 7684 | ······state:·present |
| 7685 | ····when:·syscalls_found·|·length·==·0 | 7685 | ····when:·syscalls_found·|·length·==·0 |
| 7686 | ··when: | 7686 | ··when: |
| 7687 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7688 | ··-·'"audit"·in·ansible_facts.packages' | 7687 | ··-·'"audit"·in·ansible_facts.packages' |
| 7688 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7689 | ··-·audit_arch·==·"b64" | 7689 | ··-·audit_arch·==·"b64" |
| 7690 | ··tags: | 7690 | ··tags: |
| 7691 | ··-·CJIS-5.4.1.1 | 7691 | ··-·CJIS-5.4.1.1 |
| 7692 | ··-·NIST-800-171-3.1.7 | 7692 | ··-·NIST-800-171-3.1.7 |
| 7693 | ··-·NIST-800-53-AU-12(c) | 7693 | ··-·NIST-800-53-AU-12(c) |
| 7694 | ··-·NIST-800-53-AU-2(d) | 7694 | ··-·NIST-800-53-AU-2(d) |
| 7695 | ··-·NIST-800-53-CM-6(a) | 7695 | ··-·NIST-800-53-CM-6(a) |
| Offset 7698, 15 lines modified | Offset 7698, 15 lines modified | ||
| 7698 | ··-·low_complexity | 7698 | ··-·low_complexity |
| 7699 | ··-·low_disruption | 7699 | ··-·low_disruption |
| 7700 | ··-·medium_severity | 7700 | ··-·medium_severity |
| Max diff block lines reached; 185477/190079 bytes (97.58%) of diff not shown. | |||
| Offset 33607, 22 lines modified | Offset 33607, 22 lines modified | ||
| 00083460:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | 00083460:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 00083470:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | 00083470:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | ||
| 00083480:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | 00083480:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | ||
| 00083490:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | 00083490:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | ||
| 000834a0:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | 000834a0:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | ||
| 000834b0:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | 000834b0:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | ||
| 000834c0:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | 000834c0:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | ||
| 000834d0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000834e0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000834f0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00083500:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00083510:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00083520:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 00083530:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 00083 | 000834d0:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | ||
| 000834e0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000834f0:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 00083500:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 00083510:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 00083520:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 00083530:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 00083540:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 00083550:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | 00083550:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | ||
| 00083560:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | 00083560:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | ||
| 00083570:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | 00083570:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | ||
| 00083580:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | 00083580:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | ||
| 00083590:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | 00083590:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | ||
| 000835a0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 000835a0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 000835b0:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | 000835b0:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | ||
| Offset 33928, 23 lines modified | Offset 33928, 23 lines modified | ||
| 00084870:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | 00084870:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | ||
| 00084880:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | 00084880:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | ||
| 00084890:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | 00084890:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | ||
| 000848a0:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | 000848a0:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | ||
| 000848b0:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | 000848b0:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | ||
| 000848c0:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | 000848c0:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | ||
| 000848d0:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | 000848d0:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | ||
| 000848e0:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 000848f0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00084900:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00084910:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00084920:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00084930:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00084940:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 00084 | 000848e0:·656e·3a0a·2020·2d20·2722·6175·6469·7422··en:.··-·'"audit" | ||
| 000848f0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00084900:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 00084910:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00084920:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00084930:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00084940:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00084950:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00084960:·6 | 00084960:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 00084970:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | 00084970:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | ||
| 00084980:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 00084980:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 00084990:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | 00084990:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | ||
| 000849a0:·3030·2d35·332d·4155·2d31·3228·6329·0a20··00-53-AU-12(c).· | 000849a0:·3030·2d35·332d·4155·2d31·3228·6329·0a20··00-53-AU-12(c).· | ||
| 000849b0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 000849b0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 000849c0:·552d·3228·6429·0a20·202d·204e·4953·542d··U-2(d).··-·NIST- | 000849c0:·552d·3228·6429·0a20·202d·204e·4953·542d··U-2(d).··-·NIST- | ||
| 000849d0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | 000849d0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | ||
| Offset 34238, 23 lines modified | Offset 34238, 23 lines modified | ||
| 00085bd0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 00085bd0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 00085be0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 00085be0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 00085bf0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 00085bf0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 00085c00:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 00085c00:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 00085c10:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 00085c10:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 00085c20:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 00085c20:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 00085c30:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 00085c30:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 00085c40:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 00085c50:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00085c60:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00085c70:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00085c80:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00085c90:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 00085ca0:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 00085c | 00085c40:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 00085c50:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00085c60:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 00085c70:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 00085c80:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00085c90:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00085ca0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 00085cb0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 00085cc0:· | 00085cc0:·225d·0a20·202d·2061·7564·6974·5f61·7263··"].··-·audit_arc | ||
| 00085cd0:·6820·3d3d·2022·6236·3422·0a20·2074·6167··h·==·"b64".··tag | 00085cd0:·6820·3d3d·2022·6236·3422·0a20·2074·6167··h·==·"b64".··tag | ||
| 00085ce0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 00085ce0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 00085cf0:·312e·310a·2020·2d20·4e49·5354·2d38·3030··1.1.··-·NIST-800 | 00085cf0:·312e·310a·2020·2d20·4e49·5354·2d38·3030··1.1.··-·NIST-800 | ||
| 00085d00:·2d31·3731·2d33·2e31·2e37·0a20·202d·204e··-171-3.1.7.··-·N | 00085d00:·2d31·3731·2d33·2e31·2e37·0a20·202d·204e··-171-3.1.7.··-·N | ||
| 00085d10:·4953·542d·3830·302d·3533·2d41·552d·3132··IST-800-53-AU-12 | 00085d10:·4953·542d·3830·302d·3533·2d41·552d·3132··IST-800-53-AU-12 | ||
| 00085d20:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | 00085d20:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 00085d30:·2d35·332d·4155·2d32·2864·290a·2020·2d20··-53-AU-2(d).··-· | 00085d30:·2d35·332d·4155·2d32·2864·290a·2020·2d20··-53-AU-2(d).··-· | ||
| Offset 34286, 20 lines modified | Offset 34286, 20 lines modified | ||
| 00085ed0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | 00085ed0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00085ee0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | 00085ee0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00085ef0:·2220·6964·3d22·6964·6d31·3632·3838·223e··"·id="idm16288"> | 00085ef0:·2220·6964·3d22·6964·6d31·3632·3838·223e··"·id="idm16288"> | ||
| 00085f00:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 00085f00:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 00085f10:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 00085f10:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 00085f20:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 00085f20:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 00085f30:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 00085f30:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 00085f40:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 00085f50:·2d71·2061·7564·6974·2026·616d·703b·2661··-q·audit·&&a | |||
| 00085f | 00085f60:·6d70·3b20·5b20·2120·2d66·202f·2e64·6f63··mp;·[·!·-f·/.doc | ||
| 00085f | 00085f70:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 00085f | 00085f80:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 00085f | 00085f90:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | ||
| 00085f80:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 00085f90:·2d71·7569·6574·202d·7120·6175·6469·743b··-quiet·-q·audit; | |||
| 00085fa0:·2074·6865·6e0a·0a23·2046·6972·7374·2070···then..#·First·p | 00085fa0:·2074·6865·6e0a·0a23·2046·6972·7374·2070···then..#·First·p | ||
| 00085fb0:·6572·666f·726d·2074·6865·2072·656d·6564··erform·the·remed | 00085fb0:·6572·666f·726d·2074·6865·2072·656d·6564··erform·the·remed | ||
| 00085fc0:·6961·7469·6f6e·206f·6620·7468·6520·7379··iation·of·the·sy | 00085fc0:·6961·7469·6f6e·206f·6620·7468·6520·7379··iation·of·the·sy | ||
| 00085fd0:·7363·616c·6c20·7275·6c65·0a23·2052·6574··scall·rule.#·Ret | 00085fd0:·7363·616c·6c20·7275·6c65·0a23·2052·6574··scall·rule.#·Ret | ||
| 00085fe0:·7269·6576·6520·6861·7264·7761·7265·2061··rieve·hardware·a | 00085fe0:·7269·6576·6520·6861·7264·7761·7265·2061··rieve·hardware·a | ||
| 00085ff0:·7263·6869·7465·6374·7572·6520·6f66·2074··rchitecture·of·t | 00085ff0:·7263·6869·7465·6374·7572·6520·6f66·2074··rchitecture·of·t | ||
| 00086000:·6865·2075·6e64·6572·6c79·696e·6720·7379··he·underlying·sy | 00086000:·6865·2075·6e64·6572·6c79·696e·6720·7379··he·underlying·sy | ||
| Offset 36083, 23 lines modified | Offset 36083, 23 lines modified | ||
| 0008cf20:·745f·7265·7175·6972·6564·0a20·202d·2072··t_required.··-·r | 0008cf20:·745f·7265·7175·6972·6564·0a20·202d·2072··t_required.··-·r | ||
| 0008cf30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | 0008cf30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0008cf40:·0a0a·2d20·6e61·6d65·3a20·5365·7420·6172··..-·name:·Set·ar | 0008cf40:·0a0a·2d20·6e61·6d65·3a20·5365·7420·6172··..-·name:·Set·ar | ||
| 0008cf50:·6368·6974·6563·7475·7265·2066·6f72·2061··chitecture·for·a | 0008cf50:·6368·6974·6563·7475·7265·2066·6f72·2061··chitecture·for·a | ||
| 0008cf60:·7564·6974·2063·686f·776e·2074·6173·6b73··udit·chown·tasks | 0008cf60:·7564·6974·2063·686f·776e·2074·6173·6b73··udit·chown·tasks | ||
| 0008cf70:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | 0008cf70:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0008cf80:·2061·7564·6974·5f61·7263·683a·2062·3634···audit_arch:·b64 | 0008cf80:·2061·7564·6974·5f61·7263·683a·2062·3634···audit_arch:·b64 | ||
| 0008cf90:·0a20·2077·6865·6e3a·0a20·202d·20 | 0008cf90:·0a20·2077·6865·6e3a·0a20·202d·2027·2261··.··when:.··-·'"a | ||
| 0008cfa0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0008cfb0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0008cfc0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0008cfd0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| Max diff block lines reached; 387055/397259 bytes (97.43%) of diff not shown. | |||
| Offset 2327, 16 lines modified | Offset 2327, 16 lines modified | ||
| 2327 | ··-·reboot_required | 2327 | ··-·reboot_required |
| 2328 | ··-·restrict_strategy | 2328 | ··-·restrict_strategy |
| 2329 | -·name:·Set·architecture·for·audit·chmod·tasks | 2329 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 2330 | ··set_fact: | 2330 | ··set_fact: |
| 2331 | ····audit_arch:·b64 | 2331 | ····audit_arch:·b64 |
| 2332 | ··when: | 2332 | ··when: |
| 2333 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2334 | ··-·'"audit"·in·ansible_facts.packages' | 2333 | ··-·'"audit"·in·ansible_facts.packages' |
| 2334 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2335 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 2335 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 2336 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 2336 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 2337 | ··tags: | 2337 | ··tags: |
| 2338 | ··-·CJIS-5.4.1.1 | 2338 | ··-·CJIS-5.4.1.1 |
| 2339 | ··-·NIST-800-171-3.1.7 | 2339 | ··-·NIST-800-171-3.1.7 |
| 2340 | ··-·NIST-800-53-AU-12(c) | 2340 | ··-·NIST-800-53-AU-12(c) |
| 2341 | ··-·NIST-800-53-AU-2(d) | 2341 | ··-·NIST-800-53-AU-2(d) |
| Offset 2472, 16 lines modified | Offset 2472, 16 lines modified | ||
| 2472 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2472 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2473 | ········-F·auid!=unset·-F·key=perm_mod | 2473 | ········-F·auid!=unset·-F·key=perm_mod |
| 2474 | ······create:·true | 2474 | ······create:·true |
| 2475 | ······mode:·o-rwx | 2475 | ······mode:·o-rwx |
| 2476 | ······state:·present | 2476 | ······state:·present |
| 2477 | ····when:·syscalls_found·|·length·==·0 | 2477 | ····when:·syscalls_found·|·length·==·0 |
| 2478 | ··when: | 2478 | ··when: |
| 2479 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2480 | ··-·'"audit"·in·ansible_facts.packages' | 2479 | ··-·'"audit"·in·ansible_facts.packages' |
| 2480 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2481 | ··tags: | 2481 | ··tags: |
| 2482 | ··-·CJIS-5.4.1.1 | 2482 | ··-·CJIS-5.4.1.1 |
| 2483 | ··-·NIST-800-171-3.1.7 | 2483 | ··-·NIST-800-171-3.1.7 |
| 2484 | ··-·NIST-800-53-AU-12(c) | 2484 | ··-·NIST-800-53-AU-12(c) |
| 2485 | ··-·NIST-800-53-AU-2(d) | 2485 | ··-·NIST-800-53-AU-2(d) |
| 2486 | ··-·NIST-800-53-CM-6(a) | 2486 | ··-·NIST-800-53-CM-6(a) |
| 2487 | ··-·PCI-DSS-Req-10.5.5 | 2487 | ··-·PCI-DSS-Req-10.5.5 |
| Offset 2615, 16 lines modified | Offset 2615, 16 lines modified | ||
| 2615 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2615 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2616 | ········-F·auid!=unset·-F·key=perm_mod | 2616 | ········-F·auid!=unset·-F·key=perm_mod |
| 2617 | ······create:·true | 2617 | ······create:·true |
| 2618 | ······mode:·o-rwx | 2618 | ······mode:·o-rwx |
| 2619 | ······state:·present | 2619 | ······state:·present |
| 2620 | ····when:·syscalls_found·|·length·==·0 | 2620 | ····when:·syscalls_found·|·length·==·0 |
| 2621 | ··when: | 2621 | ··when: |
| 2622 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2623 | ··-·'"audit"·in·ansible_facts.packages' | 2622 | ··-·'"audit"·in·ansible_facts.packages' |
| 2623 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2624 | ··-·audit_arch·==·"b64" | 2624 | ··-·audit_arch·==·"b64" |
| 2625 | ··tags: | 2625 | ··tags: |
| 2626 | ··-·CJIS-5.4.1.1 | 2626 | ··-·CJIS-5.4.1.1 |
| 2627 | ··-·NIST-800-171-3.1.7 | 2627 | ··-·NIST-800-171-3.1.7 |
| 2628 | ··-·NIST-800-53-AU-12(c) | 2628 | ··-·NIST-800-53-AU-12(c) |
| 2629 | ··-·NIST-800-53-AU-2(d) | 2629 | ··-·NIST-800-53-AU-2(d) |
| 2630 | ··-·NIST-800-53-CM-6(a) | 2630 | ··-·NIST-800-53-CM-6(a) |
| Offset 2633, 15 lines modified | Offset 2633, 15 lines modified | ||
| 2633 | ··-·low_complexity | 2633 | ··-·low_complexity |
| 2634 | ··-·low_disruption | 2634 | ··-·low_disruption |
| 2635 | ··-·medium_severity | 2635 | ··-·medium_severity |
| 2636 | ··-·reboot_required | 2636 | ··-·reboot_required |
| 2637 | ··-·restrict_strategy | 2637 | ··-·restrict_strategy |
| 2638 | Remediation_Shell_script_⇲ | 2638 | Remediation_Shell_script_⇲ |
| 2639 | #·Remediation·is·applicable·only·in·certain·platforms | 2639 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2640 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 2640 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 2641 | #·First·perform·the·remediation·of·the·syscall·rule | 2641 | #·First·perform·the·remediation·of·the·syscall·rule |
| 2642 | #·Retrieve·hardware·architecture·of·the·underlying·system | 2642 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 2643 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 2643 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 2644 | for·ARCH·in·"${RULE_ARCHS[@]}" | 2644 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 2645 | do | 2645 | do |
| Offset 3001, 16 lines modified | Offset 3001, 16 lines modified | ||
| 3001 | ··-·reboot_required | 3001 | ··-·reboot_required |
| 3002 | ··-·restrict_strategy | 3002 | ··-·restrict_strategy |
| 3003 | -·name:·Set·architecture·for·audit·chown·tasks | 3003 | -·name:·Set·architecture·for·audit·chown·tasks |
| 3004 | ··set_fact: | 3004 | ··set_fact: |
| 3005 | ····audit_arch:·b64 | 3005 | ····audit_arch:·b64 |
| 3006 | ··when: | 3006 | ··when: |
| 3007 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3008 | ··-·'"audit"·in·ansible_facts.packages' | 3007 | ··-·'"audit"·in·ansible_facts.packages' |
| 3008 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3009 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 3009 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 3010 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 3010 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 3011 | ··tags: | 3011 | ··tags: |
| 3012 | ··-·CJIS-5.4.1.1 | 3012 | ··-·CJIS-5.4.1.1 |
| 3013 | ··-·NIST-800-171-3.1.7 | 3013 | ··-·NIST-800-171-3.1.7 |
| 3014 | ··-·NIST-800-53-AU-12(c) | 3014 | ··-·NIST-800-53-AU-12(c) |
| 3015 | ··-·NIST-800-53-AU-2(d) | 3015 | ··-·NIST-800-53-AU-2(d) |
| Offset 3148, 16 lines modified | Offset 3148, 16 lines modified | ||
| 3148 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3148 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3149 | ········-F·auid!=unset·-F·key=perm_mod | 3149 | ········-F·auid!=unset·-F·key=perm_mod |
| 3150 | ······create:·true | 3150 | ······create:·true |
| 3151 | ······mode:·o-rwx | 3151 | ······mode:·o-rwx |
| 3152 | ······state:·present | 3152 | ······state:·present |
| 3153 | ····when:·syscalls_found·|·length·==·0 | 3153 | ····when:·syscalls_found·|·length·==·0 |
| 3154 | ··when: | 3154 | ··when: |
| 3155 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3156 | ··-·'"audit"·in·ansible_facts.packages' | 3155 | ··-·'"audit"·in·ansible_facts.packages' |
| 3156 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3157 | ··tags: | 3157 | ··tags: |
| 3158 | ··-·CJIS-5.4.1.1 | 3158 | ··-·CJIS-5.4.1.1 |
| 3159 | ··-·NIST-800-171-3.1.7 | 3159 | ··-·NIST-800-171-3.1.7 |
| 3160 | ··-·NIST-800-53-AU-12(c) | 3160 | ··-·NIST-800-53-AU-12(c) |
| 3161 | ··-·NIST-800-53-AU-2(d) | 3161 | ··-·NIST-800-53-AU-2(d) |
| 3162 | ··-·NIST-800-53-CM-6(a) | 3162 | ··-·NIST-800-53-CM-6(a) |
| 3163 | ··-·PCI-DSS-Req-10.5.5 | 3163 | ··-·PCI-DSS-Req-10.5.5 |
| Offset 3293, 16 lines modified | Offset 3293, 16 lines modified | ||
| 3293 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3293 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3294 | ········-F·auid!=unset·-F·key=perm_mod | 3294 | ········-F·auid!=unset·-F·key=perm_mod |
| 3295 | ······create:·true | 3295 | ······create:·true |
| 3296 | ······mode:·o-rwx | 3296 | ······mode:·o-rwx |
| 3297 | ······state:·present | 3297 | ······state:·present |
| 3298 | ····when:·syscalls_found·|·length·==·0 | 3298 | ····when:·syscalls_found·|·length·==·0 |
| 3299 | ··when: | 3299 | ··when: |
| 3300 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3301 | ··-·'"audit"·in·ansible_facts.packages' | 3300 | ··-·'"audit"·in·ansible_facts.packages' |
| 3301 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3302 | ··-·audit_arch·==·"b64" | 3302 | ··-·audit_arch·==·"b64" |
| 3303 | ··tags: | 3303 | ··tags: |
| 3304 | ··-·CJIS-5.4.1.1 | 3304 | ··-·CJIS-5.4.1.1 |
| 3305 | ··-·NIST-800-171-3.1.7 | 3305 | ··-·NIST-800-171-3.1.7 |
| 3306 | ··-·NIST-800-53-AU-12(c) | 3306 | ··-·NIST-800-53-AU-12(c) |
| 3307 | ··-·NIST-800-53-AU-2(d) | 3307 | ··-·NIST-800-53-AU-2(d) |
| 3308 | ··-·NIST-800-53-CM-6(a) | 3308 | ··-·NIST-800-53-CM-6(a) |
| Offset 3311, 15 lines modified | Offset 3311, 15 lines modified | ||
| 3311 | ··-·low_complexity | 3311 | ··-·low_complexity |
| 3312 | ··-·low_disruption | 3312 | ··-·low_disruption |
| 3313 | ··-·medium_severity | 3313 | ··-·medium_severity |
| Max diff block lines reached; 118894/123496 bytes (96.27%) of diff not shown. | |||
| Offset 52177, 23 lines modified | Offset 52177, 23 lines modified | ||
| 000cbd00:·6b65·793d·7072·6976·696c·6567·6564·0a20··key=privileged.· | 000cbd00:·6b65·793d·7072·6976·696c·6567·6564·0a20··key=privileged.· | ||
| 000cbd10:·2020·2020·2063·7265·6174·653a·2074·7275·······create:·tru | 000cbd10:·2020·2020·2063·7265·6174·653a·2074·7275·······create:·tru | ||
| 000cbd20:·650a·2020·2020·2020·6d6f·6465·3a20·6f2d··e.······mode:·o- | 000cbd20:·650a·2020·2020·2020·6d6f·6465·3a20·6f2d··e.······mode:·o- | ||
| 000cbd30:·7277·780a·2020·2020·2020·7374·6174·653a··rwx.······state: | 000cbd30:·7277·780a·2020·2020·2020·7374·6174·653a··rwx.······state: | ||
| 000cbd40:·2070·7265·7365·6e74·0a20·2020·2077·6865···present.····whe | 000cbd40:·2070·7265·7365·6e74·0a20·2020·2077·6865···present.····whe | ||
| 000cbd50:·6e3a·2073·7973·6361·6c6c·735f·666f·756e··n:·syscalls_foun | 000cbd50:·6e3a·2073·7973·6361·6c6c·735f·666f·756e··n:·syscalls_foun | ||
| 000cbd60:·6420·7c20·6c65·6e67·7468·203d·3d20·300a··d·|·length·==·0. | 000cbd60:·6420·7c20·6c65·6e67·7468·203d·3d20·300a··d·|·length·==·0. | ||
| 000cbd70:·2020·7768·656e·3a0a·2020·2d20· | 000cbd70:·2020·7768·656e·3a0a·2020·2d20·2722·6175····when:.··-·'"au | ||
| 000cbd80:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000cbd90:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000cbda0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000cbdb0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000cbdc0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 000cbdd0:·5d0a·2020·2d20·2722·6175·6469·7422·2069··].··-·'"audit"·i | |||
| 000cbde0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000cbd | 000cbd80:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | ||
| 000cbd90:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000cbda0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 000cbdb0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000cbdc0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000cbdd0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 000cbde0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 000cbdf0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 000cbe00:·3a0a·2020·2d20·4449·5341·2d53·5449·472d··:.··-·DISA-STIG- | 000cbe00:·3a0a·2020·2d20·4449·5341·2d53·5449·472d··:.··-·DISA-STIG- | ||
| 000cbe10:·4f4c·3037·2d30·302d·3033·3036·3930·0a20··OL07-00-030690.· | 000cbe10:·4f4c·3037·2d30·302d·3033·3036·3930·0a20··OL07-00-030690.· | ||
| 000cbe20:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 000cbe20:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 000cbe30:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | 000cbe30:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | ||
| 000cbe40:·3030·2d35·332d·4143·2d36·2839·290a·2020··00-53-AC-6(9).·· | 000cbe40:·3030·2d35·332d·4143·2d36·2839·290a·2020··00-53-AC-6(9).·· | ||
| 000cbe50:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | 000cbe50:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 000cbe60:·2d31·3228·6329·0a20·202d·204e·4953·542d··-12(c).··-·NIST- | 000cbe60:·2d31·3228·6329·0a20·202d·204e·4953·542d··-12(c).··-·NIST- | ||
| Offset 52225, 20 lines modified | Offset 52225, 20 lines modified | ||
| 000cc000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 000cc000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 000cc010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 000cc010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 000cc020:·2069·643d·2269·646d·3331·3839·3422·3e3c···id="idm31894">< | 000cc020:·2069·643d·2269·646d·3331·3839·3422·3e3c···id="idm31894">< | ||
| 000cc030:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | 000cc030:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 000cc040:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | 000cc040:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 000cc050:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | 000cc050:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 000cc060:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | 000cc060:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 000cc070:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 000cc080:·7120·6175·6469·7420·2661·6d70·3b26·616d··q·audit·&&am | |||
| 000cc0 | 000cc090:·703b·205b·2021·202d·6620·2f2e·646f·636b··p;·[·!·-f·/.dock | ||
| 000cc0 | 000cc0a0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 000cc0 | 000cc0b0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 000cc0 | 000cc0c0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 000cc0b0:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 000cc0c0:·7175·6965·7420·2d71·2061·7564·6974·3b20··quiet·-q·audit;· | |||
| 000cc0d0:·7468·656e·0a0a·4143·5449·4f4e·5f41·5243··then..ACTION_ARC | 000cc0d0:·7468·656e·0a0a·4143·5449·4f4e·5f41·5243··then..ACTION_ARC | ||
| 000cc0e0:·485f·4649·4c54·4552·533d·222d·6120·616c··H_FILTERS="-a·al | 000cc0e0:·485f·4649·4c54·4552·533d·222d·6120·616c··H_FILTERS="-a·al | ||
| 000cc0f0:·7761·7973·2c65·7869·7422·0a4f·5448·4552··ways,exit".OTHER | 000cc0f0:·7761·7973·2c65·7869·7422·0a4f·5448·4552··ways,exit".OTHER | ||
| 000cc100:·5f46·494c·5445·5253·3d22·2d46·2070·6174··_FILTERS="-F·pat | 000cc100:·5f46·494c·5445·5253·3d22·2d46·2070·6174··_FILTERS="-F·pat | ||
| 000cc110:·683d·2f75·7372·2f62·696e·2f73·7564·6f20··h=/usr/bin/sudo· | 000cc110:·683d·2f75·7372·2f62·696e·2f73·7564·6f20··h=/usr/bin/sudo· | ||
| 000cc120:·2d46·2070·6572·6d3d·7822·0a41·5549·445f··-F·perm=x".AUID_ | 000cc120:·2d46·2070·6572·6d3d·7822·0a41·5549·445f··-F·perm=x".AUID_ | ||
| 000cc130:·4649·4c54·4552·533d·222d·4620·6175·6964··FILTERS="-F·auid | 000cc130:·4649·4c54·4552·533d·222d·4620·6175·6964··FILTERS="-F·auid |
| Offset 8269, 16 lines modified | Offset 8269, 16 lines modified | ||
| 8269 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 8269 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 8270 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 8270 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 8271 | ······create:·true | 8271 | ······create:·true |
| 8272 | ······mode:·o-rwx | 8272 | ······mode:·o-rwx |
| 8273 | ······state:·present | 8273 | ······state:·present |
| 8274 | ····when:·syscalls_found·|·length·==·0 | 8274 | ····when:·syscalls_found·|·length·==·0 |
| 8275 | ··when: | 8275 | ··when: |
| 8276 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8277 | ··-·'"audit"·in·ansible_facts.packages' | 8276 | ··-·'"audit"·in·ansible_facts.packages' |
| 8277 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8278 | ··tags: | 8278 | ··tags: |
| 8279 | ··-·DISA-STIG-OL07-00-030690 | 8279 | ··-·DISA-STIG-OL07-00-030690 |
| 8280 | ··-·NIST-800-171-3.1.7 | 8280 | ··-·NIST-800-171-3.1.7 |
| 8281 | ··-·NIST-800-53-AC-6(9) | 8281 | ··-·NIST-800-53-AC-6(9) |
| 8282 | ··-·NIST-800-53-AU-12(c) | 8282 | ··-·NIST-800-53-AU-12(c) |
| 8283 | ··-·NIST-800-53-AU-2(d) | 8283 | ··-·NIST-800-53-AU-2(d) |
| 8284 | ··-·NIST-800-53-CM-6(a) | 8284 | ··-·NIST-800-53-CM-6(a) |
| Offset 8286, 15 lines modified | Offset 8286, 15 lines modified | ||
| 8286 | ··-·low_complexity | 8286 | ··-·low_complexity |
| 8287 | ··-·low_disruption | 8287 | ··-·low_disruption |
| 8288 | ··-·medium_severity | 8288 | ··-·medium_severity |
| 8289 | ··-·no_reboot_needed | 8289 | ··-·no_reboot_needed |
| 8290 | ··-·restrict_strategy | 8290 | ··-·restrict_strategy |
| 8291 | Remediation_Shell_script_⇲ | 8291 | Remediation_Shell_script_⇲ |
| 8292 | #·Remediation·is·applicable·only·in·certain·platforms | 8292 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8293 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 8293 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 8294 | ACTION_ARCH_FILTERS="-a·always,exit" | 8294 | ACTION_ARCH_FILTERS="-a·always,exit" |
| 8295 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" | 8295 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" |
| 8296 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" | 8296 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" |
| 8297 | SYSCALL="" | 8297 | SYSCALL="" |
| 8298 | KEY="privileged" | 8298 | KEY="privileged" |
| 8299 | SYSCALL_GROUPING="" | 8299 | SYSCALL_GROUPING="" |
| Offset 54225, 23 lines modified | Offset 54225, 23 lines modified | ||
| 000d3d00:·206b·6579·3d70·7269·7669·6c65·6765·640a···key=privileged. | 000d3d00:·206b·6579·3d70·7269·7669·6c65·6765·640a···key=privileged. | ||
| 000d3d10:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | 000d3d10:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | ||
| 000d3d20:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | 000d3d20:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | ||
| 000d3d30:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | 000d3d30:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | ||
| 000d3d40:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | 000d3d40:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | ||
| 000d3d50:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | 000d3d50:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | ||
| 000d3d60:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | 000d3d60:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | ||
| 000d3d70:·0a20·2077·6865·6e3a·0a20·202d·20 | 000d3d70:·0a20·2077·6865·6e3a·0a20·202d·2027·2261··.··when:.··-·'"a | ||
| 000d3d80:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000d3d90:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 000d3da0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 000d3db0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 000d3dc0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 000d3dd0:·225d·0a20·202d·2027·2261·7564·6974·2220··"].··-·'"audit"· | |||
| 000d3de0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 000d3d | 000d3d80:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | ||
| 000d3d90:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 000d3da0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 000d3db0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000d3dc0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000d3dd0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000d3de0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000d3df0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 000d3e00:·733a·0a20·202d·2044·4953·412d·5354·4947··s:.··-·DISA-STIG | 000d3e00:·733a·0a20·202d·2044·4953·412d·5354·4947··s:.··-·DISA-STIG | ||
| 000d3e10:·2d4f·4c30·372d·3030·2d30·3330·3639·300a··-OL07-00-030690. | 000d3e10:·2d4f·4c30·372d·3030·2d30·3330·3639·300a··-OL07-00-030690. | ||
| 000d3e20:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | 000d3e20:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 000d3e30:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | 000d3e30:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | ||
| 000d3e40:·3830·302d·3533·2d41·432d·3628·3929·0a20··800-53-AC-6(9).· | 000d3e40:·3830·302d·3533·2d41·432d·3628·3929·0a20··800-53-AC-6(9).· | ||
| 000d3e50:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 000d3e50:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 000d3e60:·552d·3132·2863·290a·2020·2d20·4e49·5354··U-12(c).··-·NIST | 000d3e60:·552d·3132·2863·290a·2020·2d20·4e49·5354··U-12(c).··-·NIST | ||
| Offset 54273, 20 lines modified | Offset 54273, 20 lines modified | ||
| 000d4000:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | 000d4000:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 000d4010:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | 000d4010:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 000d4020:·2220·6964·3d22·6964·6d33·3138·3934·223e··"·id="idm31894"> | 000d4020:·2220·6964·3d22·6964·6d33·3138·3934·223e··"·id="idm31894"> | ||
| 000d4030:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 000d4030:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 000d4040:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 000d4040:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 000d4050:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 000d4050:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 000d4060:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 000d4060:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 000d4070:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 000d4080:·2d71·2061·7564·6974·2026·616d·703b·2661··-q·audit·&&a | |||
| 000d40 | 000d4090:·6d70·3b20·5b20·2120·2d66·202f·2e64·6f63··mp;·[·!·-f·/.doc | ||
| 000d40 | 000d40a0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 000d40 | 000d40b0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 000d40 | 000d40c0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | ||
| 000d40b0:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 000d40c0:·2d71·7569·6574·202d·7120·6175·6469·743b··-quiet·-q·audit; | |||
| 000d40d0:·2074·6865·6e0a·0a41·4354·494f·4e5f·4152···then..ACTION_AR | 000d40d0:·2074·6865·6e0a·0a41·4354·494f·4e5f·4152···then..ACTION_AR | ||
| 000d40e0:·4348·5f46·494c·5445·5253·3d22·2d61·2061··CH_FILTERS="-a·a | 000d40e0:·4348·5f46·494c·5445·5253·3d22·2d61·2061··CH_FILTERS="-a·a | ||
| 000d40f0:·6c77·6179·732c·6578·6974·220a·4f54·4845··lways,exit".OTHE | 000d40f0:·6c77·6179·732c·6578·6974·220a·4f54·4845··lways,exit".OTHE | ||
| 000d4100:·525f·4649·4c54·4552·533d·222d·4620·7061··R_FILTERS="-F·pa | 000d4100:·525f·4649·4c54·4552·533d·222d·4620·7061··R_FILTERS="-F·pa | ||
| 000d4110:·7468·3d2f·7573·722f·6269·6e2f·7375·646f··th=/usr/bin/sudo | 000d4110:·7468·3d2f·7573·722f·6269·6e2f·7375·646f··th=/usr/bin/sudo | ||
| 000d4120:·202d·4620·7065·726d·3d78·220a·4155·4944···-F·perm=x".AUID | 000d4120:·202d·4620·7065·726d·3d78·220a·4155·4944···-F·perm=x".AUID | ||
| 000d4130:·5f46·494c·5445·5253·3d22·2d46·2061·7569··_FILTERS="-F·aui | 000d4130:·5f46·494c·5445·5253·3d22·2d46·2061·7569··_FILTERS="-F·aui |
| Offset 8618, 16 lines modified | Offset 8618, 16 lines modified | ||
| 8618 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 8618 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 8619 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 8619 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 8620 | ······create:·true | 8620 | ······create:·true |
| 8621 | ······mode:·o-rwx | 8621 | ······mode:·o-rwx |
| 8622 | ······state:·present | 8622 | ······state:·present |
| 8623 | ····when:·syscalls_found·|·length·==·0 | 8623 | ····when:·syscalls_found·|·length·==·0 |
| 8624 | ··when: | 8624 | ··when: |
| 8625 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8626 | ··-·'"audit"·in·ansible_facts.packages' | 8625 | ··-·'"audit"·in·ansible_facts.packages' |
| 8626 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8627 | ··tags: | 8627 | ··tags: |
| 8628 | ··-·DISA-STIG-OL07-00-030690 | 8628 | ··-·DISA-STIG-OL07-00-030690 |
| 8629 | ··-·NIST-800-171-3.1.7 | 8629 | ··-·NIST-800-171-3.1.7 |
| 8630 | ··-·NIST-800-53-AC-6(9) | 8630 | ··-·NIST-800-53-AC-6(9) |
| 8631 | ··-·NIST-800-53-AU-12(c) | 8631 | ··-·NIST-800-53-AU-12(c) |
| 8632 | ··-·NIST-800-53-AU-2(d) | 8632 | ··-·NIST-800-53-AU-2(d) |
| 8633 | ··-·NIST-800-53-CM-6(a) | 8633 | ··-·NIST-800-53-CM-6(a) |
| Offset 8635, 15 lines modified | Offset 8635, 15 lines modified | ||
| 8635 | ··-·low_complexity | 8635 | ··-·low_complexity |
| 8636 | ··-·low_disruption | 8636 | ··-·low_disruption |
| 8637 | ··-·medium_severity | 8637 | ··-·medium_severity |
| 8638 | ··-·no_reboot_needed | 8638 | ··-·no_reboot_needed |
| 8639 | ··-·restrict_strategy | 8639 | ··-·restrict_strategy |
| 8640 | Remediation_Shell_script_⇲ | 8640 | Remediation_Shell_script_⇲ |
| 8641 | #·Remediation·is·applicable·only·in·certain·platforms | 8641 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8642 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 8642 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 8643 | ACTION_ARCH_FILTERS="-a·always,exit" | 8643 | ACTION_ARCH_FILTERS="-a·always,exit" |
| 8644 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" | 8644 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" |
| 8645 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" | 8645 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" |
| 8646 | SYSCALL="" | 8646 | SYSCALL="" |
| 8647 | KEY="privileged" | 8647 | KEY="privileged" |
| 8648 | SYSCALL_GROUPING="" | 8648 | SYSCALL_GROUPING="" |
| Offset 49869, 23 lines modified | Offset 49869, 23 lines modified | ||
| 000c2cc0:·7669·6c65·6765·640a·2020·2020·2020·6372··vileged.······cr | 000c2cc0:·7669·6c65·6765·640a·2020·2020·2020·6372··vileged.······cr | ||
| 000c2cd0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 000c2cd0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 000c2ce0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 000c2ce0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 000c2cf0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 000c2cf0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 000c2d00:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 000c2d00:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 000c2d10:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 000c2d10:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 000c2d20:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 000c2d20:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 000c2d30:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 000c2d40:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000c2d50:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000c2d60:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000c2d70:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000c2d80:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 000c2d90:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 000c2d | 000c2d30:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 000c2d40:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000c2d50:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 000c2d60:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000c2d70:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 000c2d80:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 000c2d90:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 000c2da0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 000c2db0:· | 000c2db0:·225d·0a20·2074·6167·733a·0a20·202d·2044··"].··tags:.··-·D | ||
| 000c2dc0:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | 000c2dc0:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | ||
| 000c2dd0:·2d30·3330·3639·300a·2020·2d20·4e49·5354··-030690.··-·NIST | 000c2dd0:·2d30·3330·3639·300a·2020·2d20·4e49·5354··-030690.··-·NIST | ||
| 000c2de0:·2d38·3030·2d31·3731·2d33·2e31·2e37·0a20··-800-171-3.1.7.· | 000c2de0:·2d38·3030·2d31·3731·2d33·2e31·2e37·0a20··-800-171-3.1.7.· | ||
| 000c2df0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 000c2df0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 000c2e00:·432d·3628·3929·0a20·202d·204e·4953·542d··C-6(9).··-·NIST- | 000c2e00:·432d·3628·3929·0a20·202d·204e·4953·542d··C-6(9).··-·NIST- | ||
| 000c2e10:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | 000c2e10:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | ||
| 000c2e20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | 000c2e20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| Offset 49916, 21 lines modified | Offset 49916, 21 lines modified | ||
| 000c2fb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | 000c2fb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 000c2fc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | 000c2fc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 000c2fd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | 000c2fd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 000c2fe0:·6d33·3138·3934·223e·3c70·7265·3e3c·636f··m31894"><pre><co | 000c2fe0:·6d33·3138·3934·223e·3c70·7265·3e3c·636f··m31894"><pre><co | ||
| 000c2ff0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 000c2ff0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 000c3000:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 000c3000:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 000c3010:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 000c3010:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 000c3020:·6c61·7466·6f72·6d73·0a69·6620· | 000c3020:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | ||
| 000c3030:·2d | 000c3030:·2d2d·7175·6965·7420·2d71·2061·7564·6974··--quiet·-q·audit | ||
| 000c3040:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 000c3040:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 000c3050:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 000c3060:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 000c30 | 000c3070:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 000c3080:·6572·656e·7620·5d3b·2074·6865·6e0a·0a41··erenv·];·then..A | |||
| 000c3060:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 000c3070:·703b·2072·706d·202d·2d71·7569·6574·202d··p;·rpm·--quiet·- | |||
| 000c3080:·7120·6175·6469·743b·2074·6865·6e0a·0a41··q·audit;·then..A | |||
| 000c3090:·4354·494f·4e5f·4152·4348·5f46·494c·5445··CTION_ARCH_FILTE | 000c3090:·4354·494f·4e5f·4152·4348·5f46·494c·5445··CTION_ARCH_FILTE | ||
| 000c30a0:·5253·3d22·2d61·2061·6c77·6179·732c·6578··RS="-a·always,ex | 000c30a0:·5253·3d22·2d61·2061·6c77·6179·732c·6578··RS="-a·always,ex | ||
| 000c30b0:·6974·220a·4f54·4845·525f·4649·4c54·4552··it".OTHER_FILTER | 000c30b0:·6974·220a·4f54·4845·525f·4649·4c54·4552··it".OTHER_FILTER | ||
| 000c30c0:·533d·222d·4620·7061·7468·3d2f·7573·722f··S="-F·path=/usr/ | 000c30c0:·533d·222d·4620·7061·7468·3d2f·7573·722f··S="-F·path=/usr/ | ||
| 000c30d0:·6269·6e2f·7375·646f·202d·4620·7065·726d··bin/sudo·-F·perm | 000c30d0:·6269·6e2f·7375·646f·202d·4620·7065·726d··bin/sudo·-F·perm | ||
| 000c30e0:·3d78·220a·4155·4944·5f46·494c·5445·5253··=x".AUID_FILTERS | 000c30e0:·3d78·220a·4155·4944·5f46·494c·5445·5253··=x".AUID_FILTERS | ||
| 000c30f0:·3d22·2d46·2061·7569·6426·6774·3b3d·3130··="-F·auid>=10 | 000c30f0:·3d22·2d46·2061·7569·6426·6774·3b3d·3130··="-F·auid>=10 |
| Offset 7827, 16 lines modified | Offset 7827, 16 lines modified | ||
| 7827 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 7827 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 7828 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 7828 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 7829 | ······create:·true | 7829 | ······create:·true |
| 7830 | ······mode:·o-rwx | 7830 | ······mode:·o-rwx |
| 7831 | ······state:·present | 7831 | ······state:·present |
| 7832 | ····when:·syscalls_found·|·length·==·0 | 7832 | ····when:·syscalls_found·|·length·==·0 |
| 7833 | ··when: | 7833 | ··when: |
| 7834 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7835 | ··-·'"audit"·in·ansible_facts.packages' | 7834 | ··-·'"audit"·in·ansible_facts.packages' |
| 7835 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7836 | ··tags: | 7836 | ··tags: |
| 7837 | ··-·DISA-STIG-OL07-00-030690 | 7837 | ··-·DISA-STIG-OL07-00-030690 |
| 7838 | ··-·NIST-800-171-3.1.7 | 7838 | ··-·NIST-800-171-3.1.7 |
| 7839 | ··-·NIST-800-53-AC-6(9) | 7839 | ··-·NIST-800-53-AC-6(9) |
| 7840 | ··-·NIST-800-53-AU-12(c) | 7840 | ··-·NIST-800-53-AU-12(c) |
| 7841 | ··-·NIST-800-53-AU-2(d) | 7841 | ··-·NIST-800-53-AU-2(d) |
| 7842 | ··-·NIST-800-53-CM-6(a) | 7842 | ··-·NIST-800-53-CM-6(a) |
| Offset 7844, 15 lines modified | Offset 7844, 15 lines modified | ||
| 7844 | ··-·low_complexity | 7844 | ··-·low_complexity |
| 7845 | ··-·low_disruption | 7845 | ··-·low_disruption |
| 7846 | ··-·medium_severity | 7846 | ··-·medium_severity |
| 7847 | ··-·no_reboot_needed | 7847 | ··-·no_reboot_needed |
| 7848 | ··-·restrict_strategy | 7848 | ··-·restrict_strategy |
| 7849 | Remediation_Shell_script_⇲ | 7849 | Remediation_Shell_script_⇲ |
| 7850 | #·Remediation·is·applicable·only·in·certain·platforms | 7850 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7851 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7851 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7852 | ACTION_ARCH_FILTERS="-a·always,exit" | 7852 | ACTION_ARCH_FILTERS="-a·always,exit" |
| 7853 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" | 7853 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" |
| 7854 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" | 7854 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" |
| 7855 | SYSCALL="" | 7855 | SYSCALL="" |
| 7856 | KEY="privileged" | 7856 | KEY="privileged" |
| 7857 | SYSCALL_GROUPING="" | 7857 | SYSCALL_GROUPING="" |
| Offset 38595, 23 lines modified | Offset 38595, 23 lines modified | ||
| 00096c20:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | 00096c20:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 00096c30:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | 00096c30:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | ||
| 00096c40:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | 00096c40:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | ||
| 00096c50:·6520·666f·7220·6175·6469·7420·6368·6d6f··e·for·audit·chmo | 00096c50:·6520·666f·7220·6175·6469·7420·6368·6d6f··e·for·audit·chmo | ||
| 00096c60:·6420·7461·736b·730a·2020·7365·745f·6661··d·tasks.··set_fa | 00096c60:·6420·7461·736b·730a·2020·7365·745f·6661··d·tasks.··set_fa | ||
| 00096c70:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | 00096c70:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | ||
| 00096c80:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | 00096c80:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | ||
| 00096c90:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 00096ca0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00096cb0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00096cc0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00096cd0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00096ce0:·6e74·6169·6e65·7222·5d0a·2020·2d20·2722··ntainer"].··-·'" | |||
| 00096cf0:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | |||
| 00096 | 00096c90:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | ||
| 00096ca0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 00096cb0:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 00096cc0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 00096cd0:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 00096ce0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 00096cf0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 00096d00:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 00096d10:· | 00096d10:·5d0a·2020·2d20·616e·7369·626c·655f·6172··].··-·ansible_ar | ||
| 00096d20:·6368·6974·6563·7475·7265·203d·3d20·2261··chitecture·==·"a | 00096d20:·6368·6974·6563·7475·7265·203d·3d20·2261··chitecture·==·"a | ||
| 00096d30:·6172·6368·3634·2220·6f72·2061·6e73·6962··arch64"·or·ansib | 00096d30:·6172·6368·3634·2220·6f72·2061·6e73·6962··arch64"·or·ansib | ||
| 00096d40:·6c65·5f61·7263·6869·7465·6374·7572·6520··le_architecture· | 00096d40:·6c65·5f61·7263·6869·7465·6374·7572·6520··le_architecture· | ||
| 00096d50:·3d3d·2022·7070·6336·3422·206f·7220·616e··==·"ppc64"·or·an | 00096d50:·3d3d·2022·7070·6336·3422·206f·7220·616e··==·"ppc64"·or·an | ||
| 00096d60:·7369·626c·655f·6172·6368·6974·6563·7475··sible_architectu | 00096d60:·7369·626c·655f·6172·6368·6974·6563·7475··sible_architectu | ||
| 00096d70:·7265·0a20·2020·203d·3d20·2270·7063·3634··re.····==·"ppc64 | 00096d70:·7265·0a20·2020·203d·3d20·2270·7063·3634··re.····==·"ppc64 | ||
| 00096d80:·6c65·2220·6f72·2061·6e73·6962·6c65·5f61··le"·or·ansible_a | 00096d80:·6c65·2220·6f72·2061·6e73·6962·6c65·5f61··le"·or·ansible_a | ||
| Offset 38918, 23 lines modified | Offset 38918, 23 lines modified | ||
| 00098050:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | 00098050:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | ||
| 00098060:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 00098060:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 00098070:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | 00098070:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | ||
| 00098080:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 00098080:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 00098090:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | 00098090:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | ||
| 000980a0:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | 000980a0:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | ||
| 000980b0:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | 000980b0:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | ||
| 000980c0:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | |||
| 000980d0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 000980e0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 000980f0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00098100:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00098110:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 00098120:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | |||
| 00098 | 000980c0:·6e3a·0a20·202d·2027·2261·7564·6974·2220··n:.··-·'"audit"· | ||
| 000980d0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 000980e0:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 000980f0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00098100:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00098110:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00098120:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00098130:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 00098140:·6 | 00098140:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 00098150:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | 00098150:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | ||
| 00098160:·2d20·4449·5341·2d53·5449·472d·4f4c·3037··-·DISA-STIG-OL07 | 00098160:·2d20·4449·5341·2d53·5449·472d·4f4c·3037··-·DISA-STIG-OL07 | ||
| 00098170:·2d30·302d·3033·3034·3130·0a20·202d·204e··-00-030410.··-·N | 00098170:·2d30·302d·3033·3034·3130·0a20·202d·204e··-00-030410.··-·N | ||
| 00098180:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 00098180:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 00098190:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 00098190:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 000981a0:·332d·4155·2d31·3228·6329·0a20·202d·204e··3-AU-12(c).··-·N | 000981a0:·332d·4155·2d31·3228·6329·0a20·202d·204e··3-AU-12(c).··-·N | ||
| 000981b0:·4953·542d·3830·302d·3533·2d41·552d·3228··IST-800-53-AU-2( | 000981b0:·4953·542d·3830·302d·3533·2d41·552d·3228··IST-800-53-AU-2( | ||
| Offset 39230, 22 lines modified | Offset 39230, 22 lines modified | ||
| 000993d0:·6d6f·640a·2020·2020·2020·6372·6561·7465··mod.······create | 000993d0:·6d6f·640a·2020·2020·2020·6372·6561·7465··mod.······create | ||
| 000993e0:·3a20·7472·7565·0a20·2020·2020·206d·6f64··:·true.······mod | 000993e0:·3a20·7472·7565·0a20·2020·2020·206d·6f64··:·true.······mod | ||
| 000993f0:·653a·206f·2d72·7778·0a20·2020·2020·2073··e:·o-rwx.······s | 000993f0:·653a·206f·2d72·7778·0a20·2020·2020·2073··e:·o-rwx.······s | ||
| 00099400:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | 00099400:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | ||
| 00099410:·2020·7768·656e·3a20·7379·7363·616c·6c73····when:·syscalls | 00099410:·2020·7768·656e·3a20·7379·7363·616c·6c73····when:·syscalls | ||
| 00099420:·5f66·6f75·6e64·207c·206c·656e·6774·6820··_found·|·length· | 00099420:·5f66·6f75·6e64·207c·206c·656e·6774·6820··_found·|·length· | ||
| 00099430:·3d3d·2030·0a20·2077·6865·6e3a·0a20·202d··==·0.··when:.··- | 00099430:·3d3d·2030·0a20·2077·6865·6e3a·0a20·202d··==·0.··when:.··- | ||
| 00099440:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00099450:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 00099460:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00099470:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00099480:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00099490:·696e·6572·225d·0a20·202d·2027·2261·7564··iner"].··-·'"aud | |||
| 000994a0:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | |||
| 000994 | 00099440:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | ||
| 00099450:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00099460:·6765·7327·0a20·202d·2061·6e73·6962·6c65··ges'.··-·ansible | |||
| 00099470:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00099480:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00099490:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000994a0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000994b0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 000994c0:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | 000994c0:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | ||
| 000994d0:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | 000994d0:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | ||
| 000994e0:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | 000994e0:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | ||
| 000994f0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | 000994f0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 00099500:·3037·2d30·302d·3033·3034·3130·0a20·202d··07-00-030410.··- | 00099500:·3037·2d30·302d·3033·3034·3130·0a20·202d··07-00-030410.··- | ||
| 00099510:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 00099510:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 00099520:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 00099520:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| Offset 39279, 21 lines modified | Offset 39279, 21 lines modified | ||
| 000996e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 000996e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 000996f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 000996f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 00099700:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 00099700:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 00099710:·646d·3231·3535·3222·3e3c·7072·653e·3c63··dm21552"><pre><c | 00099710:·646d·3231·3535·3222·3e3c·7072·653e·3c63··dm21552"><pre><c | ||
| 00099720:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 00099720:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 00099730:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 00099730:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 00099740:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 00099740:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 00099750:·706c·6174·666f·726d·730a·6966·20 | 00099750:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | ||
| 00099760:·202d·2d71·7569·6574·202d·7120·6175·6469···--quiet·-q·audi | |||
| 00099770:·7420·2661·6d70·3b26·616d·703b·205b·2021··t·&&·[·! | |||
| 000997 | 00099780:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 000997 | 00099790:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 000997 | 000997a0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 000997b0:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 00099790:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | |||
| 000997a0:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 000997b0:·2d71·2061·7564·6974·3b20·7468·656e·0a0a··-q·audit;·then.. | |||
| 000997c0:·2320·4669·7273·7420·7065·7266·6f72·6d20··#·First·perform· | 000997c0:·2320·4669·7273·7420·7065·7266·6f72·6d20··#·First·perform· | ||
| 000997d0:·7468·6520·7265·6d65·6469·6174·696f·6e20··the·remediation· | 000997d0:·7468·6520·7265·6d65·6469·6174·696f·6e20··the·remediation· | ||
| 000997e0:·6f66·2074·6865·2073·7973·6361·6c6c·2072··of·the·syscall·r | 000997e0:·6f66·2074·6865·2073·7973·6361·6c6c·2072··of·the·syscall·r | ||
| 000997f0:·756c·650a·2320·5265·7472·6965·7665·2068··ule.#·Retrieve·h | 000997f0:·756c·650a·2320·5265·7472·6965·7665·2068··ule.#·Retrieve·h | ||
| 00099800:·6172·6477·6172·6520·6172·6368·6974·6563··ardware·architec | 00099800:·6172·6477·6172·6520·6172·6368·6974·6563··ardware·architec | ||
| 00099810:·7475·7265·206f·6620·7468·6520·756e·6465··ture·of·the·unde | 00099810:·7475·7265·206f·6620·7468·6520·756e·6465··ture·of·the·unde | ||
| 00099820:·726c·7969·6e67·2073·7973·7465·6d0a·5b20··rlying·system.[· | 00099820:·726c·7969·6e67·2073·7973·7465·6d0a·5b20··rlying·system.[· | ||
| Offset 41091, 23 lines modified | Offset 41091, 23 lines modified | ||
| 000a0820:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | 000a0820:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | ||
| 000a0830:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | 000a0830:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 000a0840:·790a·0a2d·206e·616d·653a·2053·6574·2061··y..-·name:·Set·a | 000a0840:·790a·0a2d·206e·616d·653a·2053·6574·2061··y..-·name:·Set·a | ||
| 000a0850:·7263·6869·7465·6374·7572·6520·666f·7220··rchitecture·for· | 000a0850:·7263·6869·7465·6374·7572·6520·666f·7220··rchitecture·for· | ||
| 000a0860:·6175·6469·7420·6368·6f77·6e20·7461·736b··audit·chown·task | 000a0860:·6175·6469·7420·6368·6f77·6e20·7461·736b··audit·chown·task | ||
| 000a0870:·730a·2020·7365·745f·6661·6374·3a0a·2020··s.··set_fact:.·· | 000a0870:·730a·2020·7365·745f·6661·6374·3a0a·2020··s.··set_fact:.·· | ||
| 000a0880:·2020·6175·6469·745f·6172·6368·3a20·6236····audit_arch:·b6 | 000a0880:·2020·6175·6469·745f·6172·6368·3a20·6236····audit_arch:·b6 | ||
| 000a0890:·340a·2020·7768·656e·3a0a·2020·2d20· | 000a0890:·340a·2020·7768·656e·3a0a·2020·2d20·2722··4.··when:.··-·'" | ||
| 000a08a0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000a08b0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| Max diff block lines reached; 392268/402610 bytes (97.43%) of diff not shown. | |||
| Offset 3751, 16 lines modified | Offset 3751, 16 lines modified | ||
| 3751 | ··-·reboot_required | 3751 | ··-·reboot_required |
| 3752 | ··-·restrict_strategy | 3752 | ··-·restrict_strategy |
| 3753 | -·name:·Set·architecture·for·audit·chmod·tasks | 3753 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 3754 | ··set_fact: | 3754 | ··set_fact: |
| 3755 | ····audit_arch:·b64 | 3755 | ····audit_arch:·b64 |
| 3756 | ··when: | 3756 | ··when: |
| 3757 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3758 | ··-·'"audit"·in·ansible_facts.packages' | 3757 | ··-·'"audit"·in·ansible_facts.packages' |
| 3758 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3759 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 3759 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 3760 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 3760 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 3761 | ··tags: | 3761 | ··tags: |
| 3762 | ··-·CJIS-5.4.1.1 | 3762 | ··-·CJIS-5.4.1.1 |
| 3763 | ··-·DISA-STIG-OL07-00-030410 | 3763 | ··-·DISA-STIG-OL07-00-030410 |
| 3764 | ··-·NIST-800-171-3.1.7 | 3764 | ··-·NIST-800-171-3.1.7 |
| 3765 | ··-·NIST-800-53-AU-12(c) | 3765 | ··-·NIST-800-53-AU-12(c) |
| Offset 3897, 16 lines modified | Offset 3897, 16 lines modified | ||
| 3897 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3897 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3898 | ········-F·auid!=unset·-F·key=perm_mod | 3898 | ········-F·auid!=unset·-F·key=perm_mod |
| 3899 | ······create:·true | 3899 | ······create:·true |
| 3900 | ······mode:·o-rwx | 3900 | ······mode:·o-rwx |
| 3901 | ······state:·present | 3901 | ······state:·present |
| 3902 | ····when:·syscalls_found·|·length·==·0 | 3902 | ····when:·syscalls_found·|·length·==·0 |
| 3903 | ··when: | 3903 | ··when: |
| 3904 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3905 | ··-·'"audit"·in·ansible_facts.packages' | 3904 | ··-·'"audit"·in·ansible_facts.packages' |
| 3905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3906 | ··tags: | 3906 | ··tags: |
| 3907 | ··-·CJIS-5.4.1.1 | 3907 | ··-·CJIS-5.4.1.1 |
| 3908 | ··-·DISA-STIG-OL07-00-030410 | 3908 | ··-·DISA-STIG-OL07-00-030410 |
| 3909 | ··-·NIST-800-171-3.1.7 | 3909 | ··-·NIST-800-171-3.1.7 |
| 3910 | ··-·NIST-800-53-AU-12(c) | 3910 | ··-·NIST-800-53-AU-12(c) |
| 3911 | ··-·NIST-800-53-AU-2(d) | 3911 | ··-·NIST-800-53-AU-2(d) |
| 3912 | ··-·NIST-800-53-CM-6(a) | 3912 | ··-·NIST-800-53-CM-6(a) |
| Offset 4041, 16 lines modified | Offset 4041, 16 lines modified | ||
| 4041 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4041 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4042 | ········-F·auid!=unset·-F·key=perm_mod | 4042 | ········-F·auid!=unset·-F·key=perm_mod |
| 4043 | ······create:·true | 4043 | ······create:·true |
| 4044 | ······mode:·o-rwx | 4044 | ······mode:·o-rwx |
| 4045 | ······state:·present | 4045 | ······state:·present |
| 4046 | ····when:·syscalls_found·|·length·==·0 | 4046 | ····when:·syscalls_found·|·length·==·0 |
| 4047 | ··when: | 4047 | ··when: |
| 4048 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4049 | ··-·'"audit"·in·ansible_facts.packages' | 4048 | ··-·'"audit"·in·ansible_facts.packages' |
| 4049 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4050 | ··-·audit_arch·==·"b64" | 4050 | ··-·audit_arch·==·"b64" |
| 4051 | ··tags: | 4051 | ··tags: |
| 4052 | ··-·CJIS-5.4.1.1 | 4052 | ··-·CJIS-5.4.1.1 |
| 4053 | ··-·DISA-STIG-OL07-00-030410 | 4053 | ··-·DISA-STIG-OL07-00-030410 |
| 4054 | ··-·NIST-800-171-3.1.7 | 4054 | ··-·NIST-800-171-3.1.7 |
| 4055 | ··-·NIST-800-53-AU-12(c) | 4055 | ··-·NIST-800-53-AU-12(c) |
| 4056 | ··-·NIST-800-53-AU-2(d) | 4056 | ··-·NIST-800-53-AU-2(d) |
| Offset 4060, 15 lines modified | Offset 4060, 15 lines modified | ||
| 4060 | ··-·low_complexity | 4060 | ··-·low_complexity |
| 4061 | ··-·low_disruption | 4061 | ··-·low_disruption |
| 4062 | ··-·medium_severity | 4062 | ··-·medium_severity |
| 4063 | ··-·reboot_required | 4063 | ··-·reboot_required |
| 4064 | ··-·restrict_strategy | 4064 | ··-·restrict_strategy |
| 4065 | Remediation_Shell_script_⇲ | 4065 | Remediation_Shell_script_⇲ |
| 4066 | #·Remediation·is·applicable·only·in·certain·platforms | 4066 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4067 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 4067 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 4068 | #·First·perform·the·remediation·of·the·syscall·rule | 4068 | #·First·perform·the·remediation·of·the·syscall·rule |
| 4069 | #·Retrieve·hardware·architecture·of·the·underlying·system | 4069 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 4070 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 4070 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 4071 | for·ARCH·in·"${RULE_ARCHS[@]}" | 4071 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 4072 | do | 4072 | do |
| Offset 4429, 16 lines modified | Offset 4429, 16 lines modified | ||
| 4429 | ··-·reboot_required | 4429 | ··-·reboot_required |
| 4430 | ··-·restrict_strategy | 4430 | ··-·restrict_strategy |
| 4431 | -·name:·Set·architecture·for·audit·chown·tasks | 4431 | -·name:·Set·architecture·for·audit·chown·tasks |
| 4432 | ··set_fact: | 4432 | ··set_fact: |
| 4433 | ····audit_arch:·b64 | 4433 | ····audit_arch:·b64 |
| 4434 | ··when: | 4434 | ··when: |
| 4435 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4436 | ··-·'"audit"·in·ansible_facts.packages' | 4435 | ··-·'"audit"·in·ansible_facts.packages' |
| 4436 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4437 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4437 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4438 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4438 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4439 | ··tags: | 4439 | ··tags: |
| 4440 | ··-·CJIS-5.4.1.1 | 4440 | ··-·CJIS-5.4.1.1 |
| 4441 | ··-·DISA-STIG-OL07-00-030370 | 4441 | ··-·DISA-STIG-OL07-00-030370 |
| 4442 | ··-·NIST-800-171-3.1.7 | 4442 | ··-·NIST-800-171-3.1.7 |
| 4443 | ··-·NIST-800-53-AU-12(c) | 4443 | ··-·NIST-800-53-AU-12(c) |
| Offset 4577, 16 lines modified | Offset 4577, 16 lines modified | ||
| 4577 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4577 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4578 | ········-F·auid!=unset·-F·key=perm_mod | 4578 | ········-F·auid!=unset·-F·key=perm_mod |
| 4579 | ······create:·true | 4579 | ······create:·true |
| 4580 | ······mode:·o-rwx | 4580 | ······mode:·o-rwx |
| 4581 | ······state:·present | 4581 | ······state:·present |
| 4582 | ····when:·syscalls_found·|·length·==·0 | 4582 | ····when:·syscalls_found·|·length·==·0 |
| 4583 | ··when: | 4583 | ··when: |
| 4584 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4585 | ··-·'"audit"·in·ansible_facts.packages' | 4584 | ··-·'"audit"·in·ansible_facts.packages' |
| 4585 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4586 | ··tags: | 4586 | ··tags: |
| 4587 | ··-·CJIS-5.4.1.1 | 4587 | ··-·CJIS-5.4.1.1 |
| 4588 | ··-·DISA-STIG-OL07-00-030370 | 4588 | ··-·DISA-STIG-OL07-00-030370 |
| 4589 | ··-·NIST-800-171-3.1.7 | 4589 | ··-·NIST-800-171-3.1.7 |
| 4590 | ··-·NIST-800-53-AU-12(c) | 4590 | ··-·NIST-800-53-AU-12(c) |
| 4591 | ··-·NIST-800-53-AU-2(d) | 4591 | ··-·NIST-800-53-AU-2(d) |
| 4592 | ··-·NIST-800-53-CM-6(a) | 4592 | ··-·NIST-800-53-CM-6(a) |
| Offset 4723, 16 lines modified | Offset 4723, 16 lines modified | ||
| 4723 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4723 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4724 | ········-F·auid!=unset·-F·key=perm_mod | 4724 | ········-F·auid!=unset·-F·key=perm_mod |
| 4725 | ······create:·true | 4725 | ······create:·true |
| 4726 | ······mode:·o-rwx | 4726 | ······mode:·o-rwx |
| 4727 | ······state:·present | 4727 | ······state:·present |
| 4728 | ····when:·syscalls_found·|·length·==·0 | 4728 | ····when:·syscalls_found·|·length·==·0 |
| 4729 | ··when: | 4729 | ··when: |
| 4730 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4731 | ··-·'"audit"·in·ansible_facts.packages' | 4730 | ··-·'"audit"·in·ansible_facts.packages' |
| 4731 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4732 | ··-·audit_arch·==·"b64" | 4732 | ··-·audit_arch·==·"b64" |
| 4733 | ··tags: | 4733 | ··tags: |
| 4734 | ··-·CJIS-5.4.1.1 | 4734 | ··-·CJIS-5.4.1.1 |
| 4735 | ··-·DISA-STIG-OL07-00-030370 | 4735 | ··-·DISA-STIG-OL07-00-030370 |
| 4736 | ··-·NIST-800-171-3.1.7 | 4736 | ··-·NIST-800-171-3.1.7 |
| 4737 | ··-·NIST-800-53-AU-12(c) | 4737 | ··-·NIST-800-53-AU-12(c) |
| 4738 | ··-·NIST-800-53-AU-2(d) | 4738 | ··-·NIST-800-53-AU-2(d) |
| Offset 4742, 15 lines modified | Offset 4742, 15 lines modified | ||
| 4742 | ··-·low_complexity | 4742 | ··-·low_complexity |
| 4743 | ··-·low_disruption | 4743 | ··-·low_disruption |
| 4744 | ··-·medium_severity | 4744 | ··-·medium_severity |
| Max diff block lines reached; 127963/132597 bytes (96.51%) of diff not shown. | |||
| Offset 46153, 23 lines modified | Offset 46153, 23 lines modified | ||
| 000b4480:·660a·2020·2020·7265·6765·7870·3a20·5e5c··f.····regexp:·^\ | 000b4480:·660a·2020·2020·7265·6765·7870·3a20·5e5c··f.····regexp:·^\ | ||
| 000b4490:·732a·666c·7573·685c·732a·3d5c·732a·2e2a··s*flush\s*=\s*.* | 000b4490:·732a·666c·7573·685c·732a·3d5c·732a·2e2a··s*flush\s*=\s*.* | ||
| 000b44a0:·240a·2020·2020·6c69·6e65·3a20·666c·7573··$.····line:·flus | 000b44a0:·240a·2020·2020·6c69·6e65·3a20·666c·7573··$.····line:·flus | ||
| 000b44b0:·6820·3d20·7b7b·2076·6172·5f61·7564·6974··h·=·{{·var_audit | 000b44b0:·6820·3d20·7b7b·2076·6172·5f61·7564·6974··h·=·{{·var_audit | ||
| 000b44c0:·645f·666c·7573·6820·7d7d·0a20·2020·2073··d_flush·}}.····s | 000b44c0:·645f·666c·7573·6820·7d7d·0a20·2020·2073··d_flush·}}.····s | ||
| 000b44d0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | 000b44d0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | ||
| 000b44e0:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | 000b44e0:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | ||
| 000b44f0:·2077·6865·6e3a·0a20·202d·20 | 000b44f0:·2077·6865·6e3a·0a20·202d·2027·2261·7564···when:.··-·'"aud | ||
| 000b4500:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 000b4510:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000b4520:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000b4530:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000b4540:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000b4550:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | |||
| 000b4560:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000b45 | 000b4500:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | ||
| 000b4510:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 000b4520:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 000b4530:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000b4540:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000b4550:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000b4560:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000b4570:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 000b4580:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 000b4580:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 000b4590:·312d·332e·332e·310a·2020·2d20·4e49·5354··1-3.3.1.··-·NIST | 000b4590:·312d·332e·332e·310a·2020·2d20·4e49·5354··1-3.3.1.··-·NIST | ||
| 000b45a0:·2d38·3030·2d35·332d·4155·2d31·310a·2020··-800-53-AU-11.·· | 000b45a0:·2d38·3030·2d35·332d·4155·2d31·310a·2020··-800-53-AU-11.·· | ||
| 000b45b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | 000b45b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 000b45c0:·2d36·2861·290a·2020·2d20·6175·6469·7464··-6(a).··-·auditd | 000b45c0:·2d36·2861·290a·2020·2d20·6175·6469·7464··-6(a).··-·auditd | ||
| 000b45d0:·5f64·6174·615f·7265·7465·6e74·696f·6e5f··_data_retention_ | 000b45d0:·5f64·6174·615f·7265·7465·6e74·696f·6e5f··_data_retention_ | ||
| 000b45e0:·666c·7573·680a·2020·2d20·6c6f·775f·636f··flush.··-·low_co | 000b45e0:·666c·7573·680a·2020·2d20·6c6f·775f·636f··flush.··-·low_co | ||
| Offset 46195, 21 lines modified | Offset 46195, 21 lines modified | ||
| 000b4720:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 000b4720:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 000b4730:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 000b4730:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 000b4740:·6c61·7073·6522·2069·643d·2269·646d·3334··lapse"·id="idm34 | 000b4740:·6c61·7073·6522·2069·643d·2269·646d·3334··lapse"·id="idm34 | ||
| 000b4750:·3132·3322·3e3c·7072·653e·3c63·6f64·653e··123"><pre><code> | 000b4750:·3132·3322·3e3c·7072·653e·3c63·6f64·653e··123"><pre><code> | ||
| 000b4760:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 000b4760:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 000b4770:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 000b4770:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 000b4780:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 000b4780:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 000b4790:·666f·726d·730a·6966·20 | 000b4790:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | ||
| 000b47a0:· | 000b47a0:·7569·6574·202d·7120·6175·6469·7420·2661··uiet·-q·audit·&a | ||
| 000b47b0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | 000b47b0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | ||
| 000b47c0:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 000b47d0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 000b47 | 000b47e0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | ||
| 000b47d0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 000b47e0:·7270·6d20·2d2d·7175·6965·7420·2d71·2061··rpm·--quiet·-q·a | |||
| 000b47f0:· | 000b47f0:·6e76·205d·3b20·7468·656e·0a0a·7661·725f··nv·];·then..var_ | ||
| 000b4800:·6175·6469·7464·5f66·6c75·7368·3d27·3c61··auditd_flush='<a | 000b4800:·6175·6469·7464·5f66·6c75·7368·3d27·3c61··auditd_flush='<a | ||
| 000b4810:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | 000b4810:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | ||
| 000b4820:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | 000b4820:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | ||
| 000b4830:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | 000b4830:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | ||
| 000b4840:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000b4840:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000b4850:·6e74·5f76·616c·7565·5f76·6172·5f61·7564··nt_value_var_aud | 000b4850:·6e74·5f76·616c·7565·5f76·6172·5f61·7564··nt_value_var_aud | ||
| 000b4860:·6974·645f·666c·7573·6822·3e69·6e63·7265··itd_flush">incre | 000b4860:·6974·645f·666c·7573·6822·3e69·6e63·7265··itd_flush">incre |
| Offset 6008, 29 lines modified | Offset 6008, 29 lines modified | ||
| 6008 | ··lineinfile: | 6008 | ··lineinfile: |
| 6009 | ····dest:·/etc/audit/auditd.conf | 6009 | ····dest:·/etc/audit/auditd.conf |
| 6010 | ····regexp:·^\s*flush\s*=\s*.*$ | 6010 | ····regexp:·^\s*flush\s*=\s*.*$ |
| 6011 | ····line:·flush·=·{{·var_auditd_flush·}} | 6011 | ····line:·flush·=·{{·var_auditd_flush·}} |
| 6012 | ····state:·present | 6012 | ····state:·present |
| 6013 | ····create:·true | 6013 | ····create:·true |
| 6014 | ··when: | 6014 | ··when: |
| 6015 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6016 | ··-·'"audit"·in·ansible_facts.packages' | 6015 | ··-·'"audit"·in·ansible_facts.packages' |
| 6016 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6017 | ··tags: | 6017 | ··tags: |
| 6018 | ··-·NIST-800-171-3.3.1 | 6018 | ··-·NIST-800-171-3.3.1 |
| 6019 | ··-·NIST-800-53-AU-11 | 6019 | ··-·NIST-800-53-AU-11 |
| 6020 | ··-·NIST-800-53-CM-6(a) | 6020 | ··-·NIST-800-53-CM-6(a) |
| 6021 | ··-·auditd_data_retention_flush | 6021 | ··-·auditd_data_retention_flush |
| 6022 | ··-·low_complexity | 6022 | ··-·low_complexity |
| 6023 | ··-·low_disruption | 6023 | ··-·low_disruption |
| 6024 | ··-·medium_severity | 6024 | ··-·medium_severity |
| 6025 | ··-·no_reboot_needed | 6025 | ··-·no_reboot_needed |
| 6026 | ··-·restrict_strategy | 6026 | ··-·restrict_strategy |
| 6027 | Remediation_Shell_script_⇲ | 6027 | Remediation_Shell_script_⇲ |
| 6028 | #·Remediation·is·applicable·only·in·certain·platforms | 6028 | #·Remediation·is·applicable·only·in·certain·platforms |
| 6029 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 6029 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 6030 | var_auditd_flush='incremental_async' | 6030 | var_auditd_flush='incremental_async' |
| 6031 | AUDITCONFIG=/etc/audit/auditd.conf | 6031 | AUDITCONFIG=/etc/audit/auditd.conf |
| 6032 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush | 6032 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush |
| Offset 26752, 23 lines modified | Offset 26752, 23 lines modified | ||
| 000687f0:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | 000687f0:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | ||
| 00068800:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | 00068800:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | ||
| 00068810:·653a·2053·6574·2061·7263·6869·7465·6374··e:·Set·architect | 00068810:·653a·2053·6574·2061·7263·6869·7465·6374··e:·Set·architect | ||
| 00068820:·7572·6520·666f·7220·6175·6469·7420·6368··ure·for·audit·ch | 00068820:·7572·6520·666f·7220·6175·6469·7420·6368··ure·for·audit·ch | ||
| 00068830:·6d6f·6420·7461·736b·730a·2020·7365·745f··mod·tasks.··set_ | 00068830:·6d6f·6420·7461·736b·730a·2020·7365·745f··mod·tasks.··set_ | ||
| 00068840:·6661·6374·3a0a·2020·2020·6175·6469·745f··fact:.····audit_ | 00068840:·6661·6374·3a0a·2020·2020·6175·6469·745f··fact:.····audit_ | ||
| 00068850:·6172·6368·3a20·6236·340a·2020·7768·656e··arch:·b64.··when | 00068850:·6172·6368·3a20·6236·340a·2020·7768·656e··arch:·b64.··when | ||
| 00068860:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 00068870:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00068880:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00068890:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000688a0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000688b0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000688c0:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 000688 | 00068860:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 00068870:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 00068880:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 00068890:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000688a0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000688b0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000688c0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000688d0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000688e0:· | 000688e0:·7222·5d0a·2020·2d20·616e·7369·626c·655f··r"].··-·ansible_ | ||
| 000688f0:·6172·6368·6974·6563·7475·7265·203d·3d20··architecture·==· | 000688f0:·6172·6368·6974·6563·7475·7265·203d·3d20··architecture·==· | ||
| 00068900:·2261·6172·6368·3634·2220·6f72·2061·6e73··"aarch64"·or·ans | 00068900:·2261·6172·6368·3634·2220·6f72·2061·6e73··"aarch64"·or·ans | ||
| 00068910:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | 00068910:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 00068920:·6520·3d3d·2022·7070·6336·3422·206f·7220··e·==·"ppc64"·or· | 00068920:·6520·3d3d·2022·7070·6336·3422·206f·7220··e·==·"ppc64"·or· | ||
| 00068930:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | 00068930:·616e·7369·626c·655f·6172·6368·6974·6563··ansible_architec | ||
| 00068940:·7475·7265·0a20·2020·203d·3d20·2270·7063··ture.····==·"ppc | 00068940:·7475·7265·0a20·2020·203d·3d20·2270·7063··ture.····==·"ppc | ||
| 00068950:·3634·6c65·2220·6f72·2061·6e73·6962·6c65··64le"·or·ansible | 00068950:·3634·6c65·2220·6f72·2061·6e73·6962·6c65··64le"·or·ansible | ||
| Offset 27075, 23 lines modified | Offset 27075, 23 lines modified | ||
| 00069c20:·6579·3d70·6572·6d5f·6d6f·640a·2020·2020··ey=perm_mod.···· | 00069c20:·6579·3d70·6572·6d5f·6d6f·640a·2020·2020··ey=perm_mod.···· | ||
| 00069c30:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | 00069c30:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | ||
| 00069c40:·2020·2020·206d·6f64·653a·206f·2d72·7778·······mode:·o-rwx | 00069c40:·2020·2020·206d·6f64·653a·206f·2d72·7778·······mode:·o-rwx | ||
| 00069c50:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | 00069c50:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | ||
| 00069c60:·6573·656e·740a·2020·2020·7768·656e·3a20··esent.····when:· | 00069c60:·6573·656e·740a·2020·2020·7768·656e·3a20··esent.····when:· | ||
| 00069c70:·7379·7363·616c·6c73·5f66·6f75·6e64·207c··syscalls_found·| | 00069c70:·7379·7363·616c·6c73·5f66·6f75·6e64·207c··syscalls_found·| | ||
| 00069c80:·206c·656e·6774·6820·3d3d·2030·0a20·2077···length·==·0.··w | 00069c80:·206c·656e·6774·6820·3d3d·2030·0a20·2077···length·==·0.··w | ||
| 00069c90:·6865·6e3a·0a20·202d·20 | 00069c90:·6865·6e3a·0a20·202d·2027·2261·7564·6974··hen:.··-·'"audit | ||
| 00069ca0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00069cb0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00069cc0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00069cd0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00069ce0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00069cf0:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | |||
| 00069 | 00069ca0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 00069cb0:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 00069cc0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00069cd0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 00069ce0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00069cf0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00069d00:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00069d10:·6 | 00069d10:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 00069d20:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | 00069d20:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | ||
| 00069d30:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | 00069d30:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 00069d40:·3037·2d30·302d·3033·3034·3130·0a20·202d··07-00-030410.··- | 00069d40:·3037·2d30·302d·3033·3034·3130·0a20·202d··07-00-030410.··- | ||
| 00069d50:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 00069d50:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 00069d60:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 00069d60:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| 00069d70:·2d35·332d·4155·2d31·3228·6329·0a20·202d··-53-AU-12(c).··- | 00069d70:·2d35·332d·4155·2d31·3228·6329·0a20·202d··-53-AU-12(c).··- | ||
| 00069d80:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | 00069d80:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| Offset 27387, 22 lines modified | Offset 27387, 22 lines modified | ||
| 0006afa0:·6d5f·6d6f·640a·2020·2020·2020·6372·6561··m_mod.······crea | 0006afa0:·6d5f·6d6f·640a·2020·2020·2020·6372·6561··m_mod.······crea | ||
| 0006afb0:·7465·3a20·7472·7565·0a20·2020·2020·206d··te:·true.······m | 0006afb0:·7465·3a20·7472·7565·0a20·2020·2020·206d··te:·true.······m | ||
| 0006afc0:·6f64·653a·206f·2d72·7778·0a20·2020·2020··ode:·o-rwx.····· | 0006afc0:·6f64·653a·206f·2d72·7778·0a20·2020·2020··ode:·o-rwx.····· | ||
| 0006afd0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | 0006afd0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | ||
| 0006afe0:·2020·2020·7768·656e·3a20·7379·7363·616c······when:·syscal | 0006afe0:·2020·2020·7768·656e·3a20·7379·7363·616c······when:·syscal | ||
| 0006aff0:·6c73·5f66·6f75·6e64·207c·206c·656e·6774··ls_found·|·lengt | 0006aff0:·6c73·5f66·6f75·6e64·207c·206c·656e·6774··ls_found·|·lengt | ||
| 0006b000:·6820·3d3d·2030·0a20·2077·6865·6e3a·0a20··h·==·0.··when:.· | 0006b000:·6820·3d3d·2030·0a20·2077·6865·6e3a·0a20··h·==·0.··when:.· | ||
| 0006b010:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 0006b020:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0006b030:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0006b040:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0006b050:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0006b060:·7461·696e·6572·225d·0a20·202d·2027·2261··tainer"].··-·'"a | |||
| 0006b070:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | |||
| 0006b0 | 0006b010:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | ||
| 0006b020:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0006b030:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | |||
| 0006b040:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0006b050:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0006b060:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0006b070:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0006b080:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0006b090:·0a20·202d·2061·7564·6974·5f61·7263·6820··.··-·audit_arch· | 0006b090:·0a20·202d·2061·7564·6974·5f61·7263·6820··.··-·audit_arch· | ||
| 0006b0a0:·3d3d·2022·6236·3422·0a20·2074·6167·733a··==·"b64".··tags: | 0006b0a0:·3d3d·2022·6236·3422·0a20·2074·6167·733a··==·"b64".··tags: | ||
| 0006b0b0:·0a20·202d·2043·4a49·532d·352e·342e·312e··.··-·CJIS-5.4.1. | 0006b0b0:·0a20·202d·2043·4a49·532d·352e·342e·312e··.··-·CJIS-5.4.1. | ||
| 0006b0c0:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | 0006b0c0:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0006b0d0:·4f4c·3037·2d30·302d·3033·3034·3130·0a20··OL07-00-030410.· | 0006b0d0:·4f4c·3037·2d30·302d·3033·3034·3130·0a20··OL07-00-030410.· | ||
| 0006b0e0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 0006b0e0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0006b0f0:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | 0006b0f0:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | ||
| Offset 27436, 21 lines modified | Offset 27436, 21 lines modified | ||
| 0006b2b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0006b2b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0006b2c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0006b2c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0006b2d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0006b2d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0006b2e0:·2269·646d·3231·3535·3222·3e3c·7072·653e··"idm21552"><pre> | 0006b2e0:·2269·646d·3231·3535·3222·3e3c·7072·653e··"idm21552"><pre> | ||
| 0006b2f0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | 0006b2f0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0006b300:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | 0006b300:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0006b310:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | 0006b310:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0006b320:·6e20·706c·6174·666f·726d·730a·6966·20 | 0006b320:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | ||
| 0006b330:·706d·202d·2d71·7569·6574·202d·7120·6175··pm·--quiet·-q·au | |||
| 0006b340:·6469·7420·2661·6d70·3b26·616d·703b·205b··dit·&&·[ | |||
| 0006b3 | 0006b350:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 0006b3 | 0006b360:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 0006b3 | 0006b370:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 0006b3 | 0006b380:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | ||
| 0006b370:·2661·6d70·3b20·7270·6d20·2d2d·7175·6965··&·rpm·--quie | |||
| 0006b380:·7420·2d71·2061·7564·6974·3b20·7468·656e··t·-q·audit;·then | |||
| 0006b390:·0a0a·2320·4669·7273·7420·7065·7266·6f72··..#·First·perfor | 0006b390:·0a0a·2320·4669·7273·7420·7065·7266·6f72··..#·First·perfor | ||
| 0006b3a0:·6d20·7468·6520·7265·6d65·6469·6174·696f··m·the·remediatio | 0006b3a0:·6d20·7468·6520·7265·6d65·6469·6174·696f··m·the·remediatio | ||
| 0006b3b0:·6e20·6f66·2074·6865·2073·7973·6361·6c6c··n·of·the·syscall | 0006b3b0:·6e20·6f66·2074·6865·2073·7973·6361·6c6c··n·of·the·syscall | ||
| 0006b3c0:·2072·756c·650a·2320·5265·7472·6965·7665···rule.#·Retrieve | 0006b3c0:·2072·756c·650a·2320·5265·7472·6965·7665···rule.#·Retrieve | ||
| 0006b3d0:·2068·6172·6477·6172·6520·6172·6368·6974···hardware·archit | 0006b3d0:·2068·6172·6477·6172·6520·6172·6368·6974···hardware·archit | ||
| 0006b3e0:·6563·7475·7265·206f·6620·7468·6520·756e··ecture·of·the·un | 0006b3e0:·6563·7475·7265·206f·6620·7468·6520·756e··ecture·of·the·un | ||
| 0006b3f0:·6465·726c·7969·6e67·2073·7973·7465·6d0a··derlying·system. | 0006b3f0:·6465·726c·7969·6e67·2073·7973·7465·6d0a··derlying·system. | ||
| Offset 29249, 22 lines modified | Offset 29249, 22 lines modified | ||
| 00072400:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | 00072400:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 00072410:·6567·790a·0a2d·206e·616d·653a·2053·6574··egy..-·name:·Set | 00072410:·6567·790a·0a2d·206e·616d·653a·2053·6574··egy..-·name:·Set | ||
| 00072420:·2061·7263·6869·7465·6374·7572·6520·666f···architecture·fo | 00072420:·2061·7263·6869·7465·6374·7572·6520·666f···architecture·fo | ||
| 00072430:·7220·6175·6469·7420·6368·6f77·6e20·7461··r·audit·chown·ta | 00072430:·7220·6175·6469·7420·6368·6f77·6e20·7461··r·audit·chown·ta | ||
| 00072440:·736b·730a·2020·7365·745f·6661·6374·3a0a··sks.··set_fact:. | 00072440:·736b·730a·2020·7365·745f·6661·6374·3a0a··sks.··set_fact:. | ||
| 00072450:·2020·2020·6175·6469·745f·6172·6368·3a20······audit_arch:· | 00072450:·2020·2020·6175·6469·745f·6172·6368·3a20······audit_arch:· | ||
| 00072460:·6236·340a·2020·7768·656e·3a0a·2020·2d20··b64.··when:.··-· | 00072460:·6236·340a·2020·7768·656e·3a0a·2020·2d20··b64.··when:.··-· | ||
| 00072470:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00072480:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00072490:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000724a0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000724b0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| Max diff block lines reached; 269409/279613 bytes (96.35%) of diff not shown. | |||
| Offset 1472, 16 lines modified | Offset 1472, 16 lines modified | ||
| 1472 | ··-·reboot_required | 1472 | ··-·reboot_required |
| 1473 | ··-·restrict_strategy | 1473 | ··-·restrict_strategy |
| 1474 | -·name:·Set·architecture·for·audit·chmod·tasks | 1474 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 1475 | ··set_fact: | 1475 | ··set_fact: |
| 1476 | ····audit_arch:·b64 | 1476 | ····audit_arch:·b64 |
| 1477 | ··when: | 1477 | ··when: |
| 1478 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1479 | ··-·'"audit"·in·ansible_facts.packages' | 1478 | ··-·'"audit"·in·ansible_facts.packages' |
| 1479 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1480 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1480 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 1481 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 1481 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 1482 | ··tags: | 1482 | ··tags: |
| 1483 | ··-·CJIS-5.4.1.1 | 1483 | ··-·CJIS-5.4.1.1 |
| 1484 | ··-·DISA-STIG-OL07-00-030410 | 1484 | ··-·DISA-STIG-OL07-00-030410 |
| 1485 | ··-·NIST-800-171-3.1.7 | 1485 | ··-·NIST-800-171-3.1.7 |
| 1486 | ··-·NIST-800-53-AU-12(c) | 1486 | ··-·NIST-800-53-AU-12(c) |
| Offset 1618, 16 lines modified | Offset 1618, 16 lines modified | ||
| 1618 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1618 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1619 | ········-F·auid!=unset·-F·key=perm_mod | 1619 | ········-F·auid!=unset·-F·key=perm_mod |
| 1620 | ······create:·true | 1620 | ······create:·true |
| 1621 | ······mode:·o-rwx | 1621 | ······mode:·o-rwx |
| 1622 | ······state:·present | 1622 | ······state:·present |
| 1623 | ····when:·syscalls_found·|·length·==·0 | 1623 | ····when:·syscalls_found·|·length·==·0 |
| 1624 | ··when: | 1624 | ··when: |
| 1625 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1626 | ··-·'"audit"·in·ansible_facts.packages' | 1625 | ··-·'"audit"·in·ansible_facts.packages' |
| 1626 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1627 | ··tags: | 1627 | ··tags: |
| 1628 | ··-·CJIS-5.4.1.1 | 1628 | ··-·CJIS-5.4.1.1 |
| 1629 | ··-·DISA-STIG-OL07-00-030410 | 1629 | ··-·DISA-STIG-OL07-00-030410 |
| 1630 | ··-·NIST-800-171-3.1.7 | 1630 | ··-·NIST-800-171-3.1.7 |
| 1631 | ··-·NIST-800-53-AU-12(c) | 1631 | ··-·NIST-800-53-AU-12(c) |
| 1632 | ··-·NIST-800-53-AU-2(d) | 1632 | ··-·NIST-800-53-AU-2(d) |
| 1633 | ··-·NIST-800-53-CM-6(a) | 1633 | ··-·NIST-800-53-CM-6(a) |
| Offset 1762, 16 lines modified | Offset 1762, 16 lines modified | ||
| 1762 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1762 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1763 | ········-F·auid!=unset·-F·key=perm_mod | 1763 | ········-F·auid!=unset·-F·key=perm_mod |
| 1764 | ······create:·true | 1764 | ······create:·true |
| 1765 | ······mode:·o-rwx | 1765 | ······mode:·o-rwx |
| 1766 | ······state:·present | 1766 | ······state:·present |
| 1767 | ····when:·syscalls_found·|·length·==·0 | 1767 | ····when:·syscalls_found·|·length·==·0 |
| 1768 | ··when: | 1768 | ··when: |
| 1769 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1770 | ··-·'"audit"·in·ansible_facts.packages' | 1769 | ··-·'"audit"·in·ansible_facts.packages' |
| 1770 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1771 | ··-·audit_arch·==·"b64" | 1771 | ··-·audit_arch·==·"b64" |
| 1772 | ··tags: | 1772 | ··tags: |
| 1773 | ··-·CJIS-5.4.1.1 | 1773 | ··-·CJIS-5.4.1.1 |
| 1774 | ··-·DISA-STIG-OL07-00-030410 | 1774 | ··-·DISA-STIG-OL07-00-030410 |
| 1775 | ··-·NIST-800-171-3.1.7 | 1775 | ··-·NIST-800-171-3.1.7 |
| 1776 | ··-·NIST-800-53-AU-12(c) | 1776 | ··-·NIST-800-53-AU-12(c) |
| 1777 | ··-·NIST-800-53-AU-2(d) | 1777 | ··-·NIST-800-53-AU-2(d) |
| Offset 1781, 15 lines modified | Offset 1781, 15 lines modified | ||
| 1781 | ··-·low_complexity | 1781 | ··-·low_complexity |
| 1782 | ··-·low_disruption | 1782 | ··-·low_disruption |
| 1783 | ··-·medium_severity | 1783 | ··-·medium_severity |
| 1784 | ··-·reboot_required | 1784 | ··-·reboot_required |
| 1785 | ··-·restrict_strategy | 1785 | ··-·restrict_strategy |
| 1786 | Remediation_Shell_script_⇲ | 1786 | Remediation_Shell_script_⇲ |
| 1787 | #·Remediation·is·applicable·only·in·certain·platforms | 1787 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1788 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 1788 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1789 | #·First·perform·the·remediation·of·the·syscall·rule | 1789 | #·First·perform·the·remediation·of·the·syscall·rule |
| 1790 | #·Retrieve·hardware·architecture·of·the·underlying·system | 1790 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 1791 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 1791 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 1792 | for·ARCH·in·"${RULE_ARCHS[@]}" | 1792 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 1793 | do | 1793 | do |
| Offset 2150, 16 lines modified | Offset 2150, 16 lines modified | ||
| 2150 | ··-·reboot_required | 2150 | ··-·reboot_required |
| 2151 | ··-·restrict_strategy | 2151 | ··-·restrict_strategy |
| 2152 | -·name:·Set·architecture·for·audit·chown·tasks | 2152 | -·name:·Set·architecture·for·audit·chown·tasks |
| 2153 | ··set_fact: | 2153 | ··set_fact: |
| 2154 | ····audit_arch:·b64 | 2154 | ····audit_arch:·b64 |
| 2155 | ··when: | 2155 | ··when: |
| 2156 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2157 | ··-·'"audit"·in·ansible_facts.packages' | 2156 | ··-·'"audit"·in·ansible_facts.packages' |
| 2157 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2158 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 2158 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 2159 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 2159 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 2160 | ··tags: | 2160 | ··tags: |
| 2161 | ··-·CJIS-5.4.1.1 | 2161 | ··-·CJIS-5.4.1.1 |
| 2162 | ··-·DISA-STIG-OL07-00-030370 | 2162 | ··-·DISA-STIG-OL07-00-030370 |
| 2163 | ··-·NIST-800-171-3.1.7 | 2163 | ··-·NIST-800-171-3.1.7 |
| 2164 | ··-·NIST-800-53-AU-12(c) | 2164 | ··-·NIST-800-53-AU-12(c) |
| Offset 2298, 16 lines modified | Offset 2298, 16 lines modified | ||
| 2298 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2298 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2299 | ········-F·auid!=unset·-F·key=perm_mod | 2299 | ········-F·auid!=unset·-F·key=perm_mod |
| 2300 | ······create:·true | 2300 | ······create:·true |
| 2301 | ······mode:·o-rwx | 2301 | ······mode:·o-rwx |
| 2302 | ······state:·present | 2302 | ······state:·present |
| 2303 | ····when:·syscalls_found·|·length·==·0 | 2303 | ····when:·syscalls_found·|·length·==·0 |
| 2304 | ··when: | 2304 | ··when: |
| 2305 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2306 | ··-·'"audit"·in·ansible_facts.packages' | 2305 | ··-·'"audit"·in·ansible_facts.packages' |
| 2306 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2307 | ··tags: | 2307 | ··tags: |
| 2308 | ··-·CJIS-5.4.1.1 | 2308 | ··-·CJIS-5.4.1.1 |
| 2309 | ··-·DISA-STIG-OL07-00-030370 | 2309 | ··-·DISA-STIG-OL07-00-030370 |
| 2310 | ··-·NIST-800-171-3.1.7 | 2310 | ··-·NIST-800-171-3.1.7 |
| 2311 | ··-·NIST-800-53-AU-12(c) | 2311 | ··-·NIST-800-53-AU-12(c) |
| 2312 | ··-·NIST-800-53-AU-2(d) | 2312 | ··-·NIST-800-53-AU-2(d) |
| 2313 | ··-·NIST-800-53-CM-6(a) | 2313 | ··-·NIST-800-53-CM-6(a) |
| Offset 2444, 16 lines modified | Offset 2444, 16 lines modified | ||
| 2444 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2444 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2445 | ········-F·auid!=unset·-F·key=perm_mod | 2445 | ········-F·auid!=unset·-F·key=perm_mod |
| 2446 | ······create:·true | 2446 | ······create:·true |
| 2447 | ······mode:·o-rwx | 2447 | ······mode:·o-rwx |
| 2448 | ······state:·present | 2448 | ······state:·present |
| 2449 | ····when:·syscalls_found·|·length·==·0 | 2449 | ····when:·syscalls_found·|·length·==·0 |
| 2450 | ··when: | 2450 | ··when: |
| 2451 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2452 | ··-·'"audit"·in·ansible_facts.packages' | 2451 | ··-·'"audit"·in·ansible_facts.packages' |
| 2452 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2453 | ··-·audit_arch·==·"b64" | 2453 | ··-·audit_arch·==·"b64" |
| 2454 | ··tags: | 2454 | ··tags: |
| 2455 | ··-·CJIS-5.4.1.1 | 2455 | ··-·CJIS-5.4.1.1 |
| 2456 | ··-·DISA-STIG-OL07-00-030370 | 2456 | ··-·DISA-STIG-OL07-00-030370 |
| 2457 | ··-·NIST-800-171-3.1.7 | 2457 | ··-·NIST-800-171-3.1.7 |
| 2458 | ··-·NIST-800-53-AU-12(c) | 2458 | ··-·NIST-800-53-AU-12(c) |
| 2459 | ··-·NIST-800-53-AU-2(d) | 2459 | ··-·NIST-800-53-AU-2(d) |
| Offset 2463, 15 lines modified | Offset 2463, 15 lines modified | ||
| 2463 | ··-·low_complexity | 2463 | ··-·low_complexity |
| 2464 | ··-·low_disruption | 2464 | ··-·low_disruption |
| 2465 | ··-·medium_severity | 2465 | ··-·medium_severity |
| Max diff block lines reached; 84956/89590 bytes (94.83%) of diff not shown. | |||
| Offset 30548, 23 lines modified | Offset 30548, 23 lines modified | ||
| 00077530:·6571·7569·7265·640a·2020·2d20·7265·7374··equired.··-·rest | 00077530:·6571·7569·7265·640a·2020·2d20·7265·7374··equired.··-·rest | ||
| 00077540:·7269·6374·5f73·7472·6174·6567·790a·0a2d··rict_strategy..- | 00077540:·7269·6374·5f73·7472·6174·6567·790a·0a2d··rict_strategy..- | ||
| 00077550:·206e·616d·653a·2053·6574·2061·7263·6869···name:·Set·archi | 00077550:·206e·616d·653a·2053·6574·2061·7263·6869···name:·Set·archi | ||
| 00077560:·7465·6374·7572·6520·666f·7220·6175·6469··tecture·for·audi | 00077560:·7465·6374·7572·6520·666f·7220·6175·6469··tecture·for·audi | ||
| 00077570:·7420·6368·6d6f·6420·7461·736b·730a·2020··t·chmod·tasks.·· | 00077570:·7420·6368·6d6f·6420·7461·736b·730a·2020··t·chmod·tasks.·· | ||
| 00077580:·7365·745f·6661·6374·3a0a·2020·2020·6175··set_fact:.····au | 00077580:·7365·745f·6661·6374·3a0a·2020·2020·6175··set_fact:.····au | ||
| 00077590:·6469·745f·6172·6368·3a20·6236·340a·2020··dit_arch:·b64.·· | 00077590:·6469·745f·6172·6368·3a20·6236·340a·2020··dit_arch:·b64.·· | ||
| 000775a0:·7768·656e·3a0a·2020·2d20· | 000775a0:·7768·656e·3a0a·2020·2d20·2722·6175·6469··when:.··-·'"audi | ||
| 000775b0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 000775c0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 000775d0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 000775e0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 000775f0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 00077600:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | |||
| 00077 | 000775b0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 000775c0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 000775d0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000775e0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000775f0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00077600:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00077610:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00077620:·6 | 00077620:·6169·6e65·7222·5d0a·2020·2d20·616e·7369··ainer"].··-·ansi | ||
| 00077630:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 00077630:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 00077640:·203d·3d20·2261·6172·6368·3634·2220·6f72···==·"aarch64"·or | 00077640:·203d·3d20·2261·6172·6368·3634·2220·6f72···==·"aarch64"·or | ||
| 00077650:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | 00077650:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | ||
| 00077660:·6374·7572·6520·3d3d·2022·7070·6336·3422··cture·==·"ppc64" | 00077660:·6374·7572·6520·3d3d·2022·7070·6336·3422··cture·==·"ppc64" | ||
| 00077670:·206f·7220·616e·7369·626c·655f·6172·6368···or·ansible_arch | 00077670:·206f·7220·616e·7369·626c·655f·6172·6368···or·ansible_arch | ||
| 00077680:·6974·6563·7475·7265·0a20·2020·203d·3d20··itecture.····==· | 00077680:·6974·6563·7475·7265·0a20·2020·203d·3d20··itecture.····==· | ||
| 00077690:·2270·7063·3634·6c65·2220·6f72·2061·6e73··"ppc64le"·or·ans | 00077690:·2270·7063·3634·6c65·2220·6f72·2061·6e73··"ppc64le"·or·ans | ||
| Offset 30871, 23 lines modified | Offset 30871, 23 lines modified | ||
| 00078960:·2d46·206b·6579·3d70·6572·6d5f·6d6f·640a··-F·key=perm_mod. | 00078960:·2d46·206b·6579·3d70·6572·6d5f·6d6f·640a··-F·key=perm_mod. | ||
| 00078970:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | 00078970:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | ||
| 00078980:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | 00078980:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | ||
| 00078990:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | 00078990:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | ||
| 000789a0:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | 000789a0:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | ||
| 000789b0:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | 000789b0:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | ||
| 000789c0:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | 000789c0:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | ||
| 000789d0:·0a20·2077·6865·6e3a·0a20·202d·20 | 000789d0:·0a20·2077·6865·6e3a·0a20·202d·2027·2261··.··when:.··-·'"a | ||
| 000789e0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000789f0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00078a00:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00078a10:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 00078a20:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 00078a30:·225d·0a20·202d·2027·2261·7564·6974·2220··"].··-·'"audit"· | |||
| 00078a40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 00078 | 000789e0:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | ||
| 000789f0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 00078a00:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 00078a10:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00078a20:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00078a30:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00078a40:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00078a50:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00078a60:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 00078a60:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 00078a70:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | 00078a70:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | ||
| 00078a80:·472d·4f4c·3037·2d30·302d·3033·3034·3130··G-OL07-00-030410 | 00078a80:·472d·4f4c·3037·2d30·302d·3033·3034·3130··G-OL07-00-030410 | ||
| 00078a90:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 00078a90:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 00078aa0:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 00078aa0:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 00078ab0:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | 00078ab0:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | ||
| 00078ac0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | 00078ac0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| Offset 31183, 23 lines modified | Offset 31183, 23 lines modified | ||
| 00079ce0:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | 00079ce0:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | ||
| 00079cf0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 00079cf0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 00079d00:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | 00079d00:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | ||
| 00079d10:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 00079d10:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 00079d20:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | 00079d20:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | ||
| 00079d30:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | 00079d30:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | ||
| 00079d40:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | 00079d40:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | ||
| 00079d50:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | |||
| 00079d60:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00079d70:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00079d80:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00079d90:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00079da0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 00079db0:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | |||
| 00079d | 00079d50:·6e3a·0a20·202d·2027·2261·7564·6974·2220··n:.··-·'"audit"· | ||
| 00079d60:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 00079d70:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 00079d80:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00079d90:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00079da0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00079db0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00079dc0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 00079dd0:·6 | 00079dd0:·6572·225d·0a20·202d·2061·7564·6974·5f61··er"].··-·audit_a | ||
| 00079de0:·7263·6820·3d3d·2022·6236·3422·0a20·2074··rch·==·"b64".··t | 00079de0:·7263·6820·3d3d·2022·6236·3422·0a20·2074··rch·==·"b64".··t | ||
| 00079df0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 00079df0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 00079e00:·342e·312e·310a·2020·2d20·4449·5341·2d53··4.1.1.··-·DISA-S | 00079e00:·342e·312e·310a·2020·2d20·4449·5341·2d53··4.1.1.··-·DISA-S | ||
| 00079e10:·5449·472d·4f4c·3037·2d30·302d·3033·3034··TIG-OL07-00-0304 | 00079e10:·5449·472d·4f4c·3037·2d30·302d·3033·3034··TIG-OL07-00-0304 | ||
| 00079e20:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | 00079e20:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | ||
| 00079e30:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | 00079e30:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | ||
| 00079e40:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | 00079e40:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | ||
| Offset 31233, 20 lines modified | Offset 31233, 20 lines modified | ||
| 0007a000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0007a000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0007a010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0007a010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0007a020:·2069·643d·2269·646d·3231·3535·3222·3e3c···id="idm21552">< | 0007a020:·2069·643d·2269·646d·3231·3535·3222·3e3c···id="idm21552">< | ||
| 0007a030:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | 0007a030:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0007a040:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | 0007a040:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0007a050:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | 0007a050:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0007a060:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | 0007a060:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0007a070:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0007a080:·7120·6175·6469·7420·2661·6d70·3b26·616d··q·audit·&&am | |||
| 0007a0 | 0007a090:·703b·205b·2021·202d·6620·2f2e·646f·636b··p;·[·!·-f·/.dock | ||
| 0007a0 | 0007a0a0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 0007a0 | 0007a0b0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 0007a0 | 0007a0c0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 0007a0b0:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 0007a0c0:·7175·6965·7420·2d71·2061·7564·6974·3b20··quiet·-q·audit;· | |||
| 0007a0d0:·7468·656e·0a0a·2320·4669·7273·7420·7065··then..#·First·pe | 0007a0d0:·7468·656e·0a0a·2320·4669·7273·7420·7065··then..#·First·pe | ||
| 0007a0e0:·7266·6f72·6d20·7468·6520·7265·6d65·6469··rform·the·remedi | 0007a0e0:·7266·6f72·6d20·7468·6520·7265·6d65·6469··rform·the·remedi | ||
| 0007a0f0:·6174·696f·6e20·6f66·2074·6865·2073·7973··ation·of·the·sys | 0007a0f0:·6174·696f·6e20·6f66·2074·6865·2073·7973··ation·of·the·sys | ||
| 0007a100:·6361·6c6c·2072·756c·650a·2320·5265·7472··call·rule.#·Retr | 0007a100:·6361·6c6c·2072·756c·650a·2320·5265·7472··call·rule.#·Retr | ||
| 0007a110:·6965·7665·2068·6172·6477·6172·6520·6172··ieve·hardware·ar | 0007a110:·6965·7665·2068·6172·6477·6172·6520·6172··ieve·hardware·ar | ||
| 0007a120:·6368·6974·6563·7475·7265·206f·6620·7468··chitecture·of·th | 0007a120:·6368·6974·6563·7475·7265·206f·6620·7468··chitecture·of·th | ||
| 0007a130:·6520·756e·6465·726c·7969·6e67·2073·7973··e·underlying·sys | 0007a130:·6520·756e·6465·726c·7969·6e67·2073·7973··e·underlying·sys | ||
| Offset 33045, 23 lines modified | Offset 33045, 23 lines modified | ||
| 00081140:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | 00081140:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 00081150:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | 00081150:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | ||
| 00081160:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | 00081160:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | ||
| 00081170:·6520·666f·7220·6175·6469·7420·6368·6f77··e·for·audit·chow | 00081170:·6520·666f·7220·6175·6469·7420·6368·6f77··e·for·audit·chow | ||
| 00081180:·6e20·7461·736b·730a·2020·7365·745f·6661··n·tasks.··set_fa | 00081180:·6e20·7461·736b·730a·2020·7365·745f·6661··n·tasks.··set_fa | ||
| 00081190:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | 00081190:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | ||
| 000811a0:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | 000811a0:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | ||
| 000811b0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 000811c0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000811d0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000811e0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 000811f0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| Max diff block lines reached; 704213/714555 bytes (98.55%) of diff not shown. | |||
| Offset 1871, 16 lines modified | Offset 1871, 16 lines modified | ||
| 1871 | ··-·reboot_required | 1871 | ··-·reboot_required |
| 1872 | ··-·restrict_strategy | 1872 | ··-·restrict_strategy |
| 1873 | -·name:·Set·architecture·for·audit·chmod·tasks | 1873 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 1874 | ··set_fact: | 1874 | ··set_fact: |
| 1875 | ····audit_arch:·b64 | 1875 | ····audit_arch:·b64 |
| 1876 | ··when: | 1876 | ··when: |
| 1877 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1878 | ··-·'"audit"·in·ansible_facts.packages' | 1877 | ··-·'"audit"·in·ansible_facts.packages' |
| 1878 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1879 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1879 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 1880 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 1880 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 1881 | ··tags: | 1881 | ··tags: |
| 1882 | ··-·CJIS-5.4.1.1 | 1882 | ··-·CJIS-5.4.1.1 |
| 1883 | ··-·DISA-STIG-OL07-00-030410 | 1883 | ··-·DISA-STIG-OL07-00-030410 |
| 1884 | ··-·NIST-800-171-3.1.7 | 1884 | ··-·NIST-800-171-3.1.7 |
| 1885 | ··-·NIST-800-53-AU-12(c) | 1885 | ··-·NIST-800-53-AU-12(c) |
| Offset 2017, 16 lines modified | Offset 2017, 16 lines modified | ||
| 2017 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2017 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2018 | ········-F·auid!=unset·-F·key=perm_mod | 2018 | ········-F·auid!=unset·-F·key=perm_mod |
| 2019 | ······create:·true | 2019 | ······create:·true |
| 2020 | ······mode:·o-rwx | 2020 | ······mode:·o-rwx |
| 2021 | ······state:·present | 2021 | ······state:·present |
| 2022 | ····when:·syscalls_found·|·length·==·0 | 2022 | ····when:·syscalls_found·|·length·==·0 |
| 2023 | ··when: | 2023 | ··when: |
| 2024 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2025 | ··-·'"audit"·in·ansible_facts.packages' | 2024 | ··-·'"audit"·in·ansible_facts.packages' |
| 2025 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2026 | ··tags: | 2026 | ··tags: |
| 2027 | ··-·CJIS-5.4.1.1 | 2027 | ··-·CJIS-5.4.1.1 |
| 2028 | ··-·DISA-STIG-OL07-00-030410 | 2028 | ··-·DISA-STIG-OL07-00-030410 |
| 2029 | ··-·NIST-800-171-3.1.7 | 2029 | ··-·NIST-800-171-3.1.7 |
| 2030 | ··-·NIST-800-53-AU-12(c) | 2030 | ··-·NIST-800-53-AU-12(c) |
| 2031 | ··-·NIST-800-53-AU-2(d) | 2031 | ··-·NIST-800-53-AU-2(d) |
| 2032 | ··-·NIST-800-53-CM-6(a) | 2032 | ··-·NIST-800-53-CM-6(a) |
| Offset 2161, 16 lines modified | Offset 2161, 16 lines modified | ||
| 2161 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2161 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2162 | ········-F·auid!=unset·-F·key=perm_mod | 2162 | ········-F·auid!=unset·-F·key=perm_mod |
| 2163 | ······create:·true | 2163 | ······create:·true |
| 2164 | ······mode:·o-rwx | 2164 | ······mode:·o-rwx |
| 2165 | ······state:·present | 2165 | ······state:·present |
| 2166 | ····when:·syscalls_found·|·length·==·0 | 2166 | ····when:·syscalls_found·|·length·==·0 |
| 2167 | ··when: | 2167 | ··when: |
| 2168 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2169 | ··-·'"audit"·in·ansible_facts.packages' | 2168 | ··-·'"audit"·in·ansible_facts.packages' |
| 2169 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2170 | ··-·audit_arch·==·"b64" | 2170 | ··-·audit_arch·==·"b64" |
| 2171 | ··tags: | 2171 | ··tags: |
| 2172 | ··-·CJIS-5.4.1.1 | 2172 | ··-·CJIS-5.4.1.1 |
| 2173 | ··-·DISA-STIG-OL07-00-030410 | 2173 | ··-·DISA-STIG-OL07-00-030410 |
| 2174 | ··-·NIST-800-171-3.1.7 | 2174 | ··-·NIST-800-171-3.1.7 |
| 2175 | ··-·NIST-800-53-AU-12(c) | 2175 | ··-·NIST-800-53-AU-12(c) |
| 2176 | ··-·NIST-800-53-AU-2(d) | 2176 | ··-·NIST-800-53-AU-2(d) |
| Offset 2180, 15 lines modified | Offset 2180, 15 lines modified | ||
| 2180 | ··-·low_complexity | 2180 | ··-·low_complexity |
| 2181 | ··-·low_disruption | 2181 | ··-·low_disruption |
| 2182 | ··-·medium_severity | 2182 | ··-·medium_severity |
| 2183 | ··-·reboot_required | 2183 | ··-·reboot_required |
| 2184 | ··-·restrict_strategy | 2184 | ··-·restrict_strategy |
| 2185 | Remediation_Shell_script_⇲ | 2185 | Remediation_Shell_script_⇲ |
| 2186 | #·Remediation·is·applicable·only·in·certain·platforms | 2186 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2187 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 2187 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 2188 | #·First·perform·the·remediation·of·the·syscall·rule | 2188 | #·First·perform·the·remediation·of·the·syscall·rule |
| 2189 | #·Retrieve·hardware·architecture·of·the·underlying·system | 2189 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 2190 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 2190 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 2191 | for·ARCH·in·"${RULE_ARCHS[@]}" | 2191 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 2192 | do | 2192 | do |
| Offset 2549, 16 lines modified | Offset 2549, 16 lines modified | ||
| 2549 | ··-·reboot_required | 2549 | ··-·reboot_required |
| 2550 | ··-·restrict_strategy | 2550 | ··-·restrict_strategy |
| 2551 | -·name:·Set·architecture·for·audit·chown·tasks | 2551 | -·name:·Set·architecture·for·audit·chown·tasks |
| 2552 | ··set_fact: | 2552 | ··set_fact: |
| 2553 | ····audit_arch:·b64 | 2553 | ····audit_arch:·b64 |
| 2554 | ··when: | 2554 | ··when: |
| 2555 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2556 | ··-·'"audit"·in·ansible_facts.packages' | 2555 | ··-·'"audit"·in·ansible_facts.packages' |
| 2556 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2557 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 2557 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 2558 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 2558 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 2559 | ··tags: | 2559 | ··tags: |
| 2560 | ··-·CJIS-5.4.1.1 | 2560 | ··-·CJIS-5.4.1.1 |
| 2561 | ··-·DISA-STIG-OL07-00-030370 | 2561 | ··-·DISA-STIG-OL07-00-030370 |
| 2562 | ··-·NIST-800-171-3.1.7 | 2562 | ··-·NIST-800-171-3.1.7 |
| 2563 | ··-·NIST-800-53-AU-12(c) | 2563 | ··-·NIST-800-53-AU-12(c) |
| Offset 2697, 16 lines modified | Offset 2697, 16 lines modified | ||
| 2697 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2697 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2698 | ········-F·auid!=unset·-F·key=perm_mod | 2698 | ········-F·auid!=unset·-F·key=perm_mod |
| 2699 | ······create:·true | 2699 | ······create:·true |
| 2700 | ······mode:·o-rwx | 2700 | ······mode:·o-rwx |
| 2701 | ······state:·present | 2701 | ······state:·present |
| 2702 | ····when:·syscalls_found·|·length·==·0 | 2702 | ····when:·syscalls_found·|·length·==·0 |
| 2703 | ··when: | 2703 | ··when: |
| 2704 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2705 | ··-·'"audit"·in·ansible_facts.packages' | 2704 | ··-·'"audit"·in·ansible_facts.packages' |
| 2705 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2706 | ··tags: | 2706 | ··tags: |
| 2707 | ··-·CJIS-5.4.1.1 | 2707 | ··-·CJIS-5.4.1.1 |
| 2708 | ··-·DISA-STIG-OL07-00-030370 | 2708 | ··-·DISA-STIG-OL07-00-030370 |
| 2709 | ··-·NIST-800-171-3.1.7 | 2709 | ··-·NIST-800-171-3.1.7 |
| 2710 | ··-·NIST-800-53-AU-12(c) | 2710 | ··-·NIST-800-53-AU-12(c) |
| 2711 | ··-·NIST-800-53-AU-2(d) | 2711 | ··-·NIST-800-53-AU-2(d) |
| 2712 | ··-·NIST-800-53-CM-6(a) | 2712 | ··-·NIST-800-53-CM-6(a) |
| Offset 2843, 16 lines modified | Offset 2843, 16 lines modified | ||
| 2843 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2843 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2844 | ········-F·auid!=unset·-F·key=perm_mod | 2844 | ········-F·auid!=unset·-F·key=perm_mod |
| 2845 | ······create:·true | 2845 | ······create:·true |
| 2846 | ······mode:·o-rwx | 2846 | ······mode:·o-rwx |
| 2847 | ······state:·present | 2847 | ······state:·present |
| 2848 | ····when:·syscalls_found·|·length·==·0 | 2848 | ····when:·syscalls_found·|·length·==·0 |
| 2849 | ··when: | 2849 | ··when: |
| 2850 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2851 | ··-·'"audit"·in·ansible_facts.packages' | 2850 | ··-·'"audit"·in·ansible_facts.packages' |
| 2851 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2852 | ··-·audit_arch·==·"b64" | 2852 | ··-·audit_arch·==·"b64" |
| 2853 | ··tags: | 2853 | ··tags: |
| 2854 | ··-·CJIS-5.4.1.1 | 2854 | ··-·CJIS-5.4.1.1 |
| 2855 | ··-·DISA-STIG-OL07-00-030370 | 2855 | ··-·DISA-STIG-OL07-00-030370 |
| 2856 | ··-·NIST-800-171-3.1.7 | 2856 | ··-·NIST-800-171-3.1.7 |
| 2857 | ··-·NIST-800-53-AU-12(c) | 2857 | ··-·NIST-800-53-AU-12(c) |
| 2858 | ··-·NIST-800-53-AU-2(d) | 2858 | ··-·NIST-800-53-AU-2(d) |
| Offset 2862, 15 lines modified | Offset 2862, 15 lines modified | ||
| 2862 | ··-·low_complexity | 2862 | ··-·low_complexity |
| 2863 | ··-·low_disruption | 2863 | ··-·low_disruption |
| 2864 | ··-·medium_severity | 2864 | ··-·medium_severity |
| Max diff block lines reached; 217306/221940 bytes (97.91%) of diff not shown. | |||
| Offset 94118, 22 lines modified | Offset 94118, 22 lines modified | ||
| 0016fa50:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | 0016fa50:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0016fa60:·7261·7465·6779·0a0a·2d20·6e61·6d65·3a20··rategy..-·name:· | 0016fa60:·7261·7465·6779·0a0a·2d20·6e61·6d65·3a20··rategy..-·name:· | ||
| 0016fa70:·5365·7420·6172·6368·6974·6563·7475·7265··Set·architecture | 0016fa70:·5365·7420·6172·6368·6974·6563·7475·7265··Set·architecture | ||
| 0016fa80:·2066·6f72·2061·7564·6974·2063·686d·6f64···for·audit·chmod | 0016fa80:·2066·6f72·2061·7564·6974·2063·686d·6f64···for·audit·chmod | ||
| 0016fa90:·2074·6173·6b73·0a20·2073·6574·5f66·6163···tasks.··set_fac | 0016fa90:·2074·6173·6b73·0a20·2073·6574·5f66·6163···tasks.··set_fac | ||
| 0016faa0:·743a·0a20·2020·2061·7564·6974·5f61·7263··t:.····audit_arc | 0016faa0:·743a·0a20·2020·2061·7564·6974·5f61·7263··t:.····audit_arc | ||
| 0016fab0:·683a·2062·3634·0a20·2077·6865·6e3a·0a20··h:·b64.··when:.· | 0016fab0:·683a·2062·3634·0a20·2077·6865·6e3a·0a20··h:·b64.··when:.· | ||
| 0016fac0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 0016fad0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0016fae0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0016faf0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0016fb00:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0016fb10:·7461·696e·6572·225d·0a20·202d·2027·2261··tainer"].··-·'"a | |||
| 0016fb20:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | |||
| 0016f | 0016fac0:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | ||
| 0016fad0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0016fae0:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | |||
| 0016faf0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0016fb00:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0016fb10:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0016fb20:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0016fb30:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0016fb40:·0a20·202d·2061·6e73·6962·6c65·5f61·7263··.··-·ansible_arc | 0016fb40:·0a20·202d·2061·6e73·6962·6c65·5f61·7263··.··-·ansible_arc | ||
| 0016fb50:·6869·7465·6374·7572·6520·3d3d·2022·6161··hitecture·==·"aa | 0016fb50:·6869·7465·6374·7572·6520·3d3d·2022·6161··hitecture·==·"aa | ||
| 0016fb60:·7263·6836·3422·206f·7220·616e·7369·626c··rch64"·or·ansibl | 0016fb60:·7263·6836·3422·206f·7220·616e·7369·626c··rch64"·or·ansibl | ||
| 0016fb70:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | 0016fb70:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | ||
| 0016fb80:·3d20·2270·7063·3634·2220·6f72·2061·6e73··=·"ppc64"·or·ans | 0016fb80:·3d20·2270·7063·3634·2220·6f72·2061·6e73··=·"ppc64"·or·ans | ||
| 0016fb90:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | 0016fb90:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 0016fba0:·650a·2020·2020·3d3d·2022·7070·6336·346c··e.····==·"ppc64l | 0016fba0:·650a·2020·2020·3d3d·2022·7070·6336·346c··e.····==·"ppc64l | ||
| Offset 94441, 23 lines modified | Offset 94441, 23 lines modified | ||
| 00170e80:·7065·726d·5f6d·6f64·0a20·2020·2020·2063··perm_mod.······c | 00170e80:·7065·726d·5f6d·6f64·0a20·2020·2020·2063··perm_mod.······c | ||
| 00170e90:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | 00170e90:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | ||
| 00170ea0:·2020·6d6f·6465·3a20·6f2d·7277·780a·2020····mode:·o-rwx.·· | 00170ea0:·2020·6d6f·6465·3a20·6f2d·7277·780a·2020····mode:·o-rwx.·· | ||
| 00170eb0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | 00170eb0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | ||
| 00170ec0:·6e74·0a20·2020·2077·6865·6e3a·2073·7973··nt.····when:·sys | 00170ec0:·6e74·0a20·2020·2077·6865·6e3a·2073·7973··nt.····when:·sys | ||
| 00170ed0:·6361·6c6c·735f·666f·756e·6420·7c20·6c65··calls_found·|·le | 00170ed0:·6361·6c6c·735f·666f·756e·6420·7c20·6c65··calls_found·|·le | ||
| 00170ee0:·6e67·7468·203d·3d20·300a·2020·7768·656e··ngth·==·0.··when | 00170ee0:·6e67·7468·203d·3d20·300a·2020·7768·656e··ngth·==·0.··when | ||
| 00170ef0:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 00170f00:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00170f10:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00170f20:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00170f30:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00170f40:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 00170f50:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 00170 | 00170ef0:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 00170f00:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 00170f10:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 00170f20:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 00170f30:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 00170f40:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 00170f50:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 00170f60:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 00170f70:· | 00170f70:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 00170f80:·434a·4953·2d35·2e34·2e31·2e31·0a20·202d··CJIS-5.4.1.1.··- | 00170f80:·434a·4953·2d35·2e34·2e31·2e31·0a20·202d··CJIS-5.4.1.1.··- | ||
| 00170f90:·2044·4953·412d·5354·4947·2d4f·4c30·372d···DISA-STIG-OL07- | 00170f90:·2044·4953·412d·5354·4947·2d4f·4c30·372d···DISA-STIG-OL07- | ||
| 00170fa0:·3030·2d30·3330·3431·300a·2020·2d20·4e49··00-030410.··-·NI | 00170fa0:·3030·2d30·3330·3431·300a·2020·2d20·4e49··00-030410.··-·NI | ||
| 00170fb0:·5354·2d38·3030·2d31·3731·2d33·2e31·2e37··ST-800-171-3.1.7 | 00170fb0:·5354·2d38·3030·2d31·3731·2d33·2e31·2e37··ST-800-171-3.1.7 | ||
| 00170fc0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | 00170fc0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 00170fd0:·2d41·552d·3132·2863·290a·2020·2d20·4e49··-AU-12(c).··-·NI | 00170fd0:·2d41·552d·3132·2863·290a·2020·2d20·4e49··-AU-12(c).··-·NI | ||
| 00170fe0:·5354·2d38·3030·2d35·332d·4155·2d32·2864··ST-800-53-AU-2(d | 00170fe0:·5354·2d38·3030·2d35·332d·4155·2d32·2864··ST-800-53-AU-2(d | ||
| Offset 94753, 22 lines modified | Offset 94753, 22 lines modified | ||
| 00172200:·6f64·0a20·2020·2020·2063·7265·6174·653a··od.······create: | 00172200:·6f64·0a20·2020·2020·2063·7265·6174·653a··od.······create: | ||
| 00172210:·2074·7275·650a·2020·2020·2020·6d6f·6465···true.······mode | 00172210:·2074·7275·650a·2020·2020·2020·6d6f·6465···true.······mode | ||
| 00172220:·3a20·6f2d·7277·780a·2020·2020·2020·7374··:·o-rwx.······st | 00172220:·3a20·6f2d·7277·780a·2020·2020·2020·7374··:·o-rwx.······st | ||
| 00172230:·6174·653a·2070·7265·7365·6e74·0a20·2020··ate:·present.··· | 00172230:·6174·653a·2070·7265·7365·6e74·0a20·2020··ate:·present.··· | ||
| 00172240:·2077·6865·6e3a·2073·7973·6361·6c6c·735f···when:·syscalls_ | 00172240:·2077·6865·6e3a·2073·7973·6361·6c6c·735f···when:·syscalls_ | ||
| 00172250:·666f·756e·6420·7c20·6c65·6e67·7468·203d··found·|·length·= | 00172250:·666f·756e·6420·7c20·6c65·6e67·7468·203d··found·|·length·= | ||
| 00172260:·3d20·300a·2020·7768·656e·3a0a·2020·2d20··=·0.··when:.··-· | 00172260:·3d20·300a·2020·7768·656e·3a0a·2020·2d20··=·0.··when:.··-· | ||
| 00172270:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00172280:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00172290:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 001722a0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 001722b0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 001722c0:·6e65·7222·5d0a·2020·2d20·2722·6175·6469··ner"].··-·'"audi | |||
| 001722d0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 001722 | 00172270:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | ||
| 00172280:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 00172290:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | |||
| 001722a0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 001722b0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 001722c0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 001722d0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 001722e0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 001722f0:·2d20·6175·6469·745f·6172·6368·203d·3d20··-·audit_arch·==· | 001722f0:·2d20·6175·6469·745f·6172·6368·203d·3d20··-·audit_arch·==· | ||
| 00172300:·2262·3634·220a·2020·7461·6773·3a0a·2020··"b64".··tags:.·· | 00172300:·2262·3634·220a·2020·7461·6773·3a0a·2020··"b64".··tags:.·· | ||
| 00172310:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | 00172310:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | ||
| 00172320:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | 00172320:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | ||
| 00172330:·372d·3030·2d30·3330·3431·300a·2020·2d20··7-00-030410.··-· | 00172330:·372d·3030·2d30·3330·3431·300a·2020·2d20··7-00-030410.··-· | ||
| 00172340:·4e49·5354·2d38·3030·2d31·3731·2d33·2e31··NIST-800-171-3.1 | 00172340:·4e49·5354·2d38·3030·2d31·3731·2d33·2e31··NIST-800-171-3.1 | ||
| 00172350:·2e37·0a20·202d·204e·4953·542d·3830·302d··.7.··-·NIST-800- | 00172350:·2e37·0a20·202d·204e·4953·542d·3830·302d··.7.··-·NIST-800- | ||
| Offset 94802, 21 lines modified | Offset 94802, 21 lines modified | ||
| 00172510:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | 00172510:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00172520:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | 00172520:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00172530:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | 00172530:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 00172540:·6d32·3135·3532·223e·3c70·7265·3e3c·636f··m21552"><pre><co | 00172540:·6d32·3135·3532·223e·3c70·7265·3e3c·636f··m21552"><pre><co | ||
| 00172550:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 00172550:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 00172560:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 00172560:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 00172570:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 00172570:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 00172580:·6c61·7466·6f72·6d73·0a69·6620· | 00172580:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | ||
| 00172590:·2d | 00172590:·2d2d·7175·6965·7420·2d71·2061·7564·6974··--quiet·-q·audit | ||
| 001725a0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 001725a0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 001725b0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 001725c0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 001725 | 001725d0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 001725e0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a23··erenv·];·then..# | |||
| 001725c0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 001725d0:·703b·2072·706d·202d·2d71·7569·6574·202d··p;·rpm·--quiet·- | |||
| 001725e0:·7120·6175·6469·743b·2074·6865·6e0a·0a23··q·audit;·then..# | |||
| 001725f0:·2046·6972·7374·2070·6572·666f·726d·2074···First·perform·t | 001725f0:·2046·6972·7374·2070·6572·666f·726d·2074···First·perform·t | ||
| 00172600:·6865·2072·656d·6564·6961·7469·6f6e·206f··he·remediation·o | 00172600:·6865·2072·656d·6564·6961·7469·6f6e·206f··he·remediation·o | ||
| 00172610:·6620·7468·6520·7379·7363·616c·6c20·7275··f·the·syscall·ru | 00172610:·6620·7468·6520·7379·7363·616c·6c20·7275··f·the·syscall·ru | ||
| 00172620:·6c65·0a23·2052·6574·7269·6576·6520·6861··le.#·Retrieve·ha | 00172620:·6c65·0a23·2052·6574·7269·6576·6520·6861··le.#·Retrieve·ha | ||
| 00172630:·7264·7761·7265·2061·7263·6869·7465·6374··rdware·architect | 00172630:·7264·7761·7265·2061·7263·6869·7465·6374··rdware·architect | ||
| 00172640:·7572·6520·6f66·2074·6865·2075·6e64·6572··ure·of·the·under | 00172640:·7572·6520·6f66·2074·6865·2075·6e64·6572··ure·of·the·under | ||
| 00172650:·6c79·696e·6720·7379·7374·656d·0a5b·2022··lying·system.[·" | 00172650:·6c79·696e·6720·7379·7374·656d·0a5b·2022··lying·system.[·" | ||
| Offset 96614, 23 lines modified | Offset 96614, 23 lines modified | ||
| 00179650:·745f·7265·7175·6972·6564·0a20·202d·2072··t_required.··-·r | 00179650:·745f·7265·7175·6972·6564·0a20·202d·2072··t_required.··-·r | ||
| 00179660:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | 00179660:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 00179670:·0a0a·2d20·6e61·6d65·3a20·5365·7420·6172··..-·name:·Set·ar | 00179670:·0a0a·2d20·6e61·6d65·3a20·5365·7420·6172··..-·name:·Set·ar | ||
| 00179680:·6368·6974·6563·7475·7265·2066·6f72·2061··chitecture·for·a | 00179680:·6368·6974·6563·7475·7265·2066·6f72·2061··chitecture·for·a | ||
| 00179690:·7564·6974·2063·686f·776e·2074·6173·6b73··udit·chown·tasks | 00179690:·7564·6974·2063·686f·776e·2074·6173·6b73··udit·chown·tasks | ||
| 001796a0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | 001796a0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 001796b0:·2061·7564·6974·5f61·7263·683a·2062·3634···audit_arch:·b64 | 001796b0:·2061·7564·6974·5f61·7263·683a·2062·3634···audit_arch:·b64 | ||
| 001796c0:·0a20·2077·6865·6e3a·0a20·202d·20 | 001796c0:·0a20·2077·6865·6e3a·0a20·202d·2027·2261··.··when:.··-·'"a | ||
| 001796d0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 001796e0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 001796f0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| Max diff block lines reached; 749839/759974 bytes (98.67%) of diff not shown. | |||
| Offset 14689, 16 lines modified | Offset 14689, 16 lines modified | ||
| 14689 | ··-·reboot_required | 14689 | ··-·reboot_required |
| 14690 | ··-·restrict_strategy | 14690 | ··-·restrict_strategy |
| 14691 | -·name:·Set·architecture·for·audit·chmod·tasks | 14691 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 14692 | ··set_fact: | 14692 | ··set_fact: |
| 14693 | ····audit_arch:·b64 | 14693 | ····audit_arch:·b64 |
| 14694 | ··when: | 14694 | ··when: |
| 14695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14696 | ··-·'"audit"·in·ansible_facts.packages' | 14695 | ··-·'"audit"·in·ansible_facts.packages' |
| 14696 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14697 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 14697 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 14698 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 14698 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 14699 | ··tags: | 14699 | ··tags: |
| 14700 | ··-·CJIS-5.4.1.1 | 14700 | ··-·CJIS-5.4.1.1 |
| 14701 | ··-·DISA-STIG-OL07-00-030410 | 14701 | ··-·DISA-STIG-OL07-00-030410 |
| 14702 | ··-·NIST-800-171-3.1.7 | 14702 | ··-·NIST-800-171-3.1.7 |
| 14703 | ··-·NIST-800-53-AU-12(c) | 14703 | ··-·NIST-800-53-AU-12(c) |
| Offset 14835, 16 lines modified | Offset 14835, 16 lines modified | ||
| 14835 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 14835 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 14836 | ········-F·auid!=unset·-F·key=perm_mod | 14836 | ········-F·auid!=unset·-F·key=perm_mod |
| 14837 | ······create:·true | 14837 | ······create:·true |
| 14838 | ······mode:·o-rwx | 14838 | ······mode:·o-rwx |
| 14839 | ······state:·present | 14839 | ······state:·present |
| 14840 | ····when:·syscalls_found·|·length·==·0 | 14840 | ····when:·syscalls_found·|·length·==·0 |
| 14841 | ··when: | 14841 | ··when: |
| 14842 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14843 | ··-·'"audit"·in·ansible_facts.packages' | 14842 | ··-·'"audit"·in·ansible_facts.packages' |
| 14843 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14844 | ··tags: | 14844 | ··tags: |
| 14845 | ··-·CJIS-5.4.1.1 | 14845 | ··-·CJIS-5.4.1.1 |
| 14846 | ··-·DISA-STIG-OL07-00-030410 | 14846 | ··-·DISA-STIG-OL07-00-030410 |
| 14847 | ··-·NIST-800-171-3.1.7 | 14847 | ··-·NIST-800-171-3.1.7 |
| 14848 | ··-·NIST-800-53-AU-12(c) | 14848 | ··-·NIST-800-53-AU-12(c) |
| 14849 | ··-·NIST-800-53-AU-2(d) | 14849 | ··-·NIST-800-53-AU-2(d) |
| 14850 | ··-·NIST-800-53-CM-6(a) | 14850 | ··-·NIST-800-53-CM-6(a) |
| Offset 14979, 16 lines modified | Offset 14979, 16 lines modified | ||
| 14979 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 14979 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 14980 | ········-F·auid!=unset·-F·key=perm_mod | 14980 | ········-F·auid!=unset·-F·key=perm_mod |
| 14981 | ······create:·true | 14981 | ······create:·true |
| 14982 | ······mode:·o-rwx | 14982 | ······mode:·o-rwx |
| 14983 | ······state:·present | 14983 | ······state:·present |
| 14984 | ····when:·syscalls_found·|·length·==·0 | 14984 | ····when:·syscalls_found·|·length·==·0 |
| 14985 | ··when: | 14985 | ··when: |
| 14986 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14987 | ··-·'"audit"·in·ansible_facts.packages' | 14986 | ··-·'"audit"·in·ansible_facts.packages' |
| 14987 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14988 | ··-·audit_arch·==·"b64" | 14988 | ··-·audit_arch·==·"b64" |
| 14989 | ··tags: | 14989 | ··tags: |
| 14990 | ··-·CJIS-5.4.1.1 | 14990 | ··-·CJIS-5.4.1.1 |
| 14991 | ··-·DISA-STIG-OL07-00-030410 | 14991 | ··-·DISA-STIG-OL07-00-030410 |
| 14992 | ··-·NIST-800-171-3.1.7 | 14992 | ··-·NIST-800-171-3.1.7 |
| 14993 | ··-·NIST-800-53-AU-12(c) | 14993 | ··-·NIST-800-53-AU-12(c) |
| 14994 | ··-·NIST-800-53-AU-2(d) | 14994 | ··-·NIST-800-53-AU-2(d) |
| Offset 14998, 15 lines modified | Offset 14998, 15 lines modified | ||
| 14998 | ··-·low_complexity | 14998 | ··-·low_complexity |
| 14999 | ··-·low_disruption | 14999 | ··-·low_disruption |
| 15000 | ··-·medium_severity | 15000 | ··-·medium_severity |
| 15001 | ··-·reboot_required | 15001 | ··-·reboot_required |
| 15002 | ··-·restrict_strategy | 15002 | ··-·restrict_strategy |
| 15003 | Remediation_Shell_script_⇲ | 15003 | Remediation_Shell_script_⇲ |
| 15004 | #·Remediation·is·applicable·only·in·certain·platforms | 15004 | #·Remediation·is·applicable·only·in·certain·platforms |
| 15005 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 15005 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 15006 | #·First·perform·the·remediation·of·the·syscall·rule | 15006 | #·First·perform·the·remediation·of·the·syscall·rule |
| 15007 | #·Retrieve·hardware·architecture·of·the·underlying·system | 15007 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 15008 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 15008 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 15009 | for·ARCH·in·"${RULE_ARCHS[@]}" | 15009 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 15010 | do | 15010 | do |
| Offset 15367, 16 lines modified | Offset 15367, 16 lines modified | ||
| 15367 | ··-·reboot_required | 15367 | ··-·reboot_required |
| 15368 | ··-·restrict_strategy | 15368 | ··-·restrict_strategy |
| 15369 | -·name:·Set·architecture·for·audit·chown·tasks | 15369 | -·name:·Set·architecture·for·audit·chown·tasks |
| 15370 | ··set_fact: | 15370 | ··set_fact: |
| 15371 | ····audit_arch:·b64 | 15371 | ····audit_arch:·b64 |
| 15372 | ··when: | 15372 | ··when: |
| 15373 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 15374 | ··-·'"audit"·in·ansible_facts.packages' | 15373 | ··-·'"audit"·in·ansible_facts.packages' |
| 15374 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 15375 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 15375 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 15376 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 15376 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 15377 | ··tags: | 15377 | ··tags: |
| 15378 | ··-·CJIS-5.4.1.1 | 15378 | ··-·CJIS-5.4.1.1 |
| 15379 | ··-·DISA-STIG-OL07-00-030370 | 15379 | ··-·DISA-STIG-OL07-00-030370 |
| 15380 | ··-·NIST-800-171-3.1.7 | 15380 | ··-·NIST-800-171-3.1.7 |
| 15381 | ··-·NIST-800-53-AU-12(c) | 15381 | ··-·NIST-800-53-AU-12(c) |
| Offset 15515, 16 lines modified | Offset 15515, 16 lines modified | ||
| 15515 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 15515 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 15516 | ········-F·auid!=unset·-F·key=perm_mod | 15516 | ········-F·auid!=unset·-F·key=perm_mod |
| 15517 | ······create:·true | 15517 | ······create:·true |
| 15518 | ······mode:·o-rwx | 15518 | ······mode:·o-rwx |
| 15519 | ······state:·present | 15519 | ······state:·present |
| 15520 | ····when:·syscalls_found·|·length·==·0 | 15520 | ····when:·syscalls_found·|·length·==·0 |
| 15521 | ··when: | 15521 | ··when: |
| 15522 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 15523 | ··-·'"audit"·in·ansible_facts.packages' | 15522 | ··-·'"audit"·in·ansible_facts.packages' |
| 15523 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 15524 | ··tags: | 15524 | ··tags: |
| 15525 | ··-·CJIS-5.4.1.1 | 15525 | ··-·CJIS-5.4.1.1 |
| 15526 | ··-·DISA-STIG-OL07-00-030370 | 15526 | ··-·DISA-STIG-OL07-00-030370 |
| 15527 | ··-·NIST-800-171-3.1.7 | 15527 | ··-·NIST-800-171-3.1.7 |
| 15528 | ··-·NIST-800-53-AU-12(c) | 15528 | ··-·NIST-800-53-AU-12(c) |
| 15529 | ··-·NIST-800-53-AU-2(d) | 15529 | ··-·NIST-800-53-AU-2(d) |
| 15530 | ··-·NIST-800-53-CM-6(a) | 15530 | ··-·NIST-800-53-CM-6(a) |
| Offset 15661, 16 lines modified | Offset 15661, 16 lines modified | ||
| 15661 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 15661 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 15662 | ········-F·auid!=unset·-F·key=perm_mod | 15662 | ········-F·auid!=unset·-F·key=perm_mod |
| 15663 | ······create:·true | 15663 | ······create:·true |
| 15664 | ······mode:·o-rwx | 15664 | ······mode:·o-rwx |
| 15665 | ······state:·present | 15665 | ······state:·present |
| 15666 | ····when:·syscalls_found·|·length·==·0 | 15666 | ····when:·syscalls_found·|·length·==·0 |
| 15667 | ··when: | 15667 | ··when: |
| 15668 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 15669 | ··-·'"audit"·in·ansible_facts.packages' | 15668 | ··-·'"audit"·in·ansible_facts.packages' |
| 15669 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 15670 | ··-·audit_arch·==·"b64" | 15670 | ··-·audit_arch·==·"b64" |
| 15671 | ··tags: | 15671 | ··tags: |
| 15672 | ··-·CJIS-5.4.1.1 | 15672 | ··-·CJIS-5.4.1.1 |
| 15673 | ··-·DISA-STIG-OL07-00-030370 | 15673 | ··-·DISA-STIG-OL07-00-030370 |
| 15674 | ··-·NIST-800-171-3.1.7 | 15674 | ··-·NIST-800-171-3.1.7 |
| 15675 | ··-·NIST-800-53-AU-12(c) | 15675 | ··-·NIST-800-53-AU-12(c) |
| 15676 | ··-·NIST-800-53-AU-2(d) | 15676 | ··-·NIST-800-53-AU-2(d) |
| Offset 15680, 15 lines modified | Offset 15680, 15 lines modified | ||
| 15680 | ··-·low_complexity | 15680 | ··-·low_complexity |
| 15681 | ··-·low_disruption | 15681 | ··-·low_disruption |
| 15682 | ··-·medium_severity | 15682 | ··-·medium_severity |
| Max diff block lines reached; 233867/238517 bytes (98.05%) of diff not shown. | |||
| Offset 46128, 23 lines modified | Offset 46128, 23 lines modified | ||
| 000b42f0:·660a·2020·2020·7265·6765·7870·3a20·5e5c··f.····regexp:·^\ | 000b42f0:·660a·2020·2020·7265·6765·7870·3a20·5e5c··f.····regexp:·^\ | ||
| 000b4300:·732a·666c·7573·685c·732a·3d5c·732a·2e2a··s*flush\s*=\s*.* | 000b4300:·732a·666c·7573·685c·732a·3d5c·732a·2e2a··s*flush\s*=\s*.* | ||
| 000b4310:·240a·2020·2020·6c69·6e65·3a20·666c·7573··$.····line:·flus | 000b4310:·240a·2020·2020·6c69·6e65·3a20·666c·7573··$.····line:·flus | ||
| 000b4320:·6820·3d20·7b7b·2076·6172·5f61·7564·6974··h·=·{{·var_audit | 000b4320:·6820·3d20·7b7b·2076·6172·5f61·7564·6974··h·=·{{·var_audit | ||
| 000b4330:·645f·666c·7573·6820·7d7d·0a20·2020·2073··d_flush·}}.····s | 000b4330:·645f·666c·7573·6820·7d7d·0a20·2020·2073··d_flush·}}.····s | ||
| 000b4340:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | 000b4340:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | ||
| 000b4350:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | 000b4350:·2020·6372·6561·7465·3a20·7472·7565·0a20····create:·true.· | ||
| 000b4360:·2077·6865·6e3a·0a20·202d·20 | 000b4360:·2077·6865·6e3a·0a20·202d·2027·2261·7564···when:.··-·'"aud | ||
| 000b4370:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 000b4380:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000b4390:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000b43a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000b43b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000b43c0:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | |||
| 000b43d0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000b43 | 000b4370:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | ||
| 000b4380:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 000b4390:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 000b43a0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000b43b0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000b43c0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000b43d0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000b43e0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 000b43f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 000b43f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 000b4400:·312d·332e·332e·310a·2020·2d20·4e49·5354··1-3.3.1.··-·NIST | 000b4400:·312d·332e·332e·310a·2020·2d20·4e49·5354··1-3.3.1.··-·NIST | ||
| 000b4410:·2d38·3030·2d35·332d·4155·2d31·310a·2020··-800-53-AU-11.·· | 000b4410:·2d38·3030·2d35·332d·4155·2d31·310a·2020··-800-53-AU-11.·· | ||
| 000b4420:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | 000b4420:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 000b4430:·2d36·2861·290a·2020·2d20·6175·6469·7464··-6(a).··-·auditd | 000b4430:·2d36·2861·290a·2020·2d20·6175·6469·7464··-6(a).··-·auditd | ||
| 000b4440:·5f64·6174·615f·7265·7465·6e74·696f·6e5f··_data_retention_ | 000b4440:·5f64·6174·615f·7265·7465·6e74·696f·6e5f··_data_retention_ | ||
| 000b4450:·666c·7573·680a·2020·2d20·6c6f·775f·636f··flush.··-·low_co | 000b4450:·666c·7573·680a·2020·2d20·6c6f·775f·636f··flush.··-·low_co | ||
| Offset 46170, 21 lines modified | Offset 46170, 21 lines modified | ||
| 000b4590:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 000b4590:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 000b45a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 000b45a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 000b45b0:·6c61·7073·6522·2069·643d·2269·646d·3334··lapse"·id="idm34 | 000b45b0:·6c61·7073·6522·2069·643d·2269·646d·3334··lapse"·id="idm34 | ||
| 000b45c0:·3132·3322·3e3c·7072·653e·3c63·6f64·653e··123"><pre><code> | 000b45c0:·3132·3322·3e3c·7072·653e·3c63·6f64·653e··123"><pre><code> | ||
| 000b45d0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 000b45d0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 000b45e0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 000b45e0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 000b45f0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 000b45f0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 000b4600:·666f·726d·730a·6966·20 | 000b4600:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | ||
| 000b4610:· | 000b4610:·7569·6574·202d·7120·6175·6469·7420·2661··uiet·-q·audit·&a | ||
| 000b4620:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | 000b4620:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | ||
| 000b4630:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 000b4640:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| 000b46 | 000b4650:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | ||
| 000b4640:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 000b4650:·7270·6d20·2d2d·7175·6965·7420·2d71·2061··rpm·--quiet·-q·a | |||
| 000b4660:· | 000b4660:·6e76·205d·3b20·7468·656e·0a0a·7661·725f··nv·];·then..var_ | ||
| 000b4670:·6175·6469·7464·5f66·6c75·7368·3d27·3c61··auditd_flush='<a | 000b4670:·6175·6469·7464·5f66·6c75·7368·3d27·3c61··auditd_flush='<a | ||
| 000b4680:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | 000b4680:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | ||
| 000b4690:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | 000b4690:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | ||
| 000b46a0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | 000b46a0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | ||
| 000b46b0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000b46b0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000b46c0:·6e74·5f76·616c·7565·5f76·6172·5f61·7564··nt_value_var_aud | 000b46c0:·6e74·5f76·616c·7565·5f76·6172·5f61·7564··nt_value_var_aud | ||
| 000b46d0:·6974·645f·666c·7573·6822·3e69·6e63·7265··itd_flush">incre | 000b46d0:·6974·645f·666c·7573·6822·3e69·6e63·7265··itd_flush">incre |
| Offset 6001, 29 lines modified | Offset 6001, 29 lines modified | ||
| 6001 | ··lineinfile: | 6001 | ··lineinfile: |
| 6002 | ····dest:·/etc/audit/auditd.conf | 6002 | ····dest:·/etc/audit/auditd.conf |
| 6003 | ····regexp:·^\s*flush\s*=\s*.*$ | 6003 | ····regexp:·^\s*flush\s*=\s*.*$ |
| 6004 | ····line:·flush·=·{{·var_auditd_flush·}} | 6004 | ····line:·flush·=·{{·var_auditd_flush·}} |
| 6005 | ····state:·present | 6005 | ····state:·present |
| 6006 | ····create:·true | 6006 | ····create:·true |
| 6007 | ··when: | 6007 | ··when: |
| 6008 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6009 | ··-·'"audit"·in·ansible_facts.packages' | 6008 | ··-·'"audit"·in·ansible_facts.packages' |
| 6009 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6010 | ··tags: | 6010 | ··tags: |
| 6011 | ··-·NIST-800-171-3.3.1 | 6011 | ··-·NIST-800-171-3.3.1 |
| 6012 | ··-·NIST-800-53-AU-11 | 6012 | ··-·NIST-800-53-AU-11 |
| 6013 | ··-·NIST-800-53-CM-6(a) | 6013 | ··-·NIST-800-53-CM-6(a) |
| 6014 | ··-·auditd_data_retention_flush | 6014 | ··-·auditd_data_retention_flush |
| 6015 | ··-·low_complexity | 6015 | ··-·low_complexity |
| 6016 | ··-·low_disruption | 6016 | ··-·low_disruption |
| 6017 | ··-·medium_severity | 6017 | ··-·medium_severity |
| 6018 | ··-·no_reboot_needed | 6018 | ··-·no_reboot_needed |
| 6019 | ··-·restrict_strategy | 6019 | ··-·restrict_strategy |
| 6020 | Remediation_Shell_script_⇲ | 6020 | Remediation_Shell_script_⇲ |
| 6021 | #·Remediation·is·applicable·only·in·certain·platforms | 6021 | #·Remediation·is·applicable·only·in·certain·platforms |
| 6022 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 6022 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 6023 | var_auditd_flush='incremental_async' | 6023 | var_auditd_flush='incremental_async' |
| 6024 | AUDITCONFIG=/etc/audit/auditd.conf | 6024 | AUDITCONFIG=/etc/audit/auditd.conf |
| 6025 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush | 6025 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush |
| Offset 48580, 23 lines modified | Offset 48580, 23 lines modified | ||
| 000bdc30:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | 000bdc30:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 000bdc40:·7374·7261·7465·6779·0a0a·2d20·6e61·6d65··strategy..-·name | 000bdc40:·7374·7261·7465·6779·0a0a·2d20·6e61·6d65··strategy..-·name | ||
| 000bdc50:·3a20·5365·7420·6172·6368·6974·6563·7475··:·Set·architectu | 000bdc50:·3a20·5365·7420·6172·6368·6974·6563·7475··:·Set·architectu | ||
| 000bdc60:·7265·2066·6f72·2061·7564·6974·2063·686d··re·for·audit·chm | 000bdc60:·7265·2066·6f72·2061·7564·6974·2063·686d··re·for·audit·chm | ||
| 000bdc70:·6f64·2074·6173·6b73·0a20·2073·6574·5f66··od·tasks.··set_f | 000bdc70:·6f64·2074·6173·6b73·0a20·2073·6574·5f66··od·tasks.··set_f | ||
| 000bdc80:·6163·743a·0a20·2020·2061·7564·6974·5f61··act:.····audit_a | 000bdc80:·6163·743a·0a20·2020·2061·7564·6974·5f61··act:.····audit_a | ||
| 000bdc90:·7263·683a·2062·3634·0a20·2077·6865·6e3a··rch:·b64.··when: | 000bdc90:·7263·683a·2062·3634·0a20·2077·6865·6e3a··rch:·b64.··when: | ||
| 000bdca0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 000bdcb0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000bdcc0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000bdcd0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000bdce0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000bdcf0:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 000bdd00:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 000bd | 000bdca0:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 000bdcb0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000bdcc0:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 000bdcd0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000bdce0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 000bdcf0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 000bdd00:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 000bdd10:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 000bdd20:· | 000bdd20:·225d·0a20·202d·2061·6e73·6962·6c65·5f61··"].··-·ansible_a | ||
| 000bdd30:·7263·6869·7465·6374·7572·6520·3d3d·2022··rchitecture·==·" | 000bdd30:·7263·6869·7465·6374·7572·6520·3d3d·2022··rchitecture·==·" | ||
| 000bdd40:·6161·7263·6836·3422·206f·7220·616e·7369··aarch64"·or·ansi | 000bdd40:·6161·7263·6836·3422·206f·7220·616e·7369··aarch64"·or·ansi | ||
| 000bdd50:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 000bdd50:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 000bdd60:·203d·3d20·2270·7063·3634·2220·6f72·2061···==·"ppc64"·or·a | 000bdd60:·203d·3d20·2270·7063·3634·2220·6f72·2061···==·"ppc64"·or·a | ||
| 000bdd70:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | 000bdd70:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | ||
| 000bdd80:·7572·650a·2020·2020·3d3d·2022·7070·6336··ure.····==·"ppc6 | 000bdd80:·7572·650a·2020·2020·3d3d·2022·7070·6336··ure.····==·"ppc6 | ||
| 000bdd90:·346c·6522·206f·7220·616e·7369·626c·655f··4le"·or·ansible_ | 000bdd90:·346c·6522·206f·7220·616e·7369·626c·655f··4le"·or·ansible_ | ||
| Offset 48903, 23 lines modified | Offset 48903, 23 lines modified | ||
| 000bf060:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | 000bf060:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | ||
| 000bf070:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | 000bf070:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | ||
| 000bf080:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | 000bf080:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | ||
| 000bf090:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | 000bf090:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | ||
| 000bf0a0:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | 000bf0a0:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | ||
| 000bf0b0:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | 000bf0b0:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | ||
| 000bf0c0:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | 000bf0c0:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | ||
| 000bf0d0:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 000bf0e0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000bf0f0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 000bf100:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 000bf110:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 000bf120:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 000bf130:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 000bf | 000bf0d0:·656e·3a0a·2020·2d20·2722·6175·6469·7422··en:.··-·'"audit" | ||
| 000bf0e0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000bf0f0:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 000bf100:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000bf110:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000bf120:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000bf130:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000bf140:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 000bf150:·6 | 000bf150:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 000bf160:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | 000bf160:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | ||
| 000bf170:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | 000bf170:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | ||
| 000bf180:·372d·3030·2d30·3330·3431·300a·2020·2d20··7-00-030410.··-· | 000bf180:·372d·3030·2d30·3330·3431·300a·2020·2d20··7-00-030410.··-· | ||
| 000bf190:·4e49·5354·2d38·3030·2d31·3731·2d33·2e31··NIST-800-171-3.1 | 000bf190:·4e49·5354·2d38·3030·2d31·3731·2d33·2e31··NIST-800-171-3.1 | ||
| 000bf1a0:·2e37·0a20·202d·204e·4953·542d·3830·302d··.7.··-·NIST-800- | 000bf1a0:·2e37·0a20·202d·204e·4953·542d·3830·302d··.7.··-·NIST-800- | ||
| 000bf1b0:·3533·2d41·552d·3132·2863·290a·2020·2d20··53-AU-12(c).··-· | 000bf1b0:·3533·2d41·552d·3132·2863·290a·2020·2d20··53-AU-12(c).··-· | ||
| 000bf1c0:·4e49·5354·2d38·3030·2d35·332d·4155·2d32··NIST-800-53-AU-2 | 000bf1c0:·4e49·5354·2d38·3030·2d35·332d·4155·2d32··NIST-800-53-AU-2 | ||
| Offset 49215, 22 lines modified | Offset 49215, 22 lines modified | ||
| 000c03e0:·5f6d·6f64·0a20·2020·2020·2063·7265·6174··_mod.······creat | 000c03e0:·5f6d·6f64·0a20·2020·2020·2063·7265·6174··_mod.······creat | ||
| 000c03f0:·653a·2074·7275·650a·2020·2020·2020·6d6f··e:·true.······mo | 000c03f0:·653a·2074·7275·650a·2020·2020·2020·6d6f··e:·true.······mo | ||
| 000c0400:·6465·3a20·6f2d·7277·780a·2020·2020·2020··de:·o-rwx.······ | 000c0400:·6465·3a20·6f2d·7277·780a·2020·2020·2020··de:·o-rwx.······ | ||
| 000c0410:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | 000c0410:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | ||
| 000c0420:·2020·2077·6865·6e3a·2073·7973·6361·6c6c·····when:·syscall | 000c0420:·2020·2077·6865·6e3a·2073·7973·6361·6c6c·····when:·syscall | ||
| 000c0430:·735f·666f·756e·6420·7c20·6c65·6e67·7468··s_found·|·length | 000c0430:·735f·666f·756e·6420·7c20·6c65·6e67·7468··s_found·|·length | ||
| 000c0440:·203d·3d20·300a·2020·7768·656e·3a0a·2020···==·0.··when:.·· | 000c0440:·203d·3d20·300a·2020·7768·656e·3a0a·2020···==·0.··when:.·· | ||
| 000c0450:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000c0460:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000c0470:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000c0480:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 000c0490:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 000c04a0:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 000c04b0:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 000c04 | 000c0450:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | ||
| 000c0460:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000c0470:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 000c0480:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 000c0490:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 000c04a0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 000c04b0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 000c04c0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 000c04d0:·2020·2d20·6175·6469·745f·6172·6368·203d····-·audit_arch·= | 000c04d0:·2020·2d20·6175·6469·745f·6172·6368·203d····-·audit_arch·= | ||
| 000c04e0:·3d20·2262·3634·220a·2020·7461·6773·3a0a··=·"b64".··tags:. | 000c04e0:·3d20·2262·3634·220a·2020·7461·6773·3a0a··=·"b64".··tags:. | ||
| 000c04f0:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | 000c04f0:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | ||
| 000c0500:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | 000c0500:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 000c0510:·4c30·372d·3030·2d30·3330·3431·300a·2020··L07-00-030410.·· | 000c0510:·4c30·372d·3030·2d30·3330·3431·300a·2020··L07-00-030410.·· | ||
| 000c0520:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | 000c0520:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 000c0530:·2e31·2e37·0a20·202d·204e·4953·542d·3830··.1.7.··-·NIST-80 | 000c0530:·2e31·2e37·0a20·202d·204e·4953·542d·3830··.1.7.··-·NIST-80 | ||
| Offset 49264, 21 lines modified | Offset 49264, 21 lines modified | ||
| 000c06f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | 000c06f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 000c0700:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | 000c0700:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 000c0710:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | 000c0710:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 000c0720:·6964·6d32·3135·3532·223e·3c70·7265·3e3c··idm21552"><pre>< | 000c0720:·6964·6d32·3135·3532·223e·3c70·7265·3e3c··idm21552"><pre>< | ||
| 000c0730:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 000c0730:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 000c0740:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 000c0740:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 000c0750:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 000c0750:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 000c0760:·2070·6c61·7466·6f72·6d73·0a69·6620· | 000c0760:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 000c0770:·6d20·2d2d·7175·6965·7420·2d71·2061·7564··m·--quiet·-q·aud | |||
| 000c0780:·6974·2026·616d·703b·2661·6d70·3b20·5b20··it·&&·[· | |||
| 000c07 | 000c0790:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 000c07 | 000c07a0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 000c07 | 000c07b0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 000c07c0:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 000c07a0:·696e·6572·656e·7620·5d20·2661·6d70·3b26··inerenv·]·&& | |||
| 000c07b0:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 000c07c0:·202d·7120·6175·6469·743b·2074·6865·6e0a···-q·audit;·then. | |||
| 000c07d0:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | 000c07d0:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | ||
| 000c07e0:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | 000c07e0:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | ||
| 000c07f0:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | 000c07f0:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | ||
| 000c0800:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | 000c0800:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | ||
| 000c0810:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | 000c0810:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | ||
| 000c0820:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | 000c0820:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | ||
| 000c0830:·6572·6c79·696e·6720·7379·7374·656d·0a5b··erlying·system.[ | 000c0830:·6572·6c79·696e·6720·7379·7374·656d·0a5b··erlying·system.[ | ||
| Offset 51076, 23 lines modified | Offset 51076, 23 lines modified | ||
| 000c7830:·6f6f·745f·7265·7175·6972·6564·0a20·202d··oot_required.··- | 000c7830:·6f6f·745f·7265·7175·6972·6564·0a20·202d··oot_required.··- | ||
| 000c7840:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | 000c7840:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 000c7850:·6779·0a0a·2d20·6e61·6d65·3a20·5365·7420··gy..-·name:·Set· | 000c7850:·6779·0a0a·2d20·6e61·6d65·3a20·5365·7420··gy..-·name:·Set· | ||
| 000c7860:·6172·6368·6974·6563·7475·7265·2066·6f72··architecture·for | 000c7860:·6172·6368·6974·6563·7475·7265·2066·6f72··architecture·for | ||
| 000c7870:·2061·7564·6974·2063·686f·776e·2074·6173···audit·chown·tas | 000c7870:·2061·7564·6974·2063·686f·776e·2074·6173···audit·chown·tas | ||
| 000c7880:·6b73·0a20·2073·6574·5f66·6163·743a·0a20··ks.··set_fact:.· | 000c7880:·6b73·0a20·2073·6574·5f66·6163·743a·0a20··ks.··set_fact:.· | ||
| 000c7890:·2020·2061·7564·6974·5f61·7263·683a·2062·····audit_arch:·b | 000c7890:·2020·2061·7564·6974·5f61·7263·683a·2062·····audit_arch:·b | ||
| 000c78a0:·3634·0a20·2077·6865·6e3a·0a20·202d·20 | 000c78a0:·3634·0a20·2077·6865·6e3a·0a20·202d·2027··64.··when:.··-·' | ||
| 000c78b0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 000c78c0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| Max diff block lines reached; 404751/415093 bytes (97.51%) of diff not shown. | |||
| Offset 6245, 16 lines modified | Offset 6245, 16 lines modified | ||
| 6245 | ··-·reboot_required | 6245 | ··-·reboot_required |
| 6246 | ··-·restrict_strategy | 6246 | ··-·restrict_strategy |
| 6247 | -·name:·Set·architecture·for·audit·chmod·tasks | 6247 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 6248 | ··set_fact: | 6248 | ··set_fact: |
| 6249 | ····audit_arch:·b64 | 6249 | ····audit_arch:·b64 |
| 6250 | ··when: | 6250 | ··when: |
| 6251 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6252 | ··-·'"audit"·in·ansible_facts.packages' | 6251 | ··-·'"audit"·in·ansible_facts.packages' |
| 6252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6253 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 6253 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 6254 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 6254 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 6255 | ··tags: | 6255 | ··tags: |
| 6256 | ··-·CJIS-5.4.1.1 | 6256 | ··-·CJIS-5.4.1.1 |
| 6257 | ··-·DISA-STIG-OL07-00-030410 | 6257 | ··-·DISA-STIG-OL07-00-030410 |
| 6258 | ··-·NIST-800-171-3.1.7 | 6258 | ··-·NIST-800-171-3.1.7 |
| 6259 | ··-·NIST-800-53-AU-12(c) | 6259 | ··-·NIST-800-53-AU-12(c) |
| Offset 6391, 16 lines modified | Offset 6391, 16 lines modified | ||
| 6391 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 6391 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 6392 | ········-F·auid!=unset·-F·key=perm_mod | 6392 | ········-F·auid!=unset·-F·key=perm_mod |
| 6393 | ······create:·true | 6393 | ······create:·true |
| 6394 | ······mode:·o-rwx | 6394 | ······mode:·o-rwx |
| 6395 | ······state:·present | 6395 | ······state:·present |
| 6396 | ····when:·syscalls_found·|·length·==·0 | 6396 | ····when:·syscalls_found·|·length·==·0 |
| 6397 | ··when: | 6397 | ··when: |
| 6398 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6399 | ··-·'"audit"·in·ansible_facts.packages' | 6398 | ··-·'"audit"·in·ansible_facts.packages' |
| 6399 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6400 | ··tags: | 6400 | ··tags: |
| 6401 | ··-·CJIS-5.4.1.1 | 6401 | ··-·CJIS-5.4.1.1 |
| 6402 | ··-·DISA-STIG-OL07-00-030410 | 6402 | ··-·DISA-STIG-OL07-00-030410 |
| 6403 | ··-·NIST-800-171-3.1.7 | 6403 | ··-·NIST-800-171-3.1.7 |
| 6404 | ··-·NIST-800-53-AU-12(c) | 6404 | ··-·NIST-800-53-AU-12(c) |
| 6405 | ··-·NIST-800-53-AU-2(d) | 6405 | ··-·NIST-800-53-AU-2(d) |
| 6406 | ··-·NIST-800-53-CM-6(a) | 6406 | ··-·NIST-800-53-CM-6(a) |
| Offset 6535, 16 lines modified | Offset 6535, 16 lines modified | ||
| 6535 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 6535 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 6536 | ········-F·auid!=unset·-F·key=perm_mod | 6536 | ········-F·auid!=unset·-F·key=perm_mod |
| 6537 | ······create:·true | 6537 | ······create:·true |
| 6538 | ······mode:·o-rwx | 6538 | ······mode:·o-rwx |
| 6539 | ······state:·present | 6539 | ······state:·present |
| 6540 | ····when:·syscalls_found·|·length·==·0 | 6540 | ····when:·syscalls_found·|·length·==·0 |
| 6541 | ··when: | 6541 | ··when: |
| 6542 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6543 | ··-·'"audit"·in·ansible_facts.packages' | 6542 | ··-·'"audit"·in·ansible_facts.packages' |
| 6543 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6544 | ··-·audit_arch·==·"b64" | 6544 | ··-·audit_arch·==·"b64" |
| 6545 | ··tags: | 6545 | ··tags: |
| 6546 | ··-·CJIS-5.4.1.1 | 6546 | ··-·CJIS-5.4.1.1 |
| 6547 | ··-·DISA-STIG-OL07-00-030410 | 6547 | ··-·DISA-STIG-OL07-00-030410 |
| 6548 | ··-·NIST-800-171-3.1.7 | 6548 | ··-·NIST-800-171-3.1.7 |
| 6549 | ··-·NIST-800-53-AU-12(c) | 6549 | ··-·NIST-800-53-AU-12(c) |
| 6550 | ··-·NIST-800-53-AU-2(d) | 6550 | ··-·NIST-800-53-AU-2(d) |
| Offset 6554, 15 lines modified | Offset 6554, 15 lines modified | ||
| 6554 | ··-·low_complexity | 6554 | ··-·low_complexity |
| 6555 | ··-·low_disruption | 6555 | ··-·low_disruption |
| 6556 | ··-·medium_severity | 6556 | ··-·medium_severity |
| 6557 | ··-·reboot_required | 6557 | ··-·reboot_required |
| 6558 | ··-·restrict_strategy | 6558 | ··-·restrict_strategy |
| 6559 | Remediation_Shell_script_⇲ | 6559 | Remediation_Shell_script_⇲ |
| 6560 | #·Remediation·is·applicable·only·in·certain·platforms | 6560 | #·Remediation·is·applicable·only·in·certain·platforms |
| 6561 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 6561 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 6562 | #·First·perform·the·remediation·of·the·syscall·rule | 6562 | #·First·perform·the·remediation·of·the·syscall·rule |
| 6563 | #·Retrieve·hardware·architecture·of·the·underlying·system | 6563 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 6564 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 6564 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 6565 | for·ARCH·in·"${RULE_ARCHS[@]}" | 6565 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 6566 | do | 6566 | do |
| Offset 6923, 16 lines modified | Offset 6923, 16 lines modified | ||
| 6923 | ··-·reboot_required | 6923 | ··-·reboot_required |
| 6924 | ··-·restrict_strategy | 6924 | ··-·restrict_strategy |
| 6925 | -·name:·Set·architecture·for·audit·chown·tasks | 6925 | -·name:·Set·architecture·for·audit·chown·tasks |
| 6926 | ··set_fact: | 6926 | ··set_fact: |
| 6927 | ····audit_arch:·b64 | 6927 | ····audit_arch:·b64 |
| 6928 | ··when: | 6928 | ··when: |
| 6929 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6930 | ··-·'"audit"·in·ansible_facts.packages' | 6929 | ··-·'"audit"·in·ansible_facts.packages' |
| 6930 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6931 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 6931 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 6932 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 6932 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 6933 | ··tags: | 6933 | ··tags: |
| 6934 | ··-·CJIS-5.4.1.1 | 6934 | ··-·CJIS-5.4.1.1 |
| 6935 | ··-·DISA-STIG-OL07-00-030370 | 6935 | ··-·DISA-STIG-OL07-00-030370 |
| 6936 | ··-·NIST-800-171-3.1.7 | 6936 | ··-·NIST-800-171-3.1.7 |
| 6937 | ··-·NIST-800-53-AU-12(c) | 6937 | ··-·NIST-800-53-AU-12(c) |
| Offset 7071, 16 lines modified | Offset 7071, 16 lines modified | ||
| 7071 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7071 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7072 | ········-F·auid!=unset·-F·key=perm_mod | 7072 | ········-F·auid!=unset·-F·key=perm_mod |
| 7073 | ······create:·true | 7073 | ······create:·true |
| 7074 | ······mode:·o-rwx | 7074 | ······mode:·o-rwx |
| 7075 | ······state:·present | 7075 | ······state:·present |
| 7076 | ····when:·syscalls_found·|·length·==·0 | 7076 | ····when:·syscalls_found·|·length·==·0 |
| 7077 | ··when: | 7077 | ··when: |
| 7078 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7079 | ··-·'"audit"·in·ansible_facts.packages' | 7078 | ··-·'"audit"·in·ansible_facts.packages' |
| 7079 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7080 | ··tags: | 7080 | ··tags: |
| 7081 | ··-·CJIS-5.4.1.1 | 7081 | ··-·CJIS-5.4.1.1 |
| 7082 | ··-·DISA-STIG-OL07-00-030370 | 7082 | ··-·DISA-STIG-OL07-00-030370 |
| 7083 | ··-·NIST-800-171-3.1.7 | 7083 | ··-·NIST-800-171-3.1.7 |
| 7084 | ··-·NIST-800-53-AU-12(c) | 7084 | ··-·NIST-800-53-AU-12(c) |
| 7085 | ··-·NIST-800-53-AU-2(d) | 7085 | ··-·NIST-800-53-AU-2(d) |
| 7086 | ··-·NIST-800-53-CM-6(a) | 7086 | ··-·NIST-800-53-CM-6(a) |
| Offset 7217, 16 lines modified | Offset 7217, 16 lines modified | ||
| 7217 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7217 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7218 | ········-F·auid!=unset·-F·key=perm_mod | 7218 | ········-F·auid!=unset·-F·key=perm_mod |
| 7219 | ······create:·true | 7219 | ······create:·true |
| 7220 | ······mode:·o-rwx | 7220 | ······mode:·o-rwx |
| 7221 | ······state:·present | 7221 | ······state:·present |
| 7222 | ····when:·syscalls_found·|·length·==·0 | 7222 | ····when:·syscalls_found·|·length·==·0 |
| 7223 | ··when: | 7223 | ··when: |
| 7224 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7225 | ··-·'"audit"·in·ansible_facts.packages' | 7224 | ··-·'"audit"·in·ansible_facts.packages' |
| 7225 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7226 | ··-·audit_arch·==·"b64" | 7226 | ··-·audit_arch·==·"b64" |
| 7227 | ··tags: | 7227 | ··tags: |
| 7228 | ··-·CJIS-5.4.1.1 | 7228 | ··-·CJIS-5.4.1.1 |
| 7229 | ··-·DISA-STIG-OL07-00-030370 | 7229 | ··-·DISA-STIG-OL07-00-030370 |
| 7230 | ··-·NIST-800-171-3.1.7 | 7230 | ··-·NIST-800-171-3.1.7 |
| 7231 | ··-·NIST-800-53-AU-12(c) | 7231 | ··-·NIST-800-53-AU-12(c) |
| 7232 | ··-·NIST-800-53-AU-2(d) | 7232 | ··-·NIST-800-53-AU-2(d) |
| Offset 7236, 15 lines modified | Offset 7236, 15 lines modified | ||
| 7236 | ··-·low_complexity | 7236 | ··-·low_complexity |
| 7237 | ··-·low_disruption | 7237 | ··-·low_disruption |
| 7238 | ··-·medium_severity | 7238 | ··-·medium_severity |
| Max diff block lines reached; 131715/136349 bytes (96.60%) of diff not shown. | |||
| Offset 24017, 23 lines modified | Offset 24017, 23 lines modified | ||
| 0005dd00:·6571·7569·7265·640a·2020·2d20·7265·7374··equired.··-·rest | 0005dd00:·6571·7569·7265·640a·2020·2d20·7265·7374··equired.··-·rest | ||
| 0005dd10:·7269·6374·5f73·7472·6174·6567·790a·0a2d··rict_strategy..- | 0005dd10:·7269·6374·5f73·7472·6174·6567·790a·0a2d··rict_strategy..- | ||
| 0005dd20:·206e·616d·653a·2053·6574·2061·7263·6869···name:·Set·archi | 0005dd20:·206e·616d·653a·2053·6574·2061·7263·6869···name:·Set·archi | ||
| 0005dd30:·7465·6374·7572·6520·666f·7220·6175·6469··tecture·for·audi | 0005dd30:·7465·6374·7572·6520·666f·7220·6175·6469··tecture·for·audi | ||
| 0005dd40:·7420·6368·6d6f·6420·7461·736b·730a·2020··t·chmod·tasks.·· | 0005dd40:·7420·6368·6d6f·6420·7461·736b·730a·2020··t·chmod·tasks.·· | ||
| 0005dd50:·7365·745f·6661·6374·3a0a·2020·2020·6175··set_fact:.····au | 0005dd50:·7365·745f·6661·6374·3a0a·2020·2020·6175··set_fact:.····au | ||
| 0005dd60:·6469·745f·6172·6368·3a20·6236·340a·2020··dit_arch:·b64.·· | 0005dd60:·6469·745f·6172·6368·3a20·6236·340a·2020··dit_arch:·b64.·· | ||
| 0005dd70:·7768·656e·3a0a·2020·2d20· | 0005dd70:·7768·656e·3a0a·2020·2d20·2722·6175·6469··when:.··-·'"audi | ||
| 0005dd80:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0005dd90:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0005dda0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0005ddb0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0005ddc0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0005ddd0:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | |||
| 0005dd | 0005dd80:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 0005dd90:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0005dda0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 0005ddb0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0005ddc0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0005ddd0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0005dde0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0005ddf0:·6 | 0005ddf0:·6169·6e65·7222·5d0a·2020·2d20·616e·7369··ainer"].··-·ansi | ||
| 0005de00:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 0005de00:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 0005de10:·203d·3d20·2261·6172·6368·3634·2220·6f72···==·"aarch64"·or | 0005de10:·203d·3d20·2261·6172·6368·3634·2220·6f72···==·"aarch64"·or | ||
| 0005de20:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | 0005de20:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | ||
| 0005de30:·6374·7572·6520·3d3d·2022·7070·6336·3422··cture·==·"ppc64" | 0005de30:·6374·7572·6520·3d3d·2022·7070·6336·3422··cture·==·"ppc64" | ||
| 0005de40:·206f·7220·616e·7369·626c·655f·6172·6368···or·ansible_arch | 0005de40:·206f·7220·616e·7369·626c·655f·6172·6368···or·ansible_arch | ||
| 0005de50:·6974·6563·7475·7265·0a20·2020·203d·3d20··itecture.····==· | 0005de50:·6974·6563·7475·7265·0a20·2020·203d·3d20··itecture.····==· | ||
| 0005de60:·2270·7063·3634·6c65·2220·6f72·2061·6e73··"ppc64le"·or·ans | 0005de60:·2270·7063·3634·6c65·2220·6f72·2061·6e73··"ppc64le"·or·ans | ||
| Offset 24340, 23 lines modified | Offset 24340, 23 lines modified | ||
| 0005f130:·2d46·206b·6579·3d70·6572·6d5f·6d6f·640a··-F·key=perm_mod. | 0005f130:·2d46·206b·6579·3d70·6572·6d5f·6d6f·640a··-F·key=perm_mod. | ||
| 0005f140:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | 0005f140:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | ||
| 0005f150:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | 0005f150:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | ||
| 0005f160:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | 0005f160:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | ||
| 0005f170:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | 0005f170:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | ||
| 0005f180:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | 0005f180:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | ||
| 0005f190:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | 0005f190:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | ||
| 0005f1a0:·0a20·2077·6865·6e3a·0a20·202d·20 | 0005f1a0:·0a20·2077·6865·6e3a·0a20·202d·2027·2261··.··when:.··-·'"a | ||
| 0005f1b0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0005f1c0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0005f1d0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0005f1e0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0005f1f0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0005f200:·225d·0a20·202d·2027·2261·7564·6974·2220··"].··-·'"audit"· | |||
| 0005f210:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0005f | 0005f1b0:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | ||
| 0005f1c0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0005f1d0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 0005f1e0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0005f1f0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0005f200:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0005f210:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0005f220:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0005f230:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 0005f230:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 0005f240:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | 0005f240:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | ||
| 0005f250:·472d·4f4c·3037·2d30·302d·3033·3034·3130··G-OL07-00-030410 | 0005f250:·472d·4f4c·3037·2d30·302d·3033·3034·3130··G-OL07-00-030410 | ||
| 0005f260:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 0005f260:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0005f270:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 0005f270:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 0005f280:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | 0005f280:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | ||
| 0005f290:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | 0005f290:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| Offset 24652, 23 lines modified | Offset 24652, 23 lines modified | ||
| 000604b0:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | 000604b0:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | ||
| 000604c0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 000604c0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 000604d0:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | 000604d0:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | ||
| 000604e0:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 000604e0:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 000604f0:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | 000604f0:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | ||
| 00060500:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | 00060500:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | ||
| 00060510:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | 00060510:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | ||
| 00060520:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | |||
| 00060530:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00060540:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00060550:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00060560:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00060570:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 00060580:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | |||
| 000605 | 00060520:·6e3a·0a20·202d·2027·2261·7564·6974·2220··n:.··-·'"audit"· | ||
| 00060530:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 00060540:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 00060550:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00060560:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00060570:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00060580:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00060590:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 000605a0:·6 | 000605a0:·6572·225d·0a20·202d·2061·7564·6974·5f61··er"].··-·audit_a | ||
| 000605b0:·7263·6820·3d3d·2022·6236·3422·0a20·2074··rch·==·"b64".··t | 000605b0:·7263·6820·3d3d·2022·6236·3422·0a20·2074··rch·==·"b64".··t | ||
| 000605c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 000605c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 000605d0:·342e·312e·310a·2020·2d20·4449·5341·2d53··4.1.1.··-·DISA-S | 000605d0:·342e·312e·310a·2020·2d20·4449·5341·2d53··4.1.1.··-·DISA-S | ||
| 000605e0:·5449·472d·4f4c·3037·2d30·302d·3033·3034··TIG-OL07-00-0304 | 000605e0:·5449·472d·4f4c·3037·2d30·302d·3033·3034··TIG-OL07-00-0304 | ||
| 000605f0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | 000605f0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | ||
| 00060600:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | 00060600:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | ||
| 00060610:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | 00060610:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | ||
| Offset 24702, 20 lines modified | Offset 24702, 20 lines modified | ||
| 000607d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 000607d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 000607e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 000607e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 000607f0:·2069·643d·2269·646d·3231·3535·3222·3e3c···id="idm21552">< | 000607f0:·2069·643d·2269·646d·3231·3535·3222·3e3c···id="idm21552">< | ||
| 00060800:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | 00060800:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 00060810:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | 00060810:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 00060820:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | 00060820:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 00060830:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | 00060830:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 00060840:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 00060850:·7120·6175·6469·7420·2661·6d70·3b26·616d··q·audit·&&am | |||
| 000608 | 00060860:·703b·205b·2021·202d·6620·2f2e·646f·636b··p;·[·!·-f·/.dock | ||
| 000608 | 00060870:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 000608 | 00060880:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 000608 | 00060890:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 00060880:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 00060890:·7175·6965·7420·2d71·2061·7564·6974·3b20··quiet·-q·audit;· | |||
| 000608a0:·7468·656e·0a0a·2320·4669·7273·7420·7065··then..#·First·pe | 000608a0:·7468·656e·0a0a·2320·4669·7273·7420·7065··then..#·First·pe | ||
| 000608b0:·7266·6f72·6d20·7468·6520·7265·6d65·6469··rform·the·remedi | 000608b0:·7266·6f72·6d20·7468·6520·7265·6d65·6469··rform·the·remedi | ||
| 000608c0:·6174·696f·6e20·6f66·2074·6865·2073·7973··ation·of·the·sys | 000608c0:·6174·696f·6e20·6f66·2074·6865·2073·7973··ation·of·the·sys | ||
| 000608d0:·6361·6c6c·2072·756c·650a·2320·5265·7472··call·rule.#·Retr | 000608d0:·6361·6c6c·2072·756c·650a·2320·5265·7472··call·rule.#·Retr | ||
| 000608e0:·6965·7665·2068·6172·6477·6172·6520·6172··ieve·hardware·ar | 000608e0:·6965·7665·2068·6172·6477·6172·6520·6172··ieve·hardware·ar | ||
| 000608f0:·6368·6974·6563·7475·7265·206f·6620·7468··chitecture·of·th | 000608f0:·6368·6974·6563·7475·7265·206f·6620·7468··chitecture·of·th | ||
| 00060900:·6520·756e·6465·726c·7969·6e67·2073·7973··e·underlying·sys | 00060900:·6520·756e·6465·726c·7969·6e67·2073·7973··e·underlying·sys | ||
| Offset 26514, 23 lines modified | Offset 26514, 23 lines modified | ||
| 00067910:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | 00067910:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 00067920:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | 00067920:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | ||
| 00067930:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | 00067930:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | ||
| 00067940:·6520·666f·7220·6175·6469·7420·6368·6f77··e·for·audit·chow | 00067940:·6520·666f·7220·6175·6469·7420·6368·6f77··e·for·audit·chow | ||
| 00067950:·6e20·7461·736b·730a·2020·7365·745f·6661··n·tasks.··set_fa | 00067950:·6e20·7461·736b·730a·2020·7365·745f·6661··n·tasks.··set_fa | ||
| 00067960:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | 00067960:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | ||
| 00067970:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | 00067970:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | ||
| 00067980:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 00067990:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 000679a0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 000679b0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 000679c0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| Max diff block lines reached; 380245/390587 bytes (97.35%) of diff not shown. | |||
| Offset 980, 16 lines modified | Offset 980, 16 lines modified | ||
| 980 | ··-·reboot_required | 980 | ··-·reboot_required |
| 981 | ··-·restrict_strategy | 981 | ··-·restrict_strategy |
| 982 | -·name:·Set·architecture·for·audit·chmod·tasks | 982 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 983 | ··set_fact: | 983 | ··set_fact: |
| 984 | ····audit_arch:·b64 | 984 | ····audit_arch:·b64 |
| 985 | ··when: | 985 | ··when: |
| 986 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 987 | ··-·'"audit"·in·ansible_facts.packages' | 986 | ··-·'"audit"·in·ansible_facts.packages' |
| 987 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 988 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 988 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 989 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 989 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 990 | ··tags: | 990 | ··tags: |
| 991 | ··-·CJIS-5.4.1.1 | 991 | ··-·CJIS-5.4.1.1 |
| 992 | ··-·DISA-STIG-OL07-00-030410 | 992 | ··-·DISA-STIG-OL07-00-030410 |
| 993 | ··-·NIST-800-171-3.1.7 | 993 | ··-·NIST-800-171-3.1.7 |
| 994 | ··-·NIST-800-53-AU-12(c) | 994 | ··-·NIST-800-53-AU-12(c) |
| Offset 1126, 16 lines modified | Offset 1126, 16 lines modified | ||
| 1126 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1126 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1127 | ········-F·auid!=unset·-F·key=perm_mod | 1127 | ········-F·auid!=unset·-F·key=perm_mod |
| 1128 | ······create:·true | 1128 | ······create:·true |
| 1129 | ······mode:·o-rwx | 1129 | ······mode:·o-rwx |
| 1130 | ······state:·present | 1130 | ······state:·present |
| 1131 | ····when:·syscalls_found·|·length·==·0 | 1131 | ····when:·syscalls_found·|·length·==·0 |
| 1132 | ··when: | 1132 | ··when: |
| 1133 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1134 | ··-·'"audit"·in·ansible_facts.packages' | 1133 | ··-·'"audit"·in·ansible_facts.packages' |
| 1134 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1135 | ··tags: | 1135 | ··tags: |
| 1136 | ··-·CJIS-5.4.1.1 | 1136 | ··-·CJIS-5.4.1.1 |
| 1137 | ··-·DISA-STIG-OL07-00-030410 | 1137 | ··-·DISA-STIG-OL07-00-030410 |
| 1138 | ··-·NIST-800-171-3.1.7 | 1138 | ··-·NIST-800-171-3.1.7 |
| 1139 | ··-·NIST-800-53-AU-12(c) | 1139 | ··-·NIST-800-53-AU-12(c) |
| 1140 | ··-·NIST-800-53-AU-2(d) | 1140 | ··-·NIST-800-53-AU-2(d) |
| 1141 | ··-·NIST-800-53-CM-6(a) | 1141 | ··-·NIST-800-53-CM-6(a) |
| Offset 1270, 16 lines modified | Offset 1270, 16 lines modified | ||
| 1270 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1270 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1271 | ········-F·auid!=unset·-F·key=perm_mod | 1271 | ········-F·auid!=unset·-F·key=perm_mod |
| 1272 | ······create:·true | 1272 | ······create:·true |
| 1273 | ······mode:·o-rwx | 1273 | ······mode:·o-rwx |
| 1274 | ······state:·present | 1274 | ······state:·present |
| 1275 | ····when:·syscalls_found·|·length·==·0 | 1275 | ····when:·syscalls_found·|·length·==·0 |
| 1276 | ··when: | 1276 | ··when: |
| 1277 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1278 | ··-·'"audit"·in·ansible_facts.packages' | 1277 | ··-·'"audit"·in·ansible_facts.packages' |
| 1278 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1279 | ··-·audit_arch·==·"b64" | 1279 | ··-·audit_arch·==·"b64" |
| 1280 | ··tags: | 1280 | ··tags: |
| 1281 | ··-·CJIS-5.4.1.1 | 1281 | ··-·CJIS-5.4.1.1 |
| 1282 | ··-·DISA-STIG-OL07-00-030410 | 1282 | ··-·DISA-STIG-OL07-00-030410 |
| 1283 | ··-·NIST-800-171-3.1.7 | 1283 | ··-·NIST-800-171-3.1.7 |
| 1284 | ··-·NIST-800-53-AU-12(c) | 1284 | ··-·NIST-800-53-AU-12(c) |
| 1285 | ··-·NIST-800-53-AU-2(d) | 1285 | ··-·NIST-800-53-AU-2(d) |
| Offset 1289, 15 lines modified | Offset 1289, 15 lines modified | ||
| 1289 | ··-·low_complexity | 1289 | ··-·low_complexity |
| 1290 | ··-·low_disruption | 1290 | ··-·low_disruption |
| 1291 | ··-·medium_severity | 1291 | ··-·medium_severity |
| 1292 | ··-·reboot_required | 1292 | ··-·reboot_required |
| 1293 | ··-·restrict_strategy | 1293 | ··-·restrict_strategy |
| 1294 | Remediation_Shell_script_⇲ | 1294 | Remediation_Shell_script_⇲ |
| 1295 | #·Remediation·is·applicable·only·in·certain·platforms | 1295 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1296 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 1296 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1297 | #·First·perform·the·remediation·of·the·syscall·rule | 1297 | #·First·perform·the·remediation·of·the·syscall·rule |
| 1298 | #·Retrieve·hardware·architecture·of·the·underlying·system | 1298 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 1299 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 1299 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 1300 | for·ARCH·in·"${RULE_ARCHS[@]}" | 1300 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 1301 | do | 1301 | do |
| Offset 1658, 16 lines modified | Offset 1658, 16 lines modified | ||
| 1658 | ··-·reboot_required | 1658 | ··-·reboot_required |
| 1659 | ··-·restrict_strategy | 1659 | ··-·restrict_strategy |
| 1660 | -·name:·Set·architecture·for·audit·chown·tasks | 1660 | -·name:·Set·architecture·for·audit·chown·tasks |
| 1661 | ··set_fact: | 1661 | ··set_fact: |
| 1662 | ····audit_arch:·b64 | 1662 | ····audit_arch:·b64 |
| 1663 | ··when: | 1663 | ··when: |
| 1664 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1665 | ··-·'"audit"·in·ansible_facts.packages' | 1664 | ··-·'"audit"·in·ansible_facts.packages' |
| 1665 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1666 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1666 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 1667 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 1667 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 1668 | ··tags: | 1668 | ··tags: |
| 1669 | ··-·CJIS-5.4.1.1 | 1669 | ··-·CJIS-5.4.1.1 |
| 1670 | ··-·DISA-STIG-OL07-00-030370 | 1670 | ··-·DISA-STIG-OL07-00-030370 |
| 1671 | ··-·NIST-800-171-3.1.7 | 1671 | ··-·NIST-800-171-3.1.7 |
| 1672 | ··-·NIST-800-53-AU-12(c) | 1672 | ··-·NIST-800-53-AU-12(c) |
| Offset 1806, 16 lines modified | Offset 1806, 16 lines modified | ||
| 1806 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1806 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1807 | ········-F·auid!=unset·-F·key=perm_mod | 1807 | ········-F·auid!=unset·-F·key=perm_mod |
| 1808 | ······create:·true | 1808 | ······create:·true |
| 1809 | ······mode:·o-rwx | 1809 | ······mode:·o-rwx |
| 1810 | ······state:·present | 1810 | ······state:·present |
| 1811 | ····when:·syscalls_found·|·length·==·0 | 1811 | ····when:·syscalls_found·|·length·==·0 |
| 1812 | ··when: | 1812 | ··when: |
| 1813 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1814 | ··-·'"audit"·in·ansible_facts.packages' | 1813 | ··-·'"audit"·in·ansible_facts.packages' |
| 1814 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1815 | ··tags: | 1815 | ··tags: |
| 1816 | ··-·CJIS-5.4.1.1 | 1816 | ··-·CJIS-5.4.1.1 |
| 1817 | ··-·DISA-STIG-OL07-00-030370 | 1817 | ··-·DISA-STIG-OL07-00-030370 |
| 1818 | ··-·NIST-800-171-3.1.7 | 1818 | ··-·NIST-800-171-3.1.7 |
| 1819 | ··-·NIST-800-53-AU-12(c) | 1819 | ··-·NIST-800-53-AU-12(c) |
| 1820 | ··-·NIST-800-53-AU-2(d) | 1820 | ··-·NIST-800-53-AU-2(d) |
| 1821 | ··-·NIST-800-53-CM-6(a) | 1821 | ··-·NIST-800-53-CM-6(a) |
| Offset 1952, 16 lines modified | Offset 1952, 16 lines modified | ||
| 1952 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1952 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1953 | ········-F·auid!=unset·-F·key=perm_mod | 1953 | ········-F·auid!=unset·-F·key=perm_mod |
| 1954 | ······create:·true | 1954 | ······create:·true |
| 1955 | ······mode:·o-rwx | 1955 | ······mode:·o-rwx |
| 1956 | ······state:·present | 1956 | ······state:·present |
| 1957 | ····when:·syscalls_found·|·length·==·0 | 1957 | ····when:·syscalls_found·|·length·==·0 |
| 1958 | ··when: | 1958 | ··when: |
| 1959 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1960 | ··-·'"audit"·in·ansible_facts.packages' | 1959 | ··-·'"audit"·in·ansible_facts.packages' |
| 1960 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1961 | ··-·audit_arch·==·"b64" | 1961 | ··-·audit_arch·==·"b64" |
| 1962 | ··tags: | 1962 | ··tags: |
| 1963 | ··-·CJIS-5.4.1.1 | 1963 | ··-·CJIS-5.4.1.1 |
| 1964 | ··-·DISA-STIG-OL07-00-030370 | 1964 | ··-·DISA-STIG-OL07-00-030370 |
| 1965 | ··-·NIST-800-171-3.1.7 | 1965 | ··-·NIST-800-171-3.1.7 |
| 1966 | ··-·NIST-800-53-AU-12(c) | 1966 | ··-·NIST-800-53-AU-12(c) |
| 1967 | ··-·NIST-800-53-AU-2(d) | 1967 | ··-·NIST-800-53-AU-2(d) |
| Offset 1971, 15 lines modified | Offset 1971, 15 lines modified | ||
| 1971 | ··-·low_complexity | 1971 | ··-·low_complexity |
| 1972 | ··-·low_disruption | 1972 | ··-·low_disruption |
| 1973 | ··-·medium_severity | 1973 | ··-·medium_severity |
| Max diff block lines reached; 120690/125322 bytes (96.30%) of diff not shown. | |||
| Offset 88477, 23 lines modified | Offset 88477, 23 lines modified | ||
| 001599c0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | 001599c0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 001599d0:·7374·7261·7465·6779·0a0a·2d20·6e61·6d65··strategy..-·name | 001599d0:·7374·7261·7465·6779·0a0a·2d20·6e61·6d65··strategy..-·name | ||
| 001599e0:·3a20·5365·7420·6172·6368·6974·6563·7475··:·Set·architectu | 001599e0:·3a20·5365·7420·6172·6368·6974·6563·7475··:·Set·architectu | ||
| 001599f0:·7265·2066·6f72·2061·7564·6974·2063·686d··re·for·audit·chm | 001599f0:·7265·2066·6f72·2061·7564·6974·2063·686d··re·for·audit·chm | ||
| 00159a00:·6f64·2074·6173·6b73·0a20·2073·6574·5f66··od·tasks.··set_f | 00159a00:·6f64·2074·6173·6b73·0a20·2073·6574·5f66··od·tasks.··set_f | ||
| 00159a10:·6163·743a·0a20·2020·2061·7564·6974·5f61··act:.····audit_a | 00159a10:·6163·743a·0a20·2020·2061·7564·6974·5f61··act:.····audit_a | ||
| 00159a20:·7263·683a·2062·3634·0a20·2077·6865·6e3a··rch:·b64.··when: | 00159a20:·7263·683a·2062·3634·0a20·2077·6865·6e3a··rch:·b64.··when: | ||
| 00159a30:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 00159a40:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00159a50:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00159a60:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00159a70:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00159a80:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 00159a90:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 00159a | 00159a30:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 00159a40:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00159a50:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 00159a60:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 00159a70:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00159a80:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00159a90:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 00159aa0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 00159ab0:· | 00159ab0:·225d·0a20·202d·2061·6e73·6962·6c65·5f61··"].··-·ansible_a | ||
| 00159ac0:·7263·6869·7465·6374·7572·6520·3d3d·2022··rchitecture·==·" | 00159ac0:·7263·6869·7465·6374·7572·6520·3d3d·2022··rchitecture·==·" | ||
| 00159ad0:·6161·7263·6836·3422·206f·7220·616e·7369··aarch64"·or·ansi | 00159ad0:·6161·7263·6836·3422·206f·7220·616e·7369··aarch64"·or·ansi | ||
| 00159ae0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 00159ae0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 00159af0:·203d·3d20·2270·7063·3634·2220·6f72·2061···==·"ppc64"·or·a | 00159af0:·203d·3d20·2270·7063·3634·2220·6f72·2061···==·"ppc64"·or·a | ||
| 00159b00:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | 00159b00:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | ||
| 00159b10:·7572·650a·2020·2020·3d3d·2022·7070·6336··ure.····==·"ppc6 | 00159b10:·7572·650a·2020·2020·3d3d·2022·7070·6336··ure.····==·"ppc6 | ||
| 00159b20:·346c·6522·206f·7220·616e·7369·626c·655f··4le"·or·ansible_ | 00159b20:·346c·6522·206f·7220·616e·7369·626c·655f··4le"·or·ansible_ | ||
| Offset 88800, 23 lines modified | Offset 88800, 23 lines modified | ||
| 0015adf0:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | 0015adf0:·793d·7065·726d·5f6d·6f64·0a20·2020·2020··y=perm_mod.····· | ||
| 0015ae00:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | 0015ae00:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | ||
| 0015ae10:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | 0015ae10:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | ||
| 0015ae20:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | 0015ae20:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | ||
| 0015ae30:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | 0015ae30:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | ||
| 0015ae40:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | 0015ae40:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | ||
| 0015ae50:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | 0015ae50:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | ||
| 0015ae60:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 0015ae70:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0015ae80:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0015ae90:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0015aea0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0015aeb0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0015aec0:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 0015ae | 0015ae60:·656e·3a0a·2020·2d20·2722·6175·6469·7422··en:.··-·'"audit" | ||
| 0015ae70:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0015ae80:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 0015ae90:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0015aea0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0015aeb0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0015aec0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0015aed0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0015aee0:·6 | 0015aee0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 0015aef0:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | 0015aef0:·2d20·434a·4953·2d35·2e34·2e31·2e31·0a20··-·CJIS-5.4.1.1.· | ||
| 0015af00:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | 0015af00:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | ||
| 0015af10:·372d·3030·2d30·3330·3431·300a·2020·2d20··7-00-030410.··-· | 0015af10:·372d·3030·2d30·3330·3431·300a·2020·2d20··7-00-030410.··-· | ||
| 0015af20:·4e49·5354·2d38·3030·2d31·3731·2d33·2e31··NIST-800-171-3.1 | 0015af20:·4e49·5354·2d38·3030·2d31·3731·2d33·2e31··NIST-800-171-3.1 | ||
| 0015af30:·2e37·0a20·202d·204e·4953·542d·3830·302d··.7.··-·NIST-800- | 0015af30:·2e37·0a20·202d·204e·4953·542d·3830·302d··.7.··-·NIST-800- | ||
| 0015af40:·3533·2d41·552d·3132·2863·290a·2020·2d20··53-AU-12(c).··-· | 0015af40:·3533·2d41·552d·3132·2863·290a·2020·2d20··53-AU-12(c).··-· | ||
| 0015af50:·4e49·5354·2d38·3030·2d35·332d·4155·2d32··NIST-800-53-AU-2 | 0015af50:·4e49·5354·2d38·3030·2d35·332d·4155·2d32··NIST-800-53-AU-2 | ||
| Offset 89112, 22 lines modified | Offset 89112, 22 lines modified | ||
| 0015c170:·5f6d·6f64·0a20·2020·2020·2063·7265·6174··_mod.······creat | 0015c170:·5f6d·6f64·0a20·2020·2020·2063·7265·6174··_mod.······creat | ||
| 0015c180:·653a·2074·7275·650a·2020·2020·2020·6d6f··e:·true.······mo | 0015c180:·653a·2074·7275·650a·2020·2020·2020·6d6f··e:·true.······mo | ||
| 0015c190:·6465·3a20·6f2d·7277·780a·2020·2020·2020··de:·o-rwx.······ | 0015c190:·6465·3a20·6f2d·7277·780a·2020·2020·2020··de:·o-rwx.······ | ||
| 0015c1a0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | 0015c1a0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | ||
| 0015c1b0:·2020·2077·6865·6e3a·2073·7973·6361·6c6c·····when:·syscall | 0015c1b0:·2020·2077·6865·6e3a·2073·7973·6361·6c6c·····when:·syscall | ||
| 0015c1c0:·735f·666f·756e·6420·7c20·6c65·6e67·7468··s_found·|·length | 0015c1c0:·735f·666f·756e·6420·7c20·6c65·6e67·7468··s_found·|·length | ||
| 0015c1d0:·203d·3d20·300a·2020·7768·656e·3a0a·2020···==·0.··when:.·· | 0015c1d0:·203d·3d20·300a·2020·7768·656e·3a0a·2020···==·0.··when:.·· | ||
| 0015c1e0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 0015c1f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0015c200:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0015c210:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0015c220:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0015c230:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 0015c240:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 0015c | 0015c1e0:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | ||
| 0015c1f0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0015c200:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 0015c210:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0015c220:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0015c230:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0015c240:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0015c250:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0015c260:·2020·2d20·6175·6469·745f·6172·6368·203d····-·audit_arch·= | 0015c260:·2020·2d20·6175·6469·745f·6172·6368·203d····-·audit_arch·= | ||
| 0015c270:·3d20·2262·3634·220a·2020·7461·6773·3a0a··=·"b64".··tags:. | 0015c270:·3d20·2262·3634·220a·2020·7461·6773·3a0a··=·"b64".··tags:. | ||
| 0015c280:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | 0015c280:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | ||
| 0015c290:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | 0015c290:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 0015c2a0:·4c30·372d·3030·2d30·3330·3431·300a·2020··L07-00-030410.·· | 0015c2a0:·4c30·372d·3030·2d30·3330·3431·300a·2020··L07-00-030410.·· | ||
| 0015c2b0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | 0015c2b0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0015c2c0:·2e31·2e37·0a20·202d·204e·4953·542d·3830··.1.7.··-·NIST-80 | 0015c2c0:·2e31·2e37·0a20·202d·204e·4953·542d·3830··.1.7.··-·NIST-80 | ||
| Offset 89161, 21 lines modified | Offset 89161, 21 lines modified | ||
| 0015c480:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | 0015c480:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0015c490:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | 0015c490:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0015c4a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | 0015c4a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0015c4b0:·6964·6d32·3135·3532·223e·3c70·7265·3e3c··idm21552"><pre>< | 0015c4b0:·6964·6d32·3135·3532·223e·3c70·7265·3e3c··idm21552"><pre>< | ||
| 0015c4c0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 0015c4c0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0015c4d0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 0015c4d0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0015c4e0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 0015c4e0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0015c4f0:·2070·6c61·7466·6f72·6d73·0a69·6620· | 0015c4f0:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 0015c500:·6d20·2d2d·7175·6965·7420·2d71·2061·7564··m·--quiet·-q·aud | |||
| 0015c510:·6974·2026·616d·703b·2661·6d70·3b20·5b20··it·&&·[· | |||
| 0015c5 | 0015c520:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 0015c5 | 0015c530:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 0015c5 | 0015c540:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 0015c550:·696e·6572·656e·7620·5d3b·2074·6865·6e0a··inerenv·];·then. | |||
| 0015c530:·696e·6572·656e·7620·5d20·2661·6d70·3b26··inerenv·]·&& | |||
| 0015c540:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 0015c550:·202d·7120·6175·6469·743b·2074·6865·6e0a···-q·audit;·then. | |||
| 0015c560:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | 0015c560:·0a23·2046·6972·7374·2070·6572·666f·726d··.#·First·perform | ||
| 0015c570:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | 0015c570:·2074·6865·2072·656d·6564·6961·7469·6f6e···the·remediation | ||
| 0015c580:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | 0015c580:·206f·6620·7468·6520·7379·7363·616c·6c20···of·the·syscall· | ||
| 0015c590:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | 0015c590:·7275·6c65·0a23·2052·6574·7269·6576·6520··rule.#·Retrieve· | ||
| 0015c5a0:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | 0015c5a0:·6861·7264·7761·7265·2061·7263·6869·7465··hardware·archite | ||
| 0015c5b0:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | 0015c5b0:·6374·7572·6520·6f66·2074·6865·2075·6e64··cture·of·the·und | ||
| 0015c5c0:·6572·6c79·696e·6720·7379·7374·656d·0a5b··erlying·system.[ | 0015c5c0:·6572·6c79·696e·6720·7379·7374·656d·0a5b··erlying·system.[ | ||
| Offset 90973, 23 lines modified | Offset 90973, 23 lines modified | ||
| 001635c0:·6f6f·745f·7265·7175·6972·6564·0a20·202d··oot_required.··- | 001635c0:·6f6f·745f·7265·7175·6972·6564·0a20·202d··oot_required.··- | ||
| 001635d0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | 001635d0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 001635e0:·6779·0a0a·2d20·6e61·6d65·3a20·5365·7420··gy..-·name:·Set· | 001635e0:·6779·0a0a·2d20·6e61·6d65·3a20·5365·7420··gy..-·name:·Set· | ||
| 001635f0:·6172·6368·6974·6563·7475·7265·2066·6f72··architecture·for | 001635f0:·6172·6368·6974·6563·7475·7265·2066·6f72··architecture·for | ||
| 00163600:·2061·7564·6974·2063·686f·776e·2074·6173···audit·chown·tas | 00163600:·2061·7564·6974·2063·686f·776e·2074·6173···audit·chown·tas | ||
| 00163610:·6b73·0a20·2073·6574·5f66·6163·743a·0a20··ks.··set_fact:.· | 00163610:·6b73·0a20·2073·6574·5f66·6163·743a·0a20··ks.··set_fact:.· | ||
| 00163620:·2020·2061·7564·6974·5f61·7263·683a·2062·····audit_arch:·b | 00163620:·2020·2061·7564·6974·5f61·7263·683a·2062·····audit_arch:·b | ||
| 00163630:·3634·0a20·2077·6865·6e3a·0a20·202d·20 | 00163630:·3634·0a20·2077·6865·6e3a·0a20·202d·2027··64.··when:.··-·' | ||
| 00163640:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00163650:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| Max diff block lines reached; 593150/603492 bytes (98.29%) of diff not shown. | |||
| Offset 13533, 16 lines modified | Offset 13533, 16 lines modified | ||
| 13533 | ··-·reboot_required | 13533 | ··-·reboot_required |
| 13534 | ··-·restrict_strategy | 13534 | ··-·restrict_strategy |
| 13535 | -·name:·Set·architecture·for·audit·chmod·tasks | 13535 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 13536 | ··set_fact: | 13536 | ··set_fact: |
| 13537 | ····audit_arch:·b64 | 13537 | ····audit_arch:·b64 |
| 13538 | ··when: | 13538 | ··when: |
| 13539 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13540 | ··-·'"audit"·in·ansible_facts.packages' | 13539 | ··-·'"audit"·in·ansible_facts.packages' |
| 13540 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13541 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 13541 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 13542 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 13542 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 13543 | ··tags: | 13543 | ··tags: |
| 13544 | ··-·CJIS-5.4.1.1 | 13544 | ··-·CJIS-5.4.1.1 |
| 13545 | ··-·DISA-STIG-OL07-00-030410 | 13545 | ··-·DISA-STIG-OL07-00-030410 |
| 13546 | ··-·NIST-800-171-3.1.7 | 13546 | ··-·NIST-800-171-3.1.7 |
| 13547 | ··-·NIST-800-53-AU-12(c) | 13547 | ··-·NIST-800-53-AU-12(c) |
| Offset 13679, 16 lines modified | Offset 13679, 16 lines modified | ||
| 13679 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 13679 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 13680 | ········-F·auid!=unset·-F·key=perm_mod | 13680 | ········-F·auid!=unset·-F·key=perm_mod |
| 13681 | ······create:·true | 13681 | ······create:·true |
| 13682 | ······mode:·o-rwx | 13682 | ······mode:·o-rwx |
| 13683 | ······state:·present | 13683 | ······state:·present |
| 13684 | ····when:·syscalls_found·|·length·==·0 | 13684 | ····when:·syscalls_found·|·length·==·0 |
| 13685 | ··when: | 13685 | ··when: |
| 13686 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13687 | ··-·'"audit"·in·ansible_facts.packages' | 13686 | ··-·'"audit"·in·ansible_facts.packages' |
| 13687 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13688 | ··tags: | 13688 | ··tags: |
| 13689 | ··-·CJIS-5.4.1.1 | 13689 | ··-·CJIS-5.4.1.1 |
| 13690 | ··-·DISA-STIG-OL07-00-030410 | 13690 | ··-·DISA-STIG-OL07-00-030410 |
| 13691 | ··-·NIST-800-171-3.1.7 | 13691 | ··-·NIST-800-171-3.1.7 |
| 13692 | ··-·NIST-800-53-AU-12(c) | 13692 | ··-·NIST-800-53-AU-12(c) |
| 13693 | ··-·NIST-800-53-AU-2(d) | 13693 | ··-·NIST-800-53-AU-2(d) |
| 13694 | ··-·NIST-800-53-CM-6(a) | 13694 | ··-·NIST-800-53-CM-6(a) |
| Offset 13823, 16 lines modified | Offset 13823, 16 lines modified | ||
| 13823 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 13823 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 13824 | ········-F·auid!=unset·-F·key=perm_mod | 13824 | ········-F·auid!=unset·-F·key=perm_mod |
| 13825 | ······create:·true | 13825 | ······create:·true |
| 13826 | ······mode:·o-rwx | 13826 | ······mode:·o-rwx |
| 13827 | ······state:·present | 13827 | ······state:·present |
| 13828 | ····when:·syscalls_found·|·length·==·0 | 13828 | ····when:·syscalls_found·|·length·==·0 |
| 13829 | ··when: | 13829 | ··when: |
| 13830 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13831 | ··-·'"audit"·in·ansible_facts.packages' | 13830 | ··-·'"audit"·in·ansible_facts.packages' |
| 13831 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13832 | ··-·audit_arch·==·"b64" | 13832 | ··-·audit_arch·==·"b64" |
| 13833 | ··tags: | 13833 | ··tags: |
| 13834 | ··-·CJIS-5.4.1.1 | 13834 | ··-·CJIS-5.4.1.1 |
| 13835 | ··-·DISA-STIG-OL07-00-030410 | 13835 | ··-·DISA-STIG-OL07-00-030410 |
| 13836 | ··-·NIST-800-171-3.1.7 | 13836 | ··-·NIST-800-171-3.1.7 |
| 13837 | ··-·NIST-800-53-AU-12(c) | 13837 | ··-·NIST-800-53-AU-12(c) |
| 13838 | ··-·NIST-800-53-AU-2(d) | 13838 | ··-·NIST-800-53-AU-2(d) |
| Offset 13842, 15 lines modified | Offset 13842, 15 lines modified | ||
| 13842 | ··-·low_complexity | 13842 | ··-·low_complexity |
| 13843 | ··-·low_disruption | 13843 | ··-·low_disruption |
| 13844 | ··-·medium_severity | 13844 | ··-·medium_severity |
| 13845 | ··-·reboot_required | 13845 | ··-·reboot_required |
| 13846 | ··-·restrict_strategy | 13846 | ··-·restrict_strategy |
| 13847 | Remediation_Shell_script_⇲ | 13847 | Remediation_Shell_script_⇲ |
| 13848 | #·Remediation·is·applicable·only·in·certain·platforms | 13848 | #·Remediation·is·applicable·only·in·certain·platforms |
| 13849 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 13849 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 13850 | #·First·perform·the·remediation·of·the·syscall·rule | 13850 | #·First·perform·the·remediation·of·the·syscall·rule |
| 13851 | #·Retrieve·hardware·architecture·of·the·underlying·system | 13851 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 13852 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 13852 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 13853 | for·ARCH·in·"${RULE_ARCHS[@]}" | 13853 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 13854 | do | 13854 | do |
| Offset 14211, 16 lines modified | Offset 14211, 16 lines modified | ||
| 14211 | ··-·reboot_required | 14211 | ··-·reboot_required |
| 14212 | ··-·restrict_strategy | 14212 | ··-·restrict_strategy |
| 14213 | -·name:·Set·architecture·for·audit·chown·tasks | 14213 | -·name:·Set·architecture·for·audit·chown·tasks |
| 14214 | ··set_fact: | 14214 | ··set_fact: |
| 14215 | ····audit_arch:·b64 | 14215 | ····audit_arch:·b64 |
| 14216 | ··when: | 14216 | ··when: |
| 14217 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14218 | ··-·'"audit"·in·ansible_facts.packages' | 14217 | ··-·'"audit"·in·ansible_facts.packages' |
| 14218 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14219 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 14219 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 14220 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 14220 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 14221 | ··tags: | 14221 | ··tags: |
| 14222 | ··-·CJIS-5.4.1.1 | 14222 | ··-·CJIS-5.4.1.1 |
| 14223 | ··-·DISA-STIG-OL07-00-030370 | 14223 | ··-·DISA-STIG-OL07-00-030370 |
| 14224 | ··-·NIST-800-171-3.1.7 | 14224 | ··-·NIST-800-171-3.1.7 |
| 14225 | ··-·NIST-800-53-AU-12(c) | 14225 | ··-·NIST-800-53-AU-12(c) |
| Offset 14359, 16 lines modified | Offset 14359, 16 lines modified | ||
| 14359 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 14359 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 14360 | ········-F·auid!=unset·-F·key=perm_mod | 14360 | ········-F·auid!=unset·-F·key=perm_mod |
| 14361 | ······create:·true | 14361 | ······create:·true |
| 14362 | ······mode:·o-rwx | 14362 | ······mode:·o-rwx |
| 14363 | ······state:·present | 14363 | ······state:·present |
| 14364 | ····when:·syscalls_found·|·length·==·0 | 14364 | ····when:·syscalls_found·|·length·==·0 |
| 14365 | ··when: | 14365 | ··when: |
| 14366 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14367 | ··-·'"audit"·in·ansible_facts.packages' | 14366 | ··-·'"audit"·in·ansible_facts.packages' |
| 14367 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14368 | ··tags: | 14368 | ··tags: |
| 14369 | ··-·CJIS-5.4.1.1 | 14369 | ··-·CJIS-5.4.1.1 |
| 14370 | ··-·DISA-STIG-OL07-00-030370 | 14370 | ··-·DISA-STIG-OL07-00-030370 |
| 14371 | ··-·NIST-800-171-3.1.7 | 14371 | ··-·NIST-800-171-3.1.7 |
| 14372 | ··-·NIST-800-53-AU-12(c) | 14372 | ··-·NIST-800-53-AU-12(c) |
| 14373 | ··-·NIST-800-53-AU-2(d) | 14373 | ··-·NIST-800-53-AU-2(d) |
| 14374 | ··-·NIST-800-53-CM-6(a) | 14374 | ··-·NIST-800-53-CM-6(a) |
| Offset 14505, 16 lines modified | Offset 14505, 16 lines modified | ||
| 14505 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 14505 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 14506 | ········-F·auid!=unset·-F·key=perm_mod | 14506 | ········-F·auid!=unset·-F·key=perm_mod |
| 14507 | ······create:·true | 14507 | ······create:·true |
| 14508 | ······mode:·o-rwx | 14508 | ······mode:·o-rwx |
| 14509 | ······state:·present | 14509 | ······state:·present |
| 14510 | ····when:·syscalls_found·|·length·==·0 | 14510 | ····when:·syscalls_found·|·length·==·0 |
| 14511 | ··when: | 14511 | ··when: |
| 14512 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14513 | ··-·'"audit"·in·ansible_facts.packages' | 14512 | ··-·'"audit"·in·ansible_facts.packages' |
| 14513 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14514 | ··-·audit_arch·==·"b64" | 14514 | ··-·audit_arch·==·"b64" |
| 14515 | ··tags: | 14515 | ··tags: |
| 14516 | ··-·CJIS-5.4.1.1 | 14516 | ··-·CJIS-5.4.1.1 |
| 14517 | ··-·DISA-STIG-OL07-00-030370 | 14517 | ··-·DISA-STIG-OL07-00-030370 |
| 14518 | ··-·NIST-800-171-3.1.7 | 14518 | ··-·NIST-800-171-3.1.7 |
| 14519 | ··-·NIST-800-53-AU-12(c) | 14519 | ··-·NIST-800-53-AU-12(c) |
| 14520 | ··-·NIST-800-53-AU-2(d) | 14520 | ··-·NIST-800-53-AU-2(d) |
| Offset 14524, 15 lines modified | Offset 14524, 15 lines modified | ||
| 14524 | ··-·low_complexity | 14524 | ··-·low_complexity |
| 14525 | ··-·low_disruption | 14525 | ··-·low_disruption |
| 14526 | ··-·medium_severity | 14526 | ··-·medium_severity |
| Max diff block lines reached; 183702/188352 bytes (97.53%) of diff not shown. | |||
| Offset 88495, 23 lines modified | Offset 88495, 23 lines modified | ||
| 00159ae0:·6571·7569·7265·640a·2020·2d20·7265·7374··equired.··-·rest | 00159ae0:·6571·7569·7265·640a·2020·2d20·7265·7374··equired.··-·rest | ||
| 00159af0:·7269·6374·5f73·7472·6174·6567·790a·0a2d··rict_strategy..- | 00159af0:·7269·6374·5f73·7472·6174·6567·790a·0a2d··rict_strategy..- | ||
| 00159b00:·206e·616d·653a·2053·6574·2061·7263·6869···name:·Set·archi | 00159b00:·206e·616d·653a·2053·6574·2061·7263·6869···name:·Set·archi | ||
| 00159b10:·7465·6374·7572·6520·666f·7220·6175·6469··tecture·for·audi | 00159b10:·7465·6374·7572·6520·666f·7220·6175·6469··tecture·for·audi | ||
| 00159b20:·7420·6368·6d6f·6420·7461·736b·730a·2020··t·chmod·tasks.·· | 00159b20:·7420·6368·6d6f·6420·7461·736b·730a·2020··t·chmod·tasks.·· | ||
| 00159b30:·7365·745f·6661·6374·3a0a·2020·2020·6175··set_fact:.····au | 00159b30:·7365·745f·6661·6374·3a0a·2020·2020·6175··set_fact:.····au | ||
| 00159b40:·6469·745f·6172·6368·3a20·6236·340a·2020··dit_arch:·b64.·· | 00159b40:·6469·745f·6172·6368·3a20·6236·340a·2020··dit_arch:·b64.·· | ||
| 00159b50:·7768·656e·3a0a·2020·2d20· | 00159b50:·7768·656e·3a0a·2020·2d20·2722·6175·6469··when:.··-·'"audi | ||
| 00159b60:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 00159b70:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 00159b80:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 00159b90:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 00159ba0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 00159bb0:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | |||
| 00159b | 00159b60:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 00159b70:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 00159b80:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 00159b90:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00159ba0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00159bb0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00159bc0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00159bd0:·6 | 00159bd0:·6169·6e65·7222·5d0a·2020·2d20·616e·7369··ainer"].··-·ansi | ||
| 00159be0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 00159be0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 00159bf0:·203d·3d20·2261·6172·6368·3634·2220·6f72···==·"aarch64"·or | 00159bf0:·203d·3d20·2261·6172·6368·3634·2220·6f72···==·"aarch64"·or | ||
| 00159c00:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | 00159c00:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | ||
| 00159c10:·6374·7572·6520·3d3d·2022·7070·6336·3422··cture·==·"ppc64" | 00159c10:·6374·7572·6520·3d3d·2022·7070·6336·3422··cture·==·"ppc64" | ||
| 00159c20:·206f·7220·616e·7369·626c·655f·6172·6368···or·ansible_arch | 00159c20:·206f·7220·616e·7369·626c·655f·6172·6368···or·ansible_arch | ||
| 00159c30:·6974·6563·7475·7265·0a20·2020·203d·3d20··itecture.····==· | 00159c30:·6974·6563·7475·7265·0a20·2020·203d·3d20··itecture.····==· | ||
| 00159c40:·2270·7063·3634·6c65·2220·6f72·2061·6e73··"ppc64le"·or·ans | 00159c40:·2270·7063·3634·6c65·2220·6f72·2061·6e73··"ppc64le"·or·ans | ||
| Offset 88818, 23 lines modified | Offset 88818, 23 lines modified | ||
| 0015af10:·2d46·206b·6579·3d70·6572·6d5f·6d6f·640a··-F·key=perm_mod. | 0015af10:·2d46·206b·6579·3d70·6572·6d5f·6d6f·640a··-F·key=perm_mod. | ||
| 0015af20:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | 0015af20:·2020·2020·2020·6372·6561·7465·3a20·7472········create:·tr | ||
| 0015af30:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | 0015af30:·7565·0a20·2020·2020·206d·6f64·653a·206f··ue.······mode:·o | ||
| 0015af40:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | 0015af40:·2d72·7778·0a20·2020·2020·2073·7461·7465··-rwx.······state | ||
| 0015af50:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | 0015af50:·3a20·7072·6573·656e·740a·2020·2020·7768··:·present.····wh | ||
| 0015af60:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | 0015af60:·656e·3a20·7379·7363·616c·6c73·5f66·6f75··en:·syscalls_fou | ||
| 0015af70:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | 0015af70:·6e64·207c·206c·656e·6774·6820·3d3d·2030··nd·|·length·==·0 | ||
| 0015af80:·0a20·2077·6865·6e3a·0a20·202d·20 | 0015af80:·0a20·2077·6865·6e3a·0a20·202d·2027·2261··.··when:.··-·'"a | ||
| 0015af90:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0015afa0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0015afb0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0015afc0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0015afd0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0015afe0:·225d·0a20·202d·2027·2261·7564·6974·2220··"].··-·'"audit"· | |||
| 0015aff0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0015 | 0015af90:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | ||
| 0015afa0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0015afb0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 0015afc0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0015afd0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0015afe0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0015aff0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0015b000:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0015b010:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 0015b010:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 0015b020:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | 0015b020:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | ||
| 0015b030:·472d·4f4c·3037·2d30·302d·3033·3034·3130··G-OL07-00-030410 | 0015b030:·472d·4f4c·3037·2d30·302d·3033·3034·3130··G-OL07-00-030410 | ||
| 0015b040:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 0015b040:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0015b050:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 0015b050:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 0015b060:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | 0015b060:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | ||
| 0015b070:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | 0015b070:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| Offset 89130, 23 lines modified | Offset 89130, 23 lines modified | ||
| 0015c290:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | 0015c290:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | ||
| 0015c2a0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 0015c2a0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 0015c2b0:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | 0015c2b0:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | ||
| 0015c2c0:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 0015c2c0:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 0015c2d0:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | 0015c2d0:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | ||
| 0015c2e0:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | 0015c2e0:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | ||
| 0015c2f0:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | 0015c2f0:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | ||
| 0015c300:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | |||
| 0015c310:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0015c320:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0015c330:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0015c340:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0015c350:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 0015c360:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | |||
| 0015c3 | 0015c300:·6e3a·0a20·202d·2027·2261·7564·6974·2220··n:.··-·'"audit"· | ||
| 0015c310:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0015c320:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 0015c330:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0015c340:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0015c350:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0015c360:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0015c370:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0015c380:·6 | 0015c380:·6572·225d·0a20·202d·2061·7564·6974·5f61··er"].··-·audit_a | ||
| 0015c390:·7263·6820·3d3d·2022·6236·3422·0a20·2074··rch·==·"b64".··t | 0015c390:·7263·6820·3d3d·2022·6236·3422·0a20·2074··rch·==·"b64".··t | ||
| 0015c3a0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | 0015c3a0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0015c3b0:·342e·312e·310a·2020·2d20·4449·5341·2d53··4.1.1.··-·DISA-S | 0015c3b0:·342e·312e·310a·2020·2d20·4449·5341·2d53··4.1.1.··-·DISA-S | ||
| 0015c3c0:·5449·472d·4f4c·3037·2d30·302d·3033·3034··TIG-OL07-00-0304 | 0015c3c0:·5449·472d·4f4c·3037·2d30·302d·3033·3034··TIG-OL07-00-0304 | ||
| 0015c3d0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | 0015c3d0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | ||
| 0015c3e0:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | 0015c3e0:·3137·312d·332e·312e·370a·2020·2d20·4e49··171-3.1.7.··-·NI | ||
| 0015c3f0:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | 0015c3f0:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | ||
| Offset 89180, 20 lines modified | Offset 89180, 20 lines modified | ||
| 0015c5b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0015c5b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0015c5c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0015c5c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0015c5d0:·2069·643d·2269·646d·3231·3535·3222·3e3c···id="idm21552">< | 0015c5d0:·2069·643d·2269·646d·3231·3535·3222·3e3c···id="idm21552">< | ||
| 0015c5e0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | 0015c5e0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0015c5f0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | 0015c5f0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0015c600:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | 0015c600:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0015c610:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | 0015c610:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0015c620:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 0015c630:·7120·6175·6469·7420·2661·6d70·3b26·616d··q·audit·&&am | |||
| 0015c6 | 0015c640:·703b·205b·2021·202d·6620·2f2e·646f·636b··p;·[·!·-f·/.dock | ||
| 0015c6 | 0015c650:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 0015c6 | 0015c660:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 0015c6 | 0015c670:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 0015c660:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 0015c670:·7175·6965·7420·2d71·2061·7564·6974·3b20··quiet·-q·audit;· | |||
| 0015c680:·7468·656e·0a0a·2320·4669·7273·7420·7065··then..#·First·pe | 0015c680:·7468·656e·0a0a·2320·4669·7273·7420·7065··then..#·First·pe | ||
| 0015c690:·7266·6f72·6d20·7468·6520·7265·6d65·6469··rform·the·remedi | 0015c690:·7266·6f72·6d20·7468·6520·7265·6d65·6469··rform·the·remedi | ||
| 0015c6a0:·6174·696f·6e20·6f66·2074·6865·2073·7973··ation·of·the·sys | 0015c6a0:·6174·696f·6e20·6f66·2074·6865·2073·7973··ation·of·the·sys | ||
| 0015c6b0:·6361·6c6c·2072·756c·650a·2320·5265·7472··call·rule.#·Retr | 0015c6b0:·6361·6c6c·2072·756c·650a·2320·5265·7472··call·rule.#·Retr | ||
| 0015c6c0:·6965·7665·2068·6172·6477·6172·6520·6172··ieve·hardware·ar | 0015c6c0:·6965·7665·2068·6172·6477·6172·6520·6172··ieve·hardware·ar | ||
| 0015c6d0:·6368·6974·6563·7475·7265·206f·6620·7468··chitecture·of·th | 0015c6d0:·6368·6974·6563·7475·7265·206f·6620·7468··chitecture·of·th | ||
| 0015c6e0:·6520·756e·6465·726c·7969·6e67·2073·7973··e·underlying·sys | 0015c6e0:·6520·756e·6465·726c·7969·6e67·2073·7973··e·underlying·sys | ||
| Offset 90992, 23 lines modified | Offset 90992, 23 lines modified | ||
| 001636f0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | 001636f0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 00163700:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | 00163700:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | ||
| 00163710:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | 00163710:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | ||
| 00163720:·6520·666f·7220·6175·6469·7420·6368·6f77··e·for·audit·chow | 00163720:·6520·666f·7220·6175·6469·7420·6368·6f77··e·for·audit·chow | ||
| 00163730:·6e20·7461·736b·730a·2020·7365·745f·6661··n·tasks.··set_fa | 00163730:·6e20·7461·736b·730a·2020·7365·745f·6661··n·tasks.··set_fa | ||
| 00163740:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | 00163740:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | ||
| 00163750:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | 00163750:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | ||
| 00163760:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 00163770:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00163780:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00163790:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 001637a0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| Max diff block lines reached; 591218/601560 bytes (98.28%) of diff not shown. | |||
| Offset 13537, 16 lines modified | Offset 13537, 16 lines modified | ||
| 13537 | ··-·reboot_required | 13537 | ··-·reboot_required |
| 13538 | ··-·restrict_strategy | 13538 | ··-·restrict_strategy |
| 13539 | -·name:·Set·architecture·for·audit·chmod·tasks | 13539 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 13540 | ··set_fact: | 13540 | ··set_fact: |
| 13541 | ····audit_arch:·b64 | 13541 | ····audit_arch:·b64 |
| 13542 | ··when: | 13542 | ··when: |
| 13543 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13544 | ··-·'"audit"·in·ansible_facts.packages' | 13543 | ··-·'"audit"·in·ansible_facts.packages' |
| 13544 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13545 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 13545 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 13546 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 13546 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 13547 | ··tags: | 13547 | ··tags: |
| 13548 | ··-·CJIS-5.4.1.1 | 13548 | ··-·CJIS-5.4.1.1 |
| 13549 | ··-·DISA-STIG-OL07-00-030410 | 13549 | ··-·DISA-STIG-OL07-00-030410 |
| 13550 | ··-·NIST-800-171-3.1.7 | 13550 | ··-·NIST-800-171-3.1.7 |
| 13551 | ··-·NIST-800-53-AU-12(c) | 13551 | ··-·NIST-800-53-AU-12(c) |
| Offset 13683, 16 lines modified | Offset 13683, 16 lines modified | ||
| 13683 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 13683 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 13684 | ········-F·auid!=unset·-F·key=perm_mod | 13684 | ········-F·auid!=unset·-F·key=perm_mod |
| 13685 | ······create:·true | 13685 | ······create:·true |
| 13686 | ······mode:·o-rwx | 13686 | ······mode:·o-rwx |
| 13687 | ······state:·present | 13687 | ······state:·present |
| 13688 | ····when:·syscalls_found·|·length·==·0 | 13688 | ····when:·syscalls_found·|·length·==·0 |
| 13689 | ··when: | 13689 | ··when: |
| 13690 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13691 | ··-·'"audit"·in·ansible_facts.packages' | 13690 | ··-·'"audit"·in·ansible_facts.packages' |
| 13691 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13692 | ··tags: | 13692 | ··tags: |
| 13693 | ··-·CJIS-5.4.1.1 | 13693 | ··-·CJIS-5.4.1.1 |
| 13694 | ··-·DISA-STIG-OL07-00-030410 | 13694 | ··-·DISA-STIG-OL07-00-030410 |
| 13695 | ··-·NIST-800-171-3.1.7 | 13695 | ··-·NIST-800-171-3.1.7 |
| 13696 | ··-·NIST-800-53-AU-12(c) | 13696 | ··-·NIST-800-53-AU-12(c) |
| 13697 | ··-·NIST-800-53-AU-2(d) | 13697 | ··-·NIST-800-53-AU-2(d) |
| 13698 | ··-·NIST-800-53-CM-6(a) | 13698 | ··-·NIST-800-53-CM-6(a) |
| Offset 13827, 16 lines modified | Offset 13827, 16 lines modified | ||
| 13827 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 13827 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 13828 | ········-F·auid!=unset·-F·key=perm_mod | 13828 | ········-F·auid!=unset·-F·key=perm_mod |
| 13829 | ······create:·true | 13829 | ······create:·true |
| 13830 | ······mode:·o-rwx | 13830 | ······mode:·o-rwx |
| 13831 | ······state:·present | 13831 | ······state:·present |
| 13832 | ····when:·syscalls_found·|·length·==·0 | 13832 | ····when:·syscalls_found·|·length·==·0 |
| 13833 | ··when: | 13833 | ··when: |
| 13834 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13835 | ··-·'"audit"·in·ansible_facts.packages' | 13834 | ··-·'"audit"·in·ansible_facts.packages' |
| 13835 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13836 | ··-·audit_arch·==·"b64" | 13836 | ··-·audit_arch·==·"b64" |
| 13837 | ··tags: | 13837 | ··tags: |
| 13838 | ··-·CJIS-5.4.1.1 | 13838 | ··-·CJIS-5.4.1.1 |
| 13839 | ··-·DISA-STIG-OL07-00-030410 | 13839 | ··-·DISA-STIG-OL07-00-030410 |
| 13840 | ··-·NIST-800-171-3.1.7 | 13840 | ··-·NIST-800-171-3.1.7 |
| 13841 | ··-·NIST-800-53-AU-12(c) | 13841 | ··-·NIST-800-53-AU-12(c) |
| 13842 | ··-·NIST-800-53-AU-2(d) | 13842 | ··-·NIST-800-53-AU-2(d) |
| Offset 13846, 15 lines modified | Offset 13846, 15 lines modified | ||
| 13846 | ··-·low_complexity | 13846 | ··-·low_complexity |
| 13847 | ··-·low_disruption | 13847 | ··-·low_disruption |
| 13848 | ··-·medium_severity | 13848 | ··-·medium_severity |
| 13849 | ··-·reboot_required | 13849 | ··-·reboot_required |
| 13850 | ··-·restrict_strategy | 13850 | ··-·restrict_strategy |
| 13851 | Remediation_Shell_script_⇲ | 13851 | Remediation_Shell_script_⇲ |
| 13852 | #·Remediation·is·applicable·only·in·certain·platforms | 13852 | #·Remediation·is·applicable·only·in·certain·platforms |
| 13853 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 13853 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 13854 | #·First·perform·the·remediation·of·the·syscall·rule | 13854 | #·First·perform·the·remediation·of·the·syscall·rule |
| 13855 | #·Retrieve·hardware·architecture·of·the·underlying·system | 13855 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 13856 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 13856 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 13857 | for·ARCH·in·"${RULE_ARCHS[@]}" | 13857 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 13858 | do | 13858 | do |
| Offset 14215, 16 lines modified | Offset 14215, 16 lines modified | ||
| 14215 | ··-·reboot_required | 14215 | ··-·reboot_required |
| 14216 | ··-·restrict_strategy | 14216 | ··-·restrict_strategy |
| 14217 | -·name:·Set·architecture·for·audit·chown·tasks | 14217 | -·name:·Set·architecture·for·audit·chown·tasks |
| 14218 | ··set_fact: | 14218 | ··set_fact: |
| 14219 | ····audit_arch:·b64 | 14219 | ····audit_arch:·b64 |
| 14220 | ··when: | 14220 | ··when: |
| 14221 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14222 | ··-·'"audit"·in·ansible_facts.packages' | 14221 | ··-·'"audit"·in·ansible_facts.packages' |
| 14222 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14223 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 14223 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 14224 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 14224 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 14225 | ··tags: | 14225 | ··tags: |
| 14226 | ··-·CJIS-5.4.1.1 | 14226 | ··-·CJIS-5.4.1.1 |
| 14227 | ··-·DISA-STIG-OL07-00-030370 | 14227 | ··-·DISA-STIG-OL07-00-030370 |
| 14228 | ··-·NIST-800-171-3.1.7 | 14228 | ··-·NIST-800-171-3.1.7 |
| 14229 | ··-·NIST-800-53-AU-12(c) | 14229 | ··-·NIST-800-53-AU-12(c) |
| Offset 14363, 16 lines modified | Offset 14363, 16 lines modified | ||
| 14363 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 14363 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 14364 | ········-F·auid!=unset·-F·key=perm_mod | 14364 | ········-F·auid!=unset·-F·key=perm_mod |
| 14365 | ······create:·true | 14365 | ······create:·true |
| 14366 | ······mode:·o-rwx | 14366 | ······mode:·o-rwx |
| 14367 | ······state:·present | 14367 | ······state:·present |
| 14368 | ····when:·syscalls_found·|·length·==·0 | 14368 | ····when:·syscalls_found·|·length·==·0 |
| 14369 | ··when: | 14369 | ··when: |
| 14370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14371 | ··-·'"audit"·in·ansible_facts.packages' | 14370 | ··-·'"audit"·in·ansible_facts.packages' |
| 14371 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14372 | ··tags: | 14372 | ··tags: |
| 14373 | ··-·CJIS-5.4.1.1 | 14373 | ··-·CJIS-5.4.1.1 |
| 14374 | ··-·DISA-STIG-OL07-00-030370 | 14374 | ··-·DISA-STIG-OL07-00-030370 |
| 14375 | ··-·NIST-800-171-3.1.7 | 14375 | ··-·NIST-800-171-3.1.7 |
| 14376 | ··-·NIST-800-53-AU-12(c) | 14376 | ··-·NIST-800-53-AU-12(c) |
| 14377 | ··-·NIST-800-53-AU-2(d) | 14377 | ··-·NIST-800-53-AU-2(d) |
| 14378 | ··-·NIST-800-53-CM-6(a) | 14378 | ··-·NIST-800-53-CM-6(a) |
| Offset 14509, 16 lines modified | Offset 14509, 16 lines modified | ||
| 14509 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 14509 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 14510 | ········-F·auid!=unset·-F·key=perm_mod | 14510 | ········-F·auid!=unset·-F·key=perm_mod |
| 14511 | ······create:·true | 14511 | ······create:·true |
| 14512 | ······mode:·o-rwx | 14512 | ······mode:·o-rwx |
| 14513 | ······state:·present | 14513 | ······state:·present |
| 14514 | ····when:·syscalls_found·|·length·==·0 | 14514 | ····when:·syscalls_found·|·length·==·0 |
| 14515 | ··when: | 14515 | ··when: |
| 14516 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14517 | ··-·'"audit"·in·ansible_facts.packages' | 14516 | ··-·'"audit"·in·ansible_facts.packages' |
| 14517 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 14518 | ··-·audit_arch·==·"b64" | 14518 | ··-·audit_arch·==·"b64" |
| 14519 | ··tags: | 14519 | ··tags: |
| 14520 | ··-·CJIS-5.4.1.1 | 14520 | ··-·CJIS-5.4.1.1 |
| 14521 | ··-·DISA-STIG-OL07-00-030370 | 14521 | ··-·DISA-STIG-OL07-00-030370 |
| 14522 | ··-·NIST-800-171-3.1.7 | 14522 | ··-·NIST-800-171-3.1.7 |
| 14523 | ··-·NIST-800-53-AU-12(c) | 14523 | ··-·NIST-800-53-AU-12(c) |
| 14524 | ··-·NIST-800-53-AU-2(d) | 14524 | ··-·NIST-800-53-AU-2(d) |
| Offset 14528, 15 lines modified | Offset 14528, 15 lines modified | ||
| 14528 | ··-·low_complexity | 14528 | ··-·low_complexity |
| 14529 | ··-·low_disruption | 14529 | ··-·low_disruption |
| 14530 | ··-·medium_severity | 14530 | ··-·medium_severity |
| Max diff block lines reached; 183702/188352 bytes (97.53%) of diff not shown. | |||
| Offset 53942, 22 lines modified | Offset 53942, 22 lines modified | ||
| 000d2b50:·6c65·6765·640a·2020·2020·2020·6372·6561··leged.······crea | 000d2b50:·6c65·6765·640a·2020·2020·2020·6372·6561··leged.······crea | ||
| 000d2b60:·7465·3a20·7472·7565·0a20·2020·2020·206d··te:·true.······m | 000d2b60:·7465·3a20·7472·7565·0a20·2020·2020·206d··te:·true.······m | ||
| 000d2b70:·6f64·653a·206f·2d72·7778·0a20·2020·2020··ode:·o-rwx.····· | 000d2b70:·6f64·653a·206f·2d72·7778·0a20·2020·2020··ode:·o-rwx.····· | ||
| 000d2b80:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | 000d2b80:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | ||
| 000d2b90:·2020·2020·7768·656e·3a20·7379·7363·616c······when:·syscal | 000d2b90:·2020·2020·7768·656e·3a20·7379·7363·616c······when:·syscal | ||
| 000d2ba0:·6c73·5f66·6f75·6e64·207c·206c·656e·6774··ls_found·|·lengt | 000d2ba0:·6c73·5f66·6f75·6e64·207c·206c·656e·6774··ls_found·|·lengt | ||
| 000d2bb0:·6820·3d3d·2030·0a20·2077·6865·6e3a·0a20··h·==·0.··when:.· | 000d2bb0:·6820·3d3d·2030·0a20·2077·6865·6e3a·0a20··h·==·0.··when:.· | ||
| 000d2bc0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 000d2bd0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000d2be0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000d2bf0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000d2c00:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000d2c10:·7461·696e·6572·225d·0a20·202d·2027·2261··tainer"].··-·'"a | |||
| 000d2c20:·7564·6974·2220·696e·2061·6e73·6962·6c65··udit"·in·ansible | |||
| 000d2 | 000d2bc0:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | ||
| 000d2bd0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 000d2be0:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | |||
| 000d2bf0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 000d2c00:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000d2c10:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000d2c20:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000d2c30:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000d2c40:·0a20·2074·6167·733a·0a20·202d·2044·4953··.··tags:.··-·DIS | 000d2c40:·0a20·2074·6167·733a·0a20·202d·2044·4953··.··tags:.··-·DIS | ||
| 000d2c50:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | 000d2c50:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | ||
| 000d2c60:·3330·3535·300a·2020·2d20·4e49·5354·2d38··30550.··-·NIST-8 | 000d2c60:·3330·3535·300a·2020·2d20·4e49·5354·2d38··30550.··-·NIST-8 | ||
| 000d2c70:·3030·2d31·3731·2d33·2e31·2e37·0a20·202d··00-171-3.1.7.··- | 000d2c70:·3030·2d31·3731·2d33·2e31·2e37·0a20·202d··00-171-3.1.7.··- | ||
| 000d2c80:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | 000d2c80:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | ||
| 000d2c90:·3628·3929·0a20·202d·204e·4953·542d·3830··6(9).··-·NIST-80 | 000d2c90:·3628·3929·0a20·202d·204e·4953·542d·3830··6(9).··-·NIST-80 | ||
| 000d2ca0:·302d·3533·2d41·552d·3132·2863·290a·2020··0-53-AU-12(c).·· | 000d2ca0:·302d·3533·2d41·552d·3132·2863·290a·2020··0-53-AU-12(c).·· | ||
| Offset 53989, 21 lines modified | Offset 53989, 21 lines modified | ||
| 000d2e40:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | 000d2e40:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 000d2e50:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | 000d2e50:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 000d2e60:·6c6c·6170·7365·2220·6964·3d22·6964·6d33··llapse"·id="idm3 | 000d2e60:·6c6c·6170·7365·2220·6964·3d22·6964·6d33··llapse"·id="idm3 | ||
| 000d2e70:·3331·3335·223e·3c70·7265·3e3c·636f·6465··3135"><pre><code | 000d2e70:·3331·3335·223e·3c70·7265·3e3c·636f·6465··3135"><pre><code | ||
| 000d2e80:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | 000d2e80:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 000d2e90:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | 000d2e90:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 000d2ea0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | 000d2ea0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 000d2eb0:·7466·6f72·6d73·0a69·6620· | 000d2eb0:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | ||
| 000d2ec0:· | 000d2ec0:·7175·6965·7420·2d71·2061·7564·6974·2026··quiet·-q·audit·& | ||
| 000d2ed0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | 000d2ed0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | ||
| 000d2ee0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 000d2ef0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 000d2 | 000d2f00:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | ||
| 000d2ef0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 000d2f00:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 000d2f10:·6 | 000d2f10:·656e·7620·5d3b·2074·6865·6e0a·0a41·4354··env·];·then..ACT | ||
| 000d2f20:·494f·4e5f·4152·4348·5f46·494c·5445·5253··ION_ARCH_FILTERS | 000d2f20:·494f·4e5f·4152·4348·5f46·494c·5445·5253··ION_ARCH_FILTERS | ||
| 000d2f30:·3d22·2d61·2061·6c77·6179·732c·6578·6974··="-a·always,exit | 000d2f30:·3d22·2d61·2061·6c77·6179·732c·6578·6974··="-a·always,exit | ||
| 000d2f40:·220a·4f54·4845·525f·4649·4c54·4552·533d··".OTHER_FILTERS= | 000d2f40:·220a·4f54·4845·525f·4649·4c54·4552·533d··".OTHER_FILTERS= | ||
| 000d2f50:·222d·4620·7061·7468·3d2f·7573·722f·6269··"-F·path=/usr/bi | 000d2f50:·222d·4620·7061·7468·3d2f·7573·722f·6269··"-F·path=/usr/bi | ||
| 000d2f60:·6e2f·7375·646f·202d·4620·7065·726d·3d78··n/sudo·-F·perm=x | 000d2f60:·6e2f·7375·646f·202d·4620·7065·726d·3d78··n/sudo·-F·perm=x | ||
| 000d2f70:·220a·4155·4944·5f46·494c·5445·5253·3d22··".AUID_FILTERS=" | 000d2f70:·220a·4155·4944·5f46·494c·5445·5253·3d22··".AUID_FILTERS=" | ||
| 000d2f80:·2d46·2061·7569·6426·6774·3b3d·3130·3030··-F·auid>=1000 | 000d2f80:·2d46·2061·7569·6426·6774·3b3d·3130·3030··-F·auid>=1000 |
| Offset 8620, 16 lines modified | Offset 8620, 16 lines modified | ||
| 8620 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 8620 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 8621 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 8621 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 8622 | ······create:·true | 8622 | ······create:·true |
| 8623 | ······mode:·o-rwx | 8623 | ······mode:·o-rwx |
| 8624 | ······state:·present | 8624 | ······state:·present |
| 8625 | ····when:·syscalls_found·|·length·==·0 | 8625 | ····when:·syscalls_found·|·length·==·0 |
| 8626 | ··when: | 8626 | ··when: |
| 8627 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8628 | ··-·'"audit"·in·ansible_facts.packages' | 8627 | ··-·'"audit"·in·ansible_facts.packages' |
| 8628 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8629 | ··tags: | 8629 | ··tags: |
| 8630 | ··-·DISA-STIG-OL08-00-030550 | 8630 | ··-·DISA-STIG-OL08-00-030550 |
| 8631 | ··-·NIST-800-171-3.1.7 | 8631 | ··-·NIST-800-171-3.1.7 |
| 8632 | ··-·NIST-800-53-AC-6(9) | 8632 | ··-·NIST-800-53-AC-6(9) |
| 8633 | ··-·NIST-800-53-AU-12(c) | 8633 | ··-·NIST-800-53-AU-12(c) |
| 8634 | ··-·NIST-800-53-AU-2(d) | 8634 | ··-·NIST-800-53-AU-2(d) |
| 8635 | ··-·NIST-800-53-CM-6(a) | 8635 | ··-·NIST-800-53-CM-6(a) |
| Offset 8637, 15 lines modified | Offset 8637, 15 lines modified | ||
| 8637 | ··-·low_complexity | 8637 | ··-·low_complexity |
| 8638 | ··-·low_disruption | 8638 | ··-·low_disruption |
| 8639 | ··-·medium_severity | 8639 | ··-·medium_severity |
| 8640 | ··-·no_reboot_needed | 8640 | ··-·no_reboot_needed |
| 8641 | ··-·restrict_strategy | 8641 | ··-·restrict_strategy |
| 8642 | Remediation_Shell_script_⇲ | 8642 | Remediation_Shell_script_⇲ |
| 8643 | #·Remediation·is·applicable·only·in·certain·platforms | 8643 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8644 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 8644 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 8645 | ACTION_ARCH_FILTERS="-a·always,exit" | 8645 | ACTION_ARCH_FILTERS="-a·always,exit" |
| 8646 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" | 8646 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" |
| 8647 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" | 8647 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" |
| 8648 | SYSCALL="" | 8648 | SYSCALL="" |
| 8649 | KEY="privileged" | 8649 | KEY="privileged" |
| 8650 | SYSCALL_GROUPING="" | 8650 | SYSCALL_GROUPING="" |
| Offset 55967, 23 lines modified | Offset 55967, 23 lines modified | ||
| 000da9e0:·7072·6976·696c·6567·6564·0a20·2020·2020··privileged.····· | 000da9e0:·7072·6976·696c·6567·6564·0a20·2020·2020··privileged.····· | ||
| 000da9f0:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | 000da9f0:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | ||
| 000daa00:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | 000daa00:·2020·2020·6d6f·6465·3a20·6f2d·7277·780a······mode:·o-rwx. | ||
| 000daa10:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | 000daa10:·2020·2020·2020·7374·6174·653a·2070·7265········state:·pre | ||
| 000daa20:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | 000daa20:·7365·6e74·0a20·2020·2077·6865·6e3a·2073··sent.····when:·s | ||
| 000daa30:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | 000daa30:·7973·6361·6c6c·735f·666f·756e·6420·7c20··yscalls_found·|· | ||
| 000daa40:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | 000daa40:·6c65·6e67·7468·203d·3d20·300a·2020·7768··length·==·0.··wh | ||
| 000daa50:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 000daa60:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000daa70:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 000daa80:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 000daa90:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 000daaa0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 000daab0:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 000daa | 000daa50:·656e·3a0a·2020·2d20·2722·6175·6469·7422··en:.··-·'"audit" | ||
| 000daa60:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000daa70:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 000daa80:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000daa90:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000daaa0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000daab0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000daac0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 000daad0:·6 | 000daad0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 000daae0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | 000daae0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | ||
| 000daaf0:·2d30·302d·3033·3035·3530·0a20·202d·204e··-00-030550.··-·N | 000daaf0:·2d30·302d·3033·3035·3530·0a20·202d·204e··-00-030550.··-·N | ||
| 000dab00:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 000dab00:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 000dab10:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 000dab10:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 000dab20:·332d·4143·2d36·2839·290a·2020·2d20·4e49··3-AC-6(9).··-·NI | 000dab20:·332d·4143·2d36·2839·290a·2020·2d20·4e49··3-AC-6(9).··-·NI | ||
| 000dab30:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | 000dab30:·5354·2d38·3030·2d35·332d·4155·2d31·3228··ST-800-53-AU-12( | ||
| 000dab40:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | 000dab40:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| Offset 56014, 21 lines modified | Offset 56014, 21 lines modified | ||
| 000dacd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 000dacd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 000dace0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 000dace0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 000dacf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 000dacf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 000dad00:·2269·646d·3333·3133·3522·3e3c·7072·653e··"idm33135"><pre> | 000dad00:·2269·646d·3333·3133·3522·3e3c·7072·653e··"idm33135"><pre> | ||
| 000dad10:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | 000dad10:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 000dad20:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | 000dad20:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 000dad30:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | 000dad30:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 000dad40:·6e20·706c·6174·666f·726d·730a·6966·20 | 000dad40:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | ||
| 000dad50:·706d·202d·2d71·7569·6574·202d·7120·6175··pm·--quiet·-q·au | |||
| 000dad60:·6469·7420·2661·6d70·3b26·616d·703b·205b··dit·&&·[ | |||
| 000dad | 000dad70:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 000dad | 000dad80:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 000dad | 000dad90:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 000dad | 000dada0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | ||
| 000dad90:·2661·6d70·3b20·7270·6d20·2d2d·7175·6965··&·rpm·--quie | |||
| 000dada0:·7420·2d71·2061·7564·6974·3b20·7468·656e··t·-q·audit;·then | |||
| 000dadb0:·0a0a·4143·5449·4f4e·5f41·5243·485f·4649··..ACTION_ARCH_FI | 000dadb0:·0a0a·4143·5449·4f4e·5f41·5243·485f·4649··..ACTION_ARCH_FI | ||
| 000dadc0:·4c54·4552·533d·222d·6120·616c·7761·7973··LTERS="-a·always | 000dadc0:·4c54·4552·533d·222d·6120·616c·7761·7973··LTERS="-a·always | ||
| 000dadd0:·2c65·7869·7422·0a4f·5448·4552·5f46·494c··,exit".OTHER_FIL | 000dadd0:·2c65·7869·7422·0a4f·5448·4552·5f46·494c··,exit".OTHER_FIL | ||
| 000dade0:·5445·5253·3d22·2d46·2070·6174·683d·2f75··TERS="-F·path=/u | 000dade0:·5445·5253·3d22·2d46·2070·6174·683d·2f75··TERS="-F·path=/u | ||
| 000dadf0:·7372·2f62·696e·2f73·7564·6f20·2d46·2070··sr/bin/sudo·-F·p | 000dadf0:·7372·2f62·696e·2f73·7564·6f20·2d46·2070··sr/bin/sudo·-F·p | ||
| 000dae00:·6572·6d3d·7822·0a41·5549·445f·4649·4c54··erm=x".AUID_FILT | 000dae00:·6572·6d3d·7822·0a41·5549·445f·4649·4c54··erm=x".AUID_FILT | ||
| 000dae10:·4552·533d·222d·4620·6175·6964·2667·743b··ERS="-F·auid> | 000dae10:·4552·533d·222d·4620·6175·6964·2667·743b··ERS="-F·auid> |
| Offset 8964, 16 lines modified | Offset 8964, 16 lines modified | ||
| 8964 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 8964 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 8965 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 8965 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 8966 | ······create:·true | 8966 | ······create:·true |
| 8967 | ······mode:·o-rwx | 8967 | ······mode:·o-rwx |
| 8968 | ······state:·present | 8968 | ······state:·present |
| 8969 | ····when:·syscalls_found·|·length·==·0 | 8969 | ····when:·syscalls_found·|·length·==·0 |
| 8970 | ··when: | 8970 | ··when: |
| 8971 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8972 | ··-·'"audit"·in·ansible_facts.packages' | 8971 | ··-·'"audit"·in·ansible_facts.packages' |
| 8972 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8973 | ··tags: | 8973 | ··tags: |
| 8974 | ··-·DISA-STIG-OL08-00-030550 | 8974 | ··-·DISA-STIG-OL08-00-030550 |
| 8975 | ··-·NIST-800-171-3.1.7 | 8975 | ··-·NIST-800-171-3.1.7 |
| 8976 | ··-·NIST-800-53-AC-6(9) | 8976 | ··-·NIST-800-53-AC-6(9) |
| 8977 | ··-·NIST-800-53-AU-12(c) | 8977 | ··-·NIST-800-53-AU-12(c) |
| 8978 | ··-·NIST-800-53-AU-2(d) | 8978 | ··-·NIST-800-53-AU-2(d) |
| 8979 | ··-·NIST-800-53-CM-6(a) | 8979 | ··-·NIST-800-53-CM-6(a) |
| Offset 8981, 15 lines modified | Offset 8981, 15 lines modified | ||
| 8981 | ··-·low_complexity | 8981 | ··-·low_complexity |
| 8982 | ··-·low_disruption | 8982 | ··-·low_disruption |
| 8983 | ··-·medium_severity | 8983 | ··-·medium_severity |
| 8984 | ··-·no_reboot_needed | 8984 | ··-·no_reboot_needed |
| 8985 | ··-·restrict_strategy | 8985 | ··-·restrict_strategy |
| 8986 | Remediation_Shell_script_⇲ | 8986 | Remediation_Shell_script_⇲ |
| 8987 | #·Remediation·is·applicable·only·in·certain·platforms | 8987 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8988 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 8988 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 8989 | ACTION_ARCH_FILTERS="-a·always,exit" | 8989 | ACTION_ARCH_FILTERS="-a·always,exit" |
| 8990 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" | 8990 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" |
| 8991 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" | 8991 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" |
| 8992 | SYSCALL="" | 8992 | SYSCALL="" |
| 8993 | KEY="privileged" | 8993 | KEY="privileged" |
| 8994 | SYSCALL_GROUPING="" | 8994 | SYSCALL_GROUPING="" |
| Offset 51615, 23 lines modified | Offset 51615, 23 lines modified | ||
| 000c99e0:·793d·7072·6976·696c·6567·6564·0a20·2020··y=privileged.··· | 000c99e0:·793d·7072·6976·696c·6567·6564·0a20·2020··y=privileged.··· | ||
| 000c99f0:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | 000c99f0:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | ||
| 000c9a00:·2020·2020·2020·6d6f·6465·3a20·6f2d·7277········mode:·o-rw | 000c9a00:·2020·2020·2020·6d6f·6465·3a20·6f2d·7277········mode:·o-rw | ||
| 000c9a10:·780a·2020·2020·2020·7374·6174·653a·2070··x.······state:·p | 000c9a10:·780a·2020·2020·2020·7374·6174·653a·2070··x.······state:·p | ||
| 000c9a20:·7265·7365·6e74·0a20·2020·2077·6865·6e3a··resent.····when: | 000c9a20:·7265·7365·6e74·0a20·2020·2077·6865·6e3a··resent.····when: | ||
| 000c9a30:·2073·7973·6361·6c6c·735f·666f·756e·6420···syscalls_found· | 000c9a30:·2073·7973·6361·6c6c·735f·666f·756e·6420···syscalls_found· | ||
| 000c9a40:·7c20·6c65·6e67·7468·203d·3d20·300a·2020··|·length·==·0.·· | 000c9a40:·7c20·6c65·6e67·7468·203d·3d20·300a·2020··|·length·==·0.·· | ||
| 000c9a50:·7768·656e·3a0a·2020·2d20· | 000c9a50:·7768·656e·3a0a·2020·2d20·2722·6175·6469··when:.··-·'"audi | ||
| 000c9a60:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 000c9a70:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 000c9a80:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 000c9a90:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 000c9aa0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 000c9ab0:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | |||
| 000c9a | 000c9a60:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 000c9a70:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 000c9a80:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000c9a90:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000c9aa0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000c9ab0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 000c9ac0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 000c9ad0:·6 | 000c9ad0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 000c9ae0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | 000c9ae0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 000c9af0:·3038·2d30·302d·3033·3035·3530·0a20·202d··08-00-030550.··- | 000c9af0:·3038·2d30·302d·3033·3035·3530·0a20·202d··08-00-030550.··- | ||
| 000c9b00:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 000c9b00:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 000c9b10:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 000c9b10:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| 000c9b20:·2d35·332d·4143·2d36·2839·290a·2020·2d20··-53-AC-6(9).··-· | 000c9b20:·2d35·332d·4143·2d36·2839·290a·2020·2d20··-53-AC-6(9).··-· | ||
| 000c9b30:·4e49·5354·2d38·3030·2d35·332d·4155·2d31··NIST-800-53-AU-1 | 000c9b30:·4e49·5354·2d38·3030·2d35·332d·4155·2d31··NIST-800-53-AU-1 | ||
| 000c9b40:·3228·6329·0a20·202d·204e·4953·542d·3830··2(c).··-·NIST-80 | 000c9b40:·3228·6329·0a20·202d·204e·4953·542d·3830··2(c).··-·NIST-80 | ||
| Offset 51663, 20 lines modified | Offset 51663, 20 lines modified | ||
| 000c9ce0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | 000c9ce0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 000c9cf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | 000c9cf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 000c9d00:·643d·2269·646d·3333·3133·3522·3e3c·7072··d="idm33135"><pr | 000c9d00:·643d·2269·646d·3333·3133·3522·3e3c·7072··d="idm33135"><pr | ||
| 000c9d10:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 000c9d10:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 000c9d20:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 000c9d20:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 000c9d30:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 000c9d30:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 000c9d40:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 000c9d40:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 000c9d50:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 000c9d60:·6175·6469·7420·2661·6d70·3b26·616d·703b··audit·&& | |||
| 000c9d | 000c9d70:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| 000c9d | 000c9d80:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | ||
| 000c9d | 000c9d90:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | ||
| 000c9d | 000c9da0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | ||
| 000c9d90:·703b·2661·6d70·3b20·7270·6d20·2d2d·7175··p;&·rpm·--qu | |||
| 000c9da0:·6965·7420·2d71·2061·7564·6974·3b20·7468··iet·-q·audit;·th | |||
| 000c9db0:·656e·0a0a·4143·5449·4f4e·5f41·5243·485f··en..ACTION_ARCH_ | 000c9db0:·656e·0a0a·4143·5449·4f4e·5f41·5243·485f··en..ACTION_ARCH_ | ||
| 000c9dc0:·4649·4c54·4552·533d·222d·6120·616c·7761··FILTERS="-a·alwa | 000c9dc0:·4649·4c54·4552·533d·222d·6120·616c·7761··FILTERS="-a·alwa | ||
| 000c9dd0:·7973·2c65·7869·7422·0a4f·5448·4552·5f46··ys,exit".OTHER_F | 000c9dd0:·7973·2c65·7869·7422·0a4f·5448·4552·5f46··ys,exit".OTHER_F | ||
| 000c9de0:·494c·5445·5253·3d22·2d46·2070·6174·683d··ILTERS="-F·path= | 000c9de0:·494c·5445·5253·3d22·2d46·2070·6174·683d··ILTERS="-F·path= | ||
| 000c9df0:·2f75·7372·2f62·696e·2f73·7564·6f20·2d46··/usr/bin/sudo·-F | 000c9df0:·2f75·7372·2f62·696e·2f73·7564·6f20·2d46··/usr/bin/sudo·-F | ||
| 000c9e00:·2070·6572·6d3d·7822·0a41·5549·445f·4649···perm=x".AUID_FI | 000c9e00:·2070·6572·6d3d·7822·0a41·5549·445f·4649···perm=x".AUID_FI | ||
| 000c9e10:·4c54·4552·533d·222d·4620·6175·6964·2667··LTERS="-F·auid&g | 000c9e10:·4c54·4552·533d·222d·4620·6175·6964·2667··LTERS="-F·auid&g |
| Offset 8173, 16 lines modified | Offset 8173, 16 lines modified | ||
| 8173 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 8173 | ······line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 8174 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 8174 | ········-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 8175 | ······create:·true | 8175 | ······create:·true |
| 8176 | ······mode:·o-rwx | 8176 | ······mode:·o-rwx |
| 8177 | ······state:·present | 8177 | ······state:·present |
| 8178 | ····when:·syscalls_found·|·length·==·0 | 8178 | ····when:·syscalls_found·|·length·==·0 |
| 8179 | ··when: | 8179 | ··when: |
| 8180 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8181 | ··-·'"audit"·in·ansible_facts.packages' | 8180 | ··-·'"audit"·in·ansible_facts.packages' |
| 8181 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8182 | ··tags: | 8182 | ··tags: |
| 8183 | ··-·DISA-STIG-OL08-00-030550 | 8183 | ··-·DISA-STIG-OL08-00-030550 |
| 8184 | ··-·NIST-800-171-3.1.7 | 8184 | ··-·NIST-800-171-3.1.7 |
| 8185 | ··-·NIST-800-53-AC-6(9) | 8185 | ··-·NIST-800-53-AC-6(9) |
| 8186 | ··-·NIST-800-53-AU-12(c) | 8186 | ··-·NIST-800-53-AU-12(c) |
| 8187 | ··-·NIST-800-53-AU-2(d) | 8187 | ··-·NIST-800-53-AU-2(d) |
| 8188 | ··-·NIST-800-53-CM-6(a) | 8188 | ··-·NIST-800-53-CM-6(a) |
| Offset 8190, 15 lines modified | Offset 8190, 15 lines modified | ||
| 8190 | ··-·low_complexity | 8190 | ··-·low_complexity |
| 8191 | ··-·low_disruption | 8191 | ··-·low_disruption |
| 8192 | ··-·medium_severity | 8192 | ··-·medium_severity |
| 8193 | ··-·no_reboot_needed | 8193 | ··-·no_reboot_needed |
| 8194 | ··-·restrict_strategy | 8194 | ··-·restrict_strategy |
| 8195 | Remediation_Shell_script_⇲ | 8195 | Remediation_Shell_script_⇲ |
| 8196 | #·Remediation·is·applicable·only·in·certain·platforms | 8196 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8197 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 8197 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 8198 | ACTION_ARCH_FILTERS="-a·always,exit" | 8198 | ACTION_ARCH_FILTERS="-a·always,exit" |
| 8199 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" | 8199 | OTHER_FILTERS="-F·path=/usr/bin/sudo·-F·perm=x" |
| 8200 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" | 8200 | AUID_FILTERS="-F·auid>=1000·-F·auid!=unset" |
| 8201 | SYSCALL="" | 8201 | SYSCALL="" |
| 8202 | KEY="privileged" | 8202 | KEY="privileged" |
| 8203 | SYSCALL_GROUPING="" | 8203 | SYSCALL_GROUPING="" |
| Offset 39267, 22 lines modified | Offset 39267, 22 lines modified | ||
| 00099620:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | 00099620:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 00099630:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | 00099630:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | ||
| 00099640:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | 00099640:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | ||
| 00099650:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | 00099650:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | ||
| 00099660:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | 00099660:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | ||
| 00099670:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | 00099670:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | ||
| 00099680:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | 00099680:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | ||
| 00099690:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000996a0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000996b0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000996c0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 000996d0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 000996e0:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 000996f0:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 00099 | 00099690:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | ||
| 000996a0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000996b0:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 000996c0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 000996d0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 000996e0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 000996f0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 00099700:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 00099710:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | 00099710:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | ||
| 00099720:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | 00099720:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | ||
| 00099730:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | 00099730:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | ||
| 00099740:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | 00099740:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | ||
| 00099750:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | 00099750:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | ||
| 00099760:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 00099760:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 00099770:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | 00099770:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | ||
| Offset 39590, 23 lines modified | Offset 39590, 23 lines modified | ||
| 0009aa50:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 0009aa50:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 0009aa60:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 0009aa60:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 0009aa70:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 0009aa70:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 0009aa80:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 0009aa80:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 0009aa90:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 0009aa90:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 0009aaa0:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 0009aaa0:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 0009aab0:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 0009aab0:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 0009aac0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 0009aad0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0009aae0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0009aaf0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0009ab00:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0009ab10:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 0009ab20:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 0009a | 0009aac0:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 0009aad0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0009aae0:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 0009aaf0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0009ab00:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0009ab10:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0009ab20:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0009ab30:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0009ab40:· | 0009ab40:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 0009ab50:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | 0009ab50:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | ||
| 0009ab60:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | 0009ab60:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | ||
| 0009ab70:·302d·3033·3034·3930·0a20·202d·204e·4953··0-030490.··-·NIS | 0009ab70:·302d·3033·3034·3930·0a20·202d·204e·4953··0-030490.··-·NIS | ||
| 0009ab80:·542d·3830·302d·3137·312d·332e·312e·370a··T-800-171-3.1.7. | 0009ab80:·542d·3830·302d·3137·312d·332e·312e·370a··T-800-171-3.1.7. | ||
| 0009ab90:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | 0009ab90:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0009aba0:·4155·2d31·3228·6329·0a20·202d·204e·4953··AU-12(c).··-·NIS | 0009aba0:·4155·2d31·3228·6329·0a20·202d·204e·4953··AU-12(c).··-·NIS | ||
| 0009abb0:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | 0009abb0:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | ||
| Offset 39901, 23 lines modified | Offset 39901, 23 lines modified | ||
| 0009bdc0:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | 0009bdc0:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | ||
| 0009bdd0:·640a·2020·2020·2020·6372·6561·7465·3a20··d.······create:· | 0009bdd0:·640a·2020·2020·2020·6372·6561·7465·3a20··d.······create:· | ||
| 0009bde0:·7472·7565·0a20·2020·2020·206d·6f64·653a··true.······mode: | 0009bde0:·7472·7565·0a20·2020·2020·206d·6f64·653a··true.······mode: | ||
| 0009bdf0:·206f·2d72·7778·0a20·2020·2020·2073·7461···o-rwx.······sta | 0009bdf0:·206f·2d72·7778·0a20·2020·2020·2073·7461···o-rwx.······sta | ||
| 0009be00:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | 0009be00:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | ||
| 0009be10:·7768·656e·3a20·7379·7363·616c·6c73·5f66··when:·syscalls_f | 0009be10:·7768·656e·3a20·7379·7363·616c·6c73·5f66··when:·syscalls_f | ||
| 0009be20:·6f75·6e64·207c·206c·656e·6774·6820·3d3d··ound·|·length·== | 0009be20:·6f75·6e64·207c·206c·656e·6774·6820·3d3d··ound·|·length·== | ||
| 0009be30:·2030·0a20·2077·6865·6e3a·0a20·202d·20 | 0009be30:·2030·0a20·2077·6865·6e3a·0a20·202d·2027···0.··when:.··-·' | ||
| 0009be40:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0009be50:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0009be60:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0009be70:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0009be80:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0009be90:·6572·225d·0a20·202d·2027·2261·7564·6974··er"].··-·'"audit | |||
| 0009bea0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0009be | 0009be40:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | ||
| 0009be50:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0009be60:·7327·0a20·202d·2061·6e73·6962·6c65·5f76··s'.··-·ansible_v | |||
| 0009be70:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0009be80:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0009be90:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0009bea0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0009beb0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 0009bec0:·2061·7564·6974·5f61·7263·6820·3d3d·2022···audit_arch·==·" | 0009bec0:·2061·7564·6974·5f61·7263·6820·3d3d·2022···audit_arch·==·" | ||
| 0009bed0:·6236·3422·0a20·2074·6167·733a·0a20·202d··b64".··tags:.··- | 0009bed0:·6236·3422·0a20·2074·6167·733a·0a20·202d··b64".··tags:.··- | ||
| 0009bee0:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | 0009bee0:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | ||
| 0009bef0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | 0009bef0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | ||
| 0009bf00:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | 0009bf00:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | ||
| 0009bf10:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 0009bf10:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 0009bf20:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 0009bf20:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| Offset 39951, 21 lines modified | Offset 39951, 21 lines modified | ||
| 0009c0e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | 0009c0e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0009c0f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | 0009c0f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0009c100:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | 0009c100:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0009c110:·3232·3636·3922·3e3c·7072·653e·3c63·6f64··22669"><pre><cod | 0009c110:·3232·3636·3922·3e3c·7072·653e·3c63·6f64··22669"><pre><cod | ||
| 0009c120:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | 0009c120:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0009c130:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | 0009c130:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0009c140:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | 0009c140:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0009c150:·6174·666f·726d·730a·6966·20 | 0009c150:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | ||
| 0009c160:· | 0009c160:·2d71·7569·6574·202d·7120·6175·6469·7420··-quiet·-q·audit· | ||
| 0009c170:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | 0009c170:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | ||
| 0009c180:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0009c190:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0009c1 | 0009c1a0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | ||
| 0009c190:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 0009c1a0:·3b20·7270·6d20·2d2d·7175·6965·7420·2d71··;·rpm·--quiet·-q | |||
| 0009c1b0:· | 0009c1b0:·7265·6e76·205d·3b20·7468·656e·0a0a·2320··renv·];·then..#· | ||
| 0009c1c0:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | 0009c1c0:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | ||
| 0009c1d0:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | 0009c1d0:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | ||
| 0009c1e0:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | 0009c1e0:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | ||
| 0009c1f0:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | 0009c1f0:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | ||
| 0009c200:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | 0009c200:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | ||
| 0009c210:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | 0009c210:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | ||
| 0009c220:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | 0009c220:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | ||
| Offset 41763, 23 lines modified | Offset 41763, 23 lines modified | ||
| 000a3220:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | 000a3220:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | ||
| 000a3230:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | 000a3230:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 000a3240:·0a2d·206e·616d·653a·2053·6574·2061·7263··.-·name:·Set·arc | 000a3240:·0a2d·206e·616d·653a·2053·6574·2061·7263··.-·name:·Set·arc | ||
| 000a3250:·6869·7465·6374·7572·6520·666f·7220·6175··hitecture·for·au | 000a3250:·6869·7465·6374·7572·6520·666f·7220·6175··hitecture·for·au | ||
| 000a3260:·6469·7420·6368·6f77·6e20·7461·736b·730a··dit·chown·tasks. | 000a3260:·6469·7420·6368·6f77·6e20·7461·736b·730a··dit·chown·tasks. | ||
| 000a3270:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | 000a3270:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 000a3280:·6175·6469·745f·6172·6368·3a20·6236·340a··audit_arch:·b64. | 000a3280:·6175·6469·745f·6172·6368·3a20·6236·340a··audit_arch:·b64. | ||
| 000a3290:·2020·7768·656e·3a0a·2020·2d20· | 000a3290:·2020·7768·656e·3a0a·2020·2d20·2722·6175····when:.··-·'"au | ||
| 000a32a0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000a32b0:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000a32c0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| Max diff block lines reached; 404268/414541 bytes (97.52%) of diff not shown. | |||
| Offset 3819, 16 lines modified | Offset 3819, 16 lines modified | ||
| 3819 | ··-·reboot_required | 3819 | ··-·reboot_required |
| 3820 | ··-·restrict_strategy | 3820 | ··-·restrict_strategy |
| 3821 | -·name:·Set·architecture·for·audit·chmod·tasks | 3821 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 3822 | ··set_fact: | 3822 | ··set_fact: |
| 3823 | ····audit_arch:·b64 | 3823 | ····audit_arch:·b64 |
| 3824 | ··when: | 3824 | ··when: |
| 3825 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3826 | ··-·'"audit"·in·ansible_facts.packages' | 3825 | ··-·'"audit"·in·ansible_facts.packages' |
| 3826 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3827 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 3827 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 3828 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 3828 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 3829 | ··tags: | 3829 | ··tags: |
| 3830 | ··-·CJIS-5.4.1.1 | 3830 | ··-·CJIS-5.4.1.1 |
| 3831 | ··-·DISA-STIG-OL08-00-030490 | 3831 | ··-·DISA-STIG-OL08-00-030490 |
| 3832 | ··-·NIST-800-171-3.1.7 | 3832 | ··-·NIST-800-171-3.1.7 |
| 3833 | ··-·NIST-800-53-AU-12(c) | 3833 | ··-·NIST-800-53-AU-12(c) |
| Offset 3965, 16 lines modified | Offset 3965, 16 lines modified | ||
| 3965 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 3965 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 3966 | ········-F·auid!=unset·-F·key=perm_mod | 3966 | ········-F·auid!=unset·-F·key=perm_mod |
| 3967 | ······create:·true | 3967 | ······create:·true |
| 3968 | ······mode:·o-rwx | 3968 | ······mode:·o-rwx |
| 3969 | ······state:·present | 3969 | ······state:·present |
| 3970 | ····when:·syscalls_found·|·length·==·0 | 3970 | ····when:·syscalls_found·|·length·==·0 |
| 3971 | ··when: | 3971 | ··when: |
| 3972 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3973 | ··-·'"audit"·in·ansible_facts.packages' | 3972 | ··-·'"audit"·in·ansible_facts.packages' |
| 3973 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 3974 | ··tags: | 3974 | ··tags: |
| 3975 | ··-·CJIS-5.4.1.1 | 3975 | ··-·CJIS-5.4.1.1 |
| 3976 | ··-·DISA-STIG-OL08-00-030490 | 3976 | ··-·DISA-STIG-OL08-00-030490 |
| 3977 | ··-·NIST-800-171-3.1.7 | 3977 | ··-·NIST-800-171-3.1.7 |
| 3978 | ··-·NIST-800-53-AU-12(c) | 3978 | ··-·NIST-800-53-AU-12(c) |
| 3979 | ··-·NIST-800-53-AU-2(d) | 3979 | ··-·NIST-800-53-AU-2(d) |
| 3980 | ··-·NIST-800-53-CM-6(a) | 3980 | ··-·NIST-800-53-CM-6(a) |
| Offset 4109, 16 lines modified | Offset 4109, 16 lines modified | ||
| 4109 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4109 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4110 | ········-F·auid!=unset·-F·key=perm_mod | 4110 | ········-F·auid!=unset·-F·key=perm_mod |
| 4111 | ······create:·true | 4111 | ······create:·true |
| 4112 | ······mode:·o-rwx | 4112 | ······mode:·o-rwx |
| 4113 | ······state:·present | 4113 | ······state:·present |
| 4114 | ····when:·syscalls_found·|·length·==·0 | 4114 | ····when:·syscalls_found·|·length·==·0 |
| 4115 | ··when: | 4115 | ··when: |
| 4116 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4117 | ··-·'"audit"·in·ansible_facts.packages' | 4116 | ··-·'"audit"·in·ansible_facts.packages' |
| 4117 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4118 | ··-·audit_arch·==·"b64" | 4118 | ··-·audit_arch·==·"b64" |
| 4119 | ··tags: | 4119 | ··tags: |
| 4120 | ··-·CJIS-5.4.1.1 | 4120 | ··-·CJIS-5.4.1.1 |
| 4121 | ··-·DISA-STIG-OL08-00-030490 | 4121 | ··-·DISA-STIG-OL08-00-030490 |
| 4122 | ··-·NIST-800-171-3.1.7 | 4122 | ··-·NIST-800-171-3.1.7 |
| 4123 | ··-·NIST-800-53-AU-12(c) | 4123 | ··-·NIST-800-53-AU-12(c) |
| 4124 | ··-·NIST-800-53-AU-2(d) | 4124 | ··-·NIST-800-53-AU-2(d) |
| Offset 4128, 15 lines modified | Offset 4128, 15 lines modified | ||
| 4128 | ··-·low_complexity | 4128 | ··-·low_complexity |
| 4129 | ··-·low_disruption | 4129 | ··-·low_disruption |
| 4130 | ··-·medium_severity | 4130 | ··-·medium_severity |
| 4131 | ··-·reboot_required | 4131 | ··-·reboot_required |
| 4132 | ··-·restrict_strategy | 4132 | ··-·restrict_strategy |
| 4133 | Remediation_Shell_script_⇲ | 4133 | Remediation_Shell_script_⇲ |
| 4134 | #·Remediation·is·applicable·only·in·certain·platforms | 4134 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 4135 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 4136 | #·First·perform·the·remediation·of·the·syscall·rule | 4136 | #·First·perform·the·remediation·of·the·syscall·rule |
| 4137 | #·Retrieve·hardware·architecture·of·the·underlying·system | 4137 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 4138 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 4138 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 4139 | for·ARCH·in·"${RULE_ARCHS[@]}" | 4139 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 4140 | do | 4140 | do |
| Offset 4497, 16 lines modified | Offset 4497, 16 lines modified | ||
| 4497 | ··-·reboot_required | 4497 | ··-·reboot_required |
| 4498 | ··-·restrict_strategy | 4498 | ··-·restrict_strategy |
| 4499 | -·name:·Set·architecture·for·audit·chown·tasks | 4499 | -·name:·Set·architecture·for·audit·chown·tasks |
| 4500 | ··set_fact: | 4500 | ··set_fact: |
| 4501 | ····audit_arch:·b64 | 4501 | ····audit_arch:·b64 |
| 4502 | ··when: | 4502 | ··when: |
| 4503 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4504 | ··-·'"audit"·in·ansible_facts.packages' | 4503 | ··-·'"audit"·in·ansible_facts.packages' |
| 4504 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4505 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 4505 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 4506 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 4506 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 4507 | ··tags: | 4507 | ··tags: |
| 4508 | ··-·CJIS-5.4.1.1 | 4508 | ··-·CJIS-5.4.1.1 |
| 4509 | ··-·DISA-STIG-OL08-00-030480 | 4509 | ··-·DISA-STIG-OL08-00-030480 |
| 4510 | ··-·NIST-800-171-3.1.7 | 4510 | ··-·NIST-800-171-3.1.7 |
| 4511 | ··-·NIST-800-53-AU-12(c) | 4511 | ··-·NIST-800-53-AU-12(c) |
| Offset 4645, 16 lines modified | Offset 4645, 16 lines modified | ||
| 4645 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4645 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4646 | ········-F·auid!=unset·-F·key=perm_mod | 4646 | ········-F·auid!=unset·-F·key=perm_mod |
| 4647 | ······create:·true | 4647 | ······create:·true |
| 4648 | ······mode:·o-rwx | 4648 | ······mode:·o-rwx |
| 4649 | ······state:·present | 4649 | ······state:·present |
| 4650 | ····when:·syscalls_found·|·length·==·0 | 4650 | ····when:·syscalls_found·|·length·==·0 |
| 4651 | ··when: | 4651 | ··when: |
| 4652 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4653 | ··-·'"audit"·in·ansible_facts.packages' | 4652 | ··-·'"audit"·in·ansible_facts.packages' |
| 4653 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4654 | ··tags: | 4654 | ··tags: |
| 4655 | ··-·CJIS-5.4.1.1 | 4655 | ··-·CJIS-5.4.1.1 |
| 4656 | ··-·DISA-STIG-OL08-00-030480 | 4656 | ··-·DISA-STIG-OL08-00-030480 |
| 4657 | ··-·NIST-800-171-3.1.7 | 4657 | ··-·NIST-800-171-3.1.7 |
| 4658 | ··-·NIST-800-53-AU-12(c) | 4658 | ··-·NIST-800-53-AU-12(c) |
| 4659 | ··-·NIST-800-53-AU-2(d) | 4659 | ··-·NIST-800-53-AU-2(d) |
| 4660 | ··-·NIST-800-53-CM-6(a) | 4660 | ··-·NIST-800-53-CM-6(a) |
| Offset 4791, 16 lines modified | Offset 4791, 16 lines modified | ||
| 4791 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 4791 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 4792 | ········-F·auid!=unset·-F·key=perm_mod | 4792 | ········-F·auid!=unset·-F·key=perm_mod |
| 4793 | ······create:·true | 4793 | ······create:·true |
| 4794 | ······mode:·o-rwx | 4794 | ······mode:·o-rwx |
| 4795 | ······state:·present | 4795 | ······state:·present |
| 4796 | ····when:·syscalls_found·|·length·==·0 | 4796 | ····when:·syscalls_found·|·length·==·0 |
| 4797 | ··when: | 4797 | ··when: |
| 4798 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4799 | ··-·'"audit"·in·ansible_facts.packages' | 4798 | ··-·'"audit"·in·ansible_facts.packages' |
| 4799 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4800 | ··-·audit_arch·==·"b64" | 4800 | ··-·audit_arch·==·"b64" |
| 4801 | ··tags: | 4801 | ··tags: |
| 4802 | ··-·CJIS-5.4.1.1 | 4802 | ··-·CJIS-5.4.1.1 |
| 4803 | ··-·DISA-STIG-OL08-00-030480 | 4803 | ··-·DISA-STIG-OL08-00-030480 |
| 4804 | ··-·NIST-800-171-3.1.7 | 4804 | ··-·NIST-800-171-3.1.7 |
| 4805 | ··-·NIST-800-53-AU-12(c) | 4805 | ··-·NIST-800-53-AU-12(c) |
| 4806 | ··-·NIST-800-53-AU-2(d) | 4806 | ··-·NIST-800-53-AU-2(d) |
| Offset 4810, 15 lines modified | Offset 4810, 15 lines modified | ||
| 4810 | ··-·low_complexity | 4810 | ··-·low_complexity |
| 4811 | ··-·low_disruption | 4811 | ··-·low_disruption |
| 4812 | ··-·medium_severity | 4812 | ··-·medium_severity |
| Max diff block lines reached; 131266/135900 bytes (96.59%) of diff not shown. | |||
| Offset 57917, 23 lines modified | Offset 57917, 23 lines modified | ||
| 000e23c0:·2020·2020·7265·6765·7870·3a20·5e5c·732a······regexp:·^\s* | 000e23c0:·2020·2020·7265·6765·7870·3a20·5e5c·732a······regexp:·^\s* | ||
| 000e23d0:·666c·7573·685c·732a·3d5c·732a·2e2a·240a··flush\s*=\s*.*$. | 000e23d0:·666c·7573·685c·732a·3d5c·732a·2e2a·240a··flush\s*=\s*.*$. | ||
| 000e23e0:·2020·2020·6c69·6e65·3a20·666c·7573·6820······line:·flush· | 000e23e0:·2020·2020·6c69·6e65·3a20·666c·7573·6820······line:·flush· | ||
| 000e23f0:·3d20·7b7b·2076·6172·5f61·7564·6974·645f··=·{{·var_auditd_ | 000e23f0:·3d20·7b7b·2076·6172·5f61·7564·6974·645f··=·{{·var_auditd_ | ||
| 000e2400:·666c·7573·6820·7d7d·0a20·2020·2073·7461··flush·}}.····sta | 000e2400:·666c·7573·6820·7d7d·0a20·2020·2073·7461··flush·}}.····sta | ||
| 000e2410:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | 000e2410:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | ||
| 000e2420:·6372·6561·7465·3a20·7472·7565·0a20·2077··create:·true.··w | 000e2420:·6372·6561·7465·3a20·7472·7565·0a20·2077··create:·true.··w | ||
| 000e2430:·6865·6e3a·0a20·202d·20 | 000e2430:·6865·6e3a·0a20·202d·2027·2261·7564·6974··hen:.··-·'"audit | ||
| 000e2440:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000e2450:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000e2460:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000e2470:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000e2480:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 000e2490:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | |||
| 000e24 | 000e2440:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 000e2450:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000e2460:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000e2470:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000e2480:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000e2490:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000e24a0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000e24b0:·6 | 000e24b0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 000e24c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 000e24c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 000e24d0:·332e·332e·310a·2020·2d20·4e49·5354·2d38··3.3.1.··-·NIST-8 | 000e24d0:·332e·332e·310a·2020·2d20·4e49·5354·2d38··3.3.1.··-·NIST-8 | ||
| 000e24e0:·3030·2d35·332d·4155·2d31·310a·2020·2d20··00-53-AU-11.··-· | 000e24e0:·3030·2d35·332d·4155·2d31·310a·2020·2d20··00-53-AU-11.··-· | ||
| 000e24f0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | 000e24f0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 000e2500:·2861·290a·2020·2d20·6175·6469·7464·5f64··(a).··-·auditd_d | 000e2500:·2861·290a·2020·2d20·6175·6469·7464·5f64··(a).··-·auditd_d | ||
| 000e2510:·6174·615f·7265·7465·6e74·696f·6e5f·666c··ata_retention_fl | 000e2510:·6174·615f·7265·7465·6e74·696f·6e5f·666c··ata_retention_fl | ||
| 000e2520:·7573·680a·2020·2d20·6c6f·775f·636f·6d70··ush.··-·low_comp | 000e2520:·7573·680a·2020·2d20·6c6f·775f·636f·6d70··ush.··-·low_comp | ||
| Offset 57959, 21 lines modified | Offset 57959, 21 lines modified | ||
| 000e2660:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | 000e2660:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 000e2670:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | 000e2670:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 000e2680:·7073·6522·2069·643d·2269·646d·3335·3533··pse"·id="idm3553 | 000e2680:·7073·6522·2069·643d·2269·646d·3335·3533··pse"·id="idm3553 | ||
| 000e2690:·3122·3e3c·7072·653e·3c63·6f64·653e·2320··1"><pre><code>#· | 000e2690:·3122·3e3c·7072·653e·3c63·6f64·653e·2320··1"><pre><code>#· | ||
| 000e26a0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 000e26a0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 000e26b0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 000e26b0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000e26c0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 000e26c0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 000e26d0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 000e26 | 000e26d0:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | ||
| 000e26e0:·6574·202d·7120·6175·6469·7420·2661·6d70··et·-q·audit·& | |||
| 000e26f0:·3b26·616d·703b·205b·2021·202d·6620·2f | 000e26f0:·3b26·616d·703b·205b·2021·202d·6620·2f2e··;&·[·!·-f·/. | ||
| 000e2700:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 000e2710:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 000e27 | 000e2720:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | ||
| 000e2710:·205d·2026·616d·703b·2661·6d70·3b20·7270···]·&&·rp | |||
| 000e2720:·6d20·2d2d·7175·6965·7420·2d71·2061·7564··m·--quiet·-q·aud | |||
| 000e2730:· | 000e2730:·205d·3b20·7468·656e·0a0a·7661·725f·6175···];·then..var_au | ||
| 000e2740:·6469·7464·5f66·6c75·7368·3d27·3c61·6262··ditd_flush='<abb | 000e2740:·6469·7464·5f66·6c75·7368·3d27·3c61·6262··ditd_flush='<abb | ||
| 000e2750:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | 000e2750:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | ||
| 000e2760:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | 000e2760:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | ||
| 000e2770:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | 000e2770:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | ||
| 000e2780:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000e2780:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000e2790:·5f76·616c·7565·5f76·6172·5f61·7564·6974··_value_var_audit | 000e2790:·5f76·616c·7565·5f76·6172·5f61·7564·6974··_value_var_audit | ||
| 000e27a0:·645f·666c·7573·6822·3e69·6e63·7265·6d65··d_flush">increme | 000e27a0:·645f·666c·7573·6822·3e69·6e63·7265·6d65··d_flush">increme | ||
| Offset 58287, 23 lines modified | Offset 58287, 23 lines modified | ||
| 000e3ae0:·6469·7464·2e63·6f6e·660a·2020·2020·2020··ditd.conf.······ | 000e3ae0:·6469·7464·2e63·6f6e·660a·2020·2020·2020··ditd.conf.······ | ||
| 000e3af0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 000e3af0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 000e3b00:·2020·2072·6567·6578·703a·2028·3f69·295e·····regexp:·(?i)^ | 000e3b00:·2020·2072·6567·6578·703a·2028·3f69·295e·····regexp:·(?i)^ | ||
| 000e3b10:·5c73·2a66·7265·715c·732a·3d5c·732a·0a20··\s*freq\s*=\s*.· | 000e3b10:·5c73·2a66·7265·715c·732a·3d5c·732a·0a20··\s*freq\s*=\s*.· | ||
| 000e3b20:·2020·2020·206c·696e·653a·2066·7265·7120·······line:·freq· | 000e3b20:·2020·2020·206c·696e·653a·2066·7265·7120·······line:·freq· | ||
| 000e3b30:·3d20·3530·0a20·2020·2020·2073·7461·7465··=·50.······state | 000e3b30:·3d20·3530·0a20·2020·2020·2073·7461·7465··=·50.······state | ||
| 000e3b40:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | 000e3b40:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 000e3b50:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 000e3b60:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000e3b70:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000e3b80:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000e3b90:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000e3ba0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000e3bb0:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 000e3b | 000e3b50:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 000e3b60:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000e3b70:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 000e3b80:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000e3b90:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000e3ba0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000e3bb0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000e3bc0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000e3bd0:· | 000e3bd0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 000e3be0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | 000e3be0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 000e3bf0:·0a20·202d·2061·7564·6974·645f·6672·6571··.··-·auditd_freq | 000e3bf0:·0a20·202d·2061·7564·6974·645f·6672·6571··.··-·auditd_freq | ||
| 000e3c00:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | 000e3c00:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | ||
| 000e3c10:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | 000e3c10:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | ||
| 000e3c20:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | 000e3c20:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 000e3c30:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | 000e3c30:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 000e3c40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | 000e3c40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| Offset 58337, 21 lines modified | Offset 58337, 21 lines modified | ||
| 000e3e00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | 000e3e00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 000e3e10:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | 000e3e10:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 000e3e20:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | 000e3e20:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 000e3e30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | 000e3e30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 000e3e40:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 000e3e40:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 000e3e50:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 000e3e50:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 000e3e60:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 000e3e60:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 000e3e70:·6c61·7466·6f72·6d73·0a69·6620· | 000e3e70:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | ||
| 000e3e80:·2d | 000e3e80:·2d2d·7175·6965·7420·2d71·2061·7564·6974··--quiet·-q·audit | ||
| 000e3e90:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 000e3e90:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 000e3ea0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 000e3eb0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 000e3e | 000e3ec0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 000e3ed0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 000e3eb0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 000e3ec0:·703b·2072·706d·202d·2d71·7569·6574·202d··p;·rpm·--quiet·- | |||
| 000e3ed0:·7120·6175·6469·743b·2074·6865·6e0a·0a69··q·audit;·then..i | |||
| 000e3ee0:·6620·5b20·2d65·2022·2f65·7463·2f61·7564··f·[·-e·"/etc/aud | 000e3ee0:·6620·5b20·2d65·2022·2f65·7463·2f61·7564··f·[·-e·"/etc/aud | ||
| 000e3ef0:·6974·2f61·7564·6974·642e·636f·6e66·2220··it/auditd.conf"· | 000e3ef0:·6974·2f61·7564·6974·642e·636f·6e66·2220··it/auditd.conf"· | ||
| 000e3f00:·5d20·3b20·7468·656e·0a20·2020·200a·2020··]·;·then.····.·· | 000e3f00:·5d20·3b20·7468·656e·0a20·2020·200a·2020··]·;·then.····.·· | ||
| 000e3f10:·2020·4c43·5f41·4c4c·3d43·2073·6564·202d····LC_ALL=C·sed·- | 000e3f10:·2020·4c43·5f41·4c4c·3d43·2073·6564·202d····LC_ALL=C·sed·- | ||
| 000e3f20:·6920·222f·5e5c·732a·6672·6571·5c73·2a3d··i·"/^\s*freq\s*= | 000e3f20:·6920·222f·5e5c·732a·6672·6571·5c73·2a3d··i·"/^\s*freq\s*= | ||
| 000e3f30:·5c73·2a2f·4964·2220·222f·6574·632f·6175··\s*/Id"·"/etc/au | 000e3f30:·5c73·2a2f·4964·2220·222f·6574·632f·6175··\s*/Id"·"/etc/au | ||
| 000e3f40:·6469·742f·6175·6469·7464·2e63·6f6e·6622··dit/auditd.conf" | 000e3f40:·6469·742f·6175·6469·7464·2e63·6f6e·6622··dit/auditd.conf" | ||
| Offset 58626, 23 lines modified | Offset 58626, 23 lines modified | ||
| 000e5010:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | 000e5010:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | ||
| 000e5020:·2020·7265·6765·7870·3a20·283f·6929·5e5c····regexp:·(?i)^\ | 000e5020:·2020·7265·6765·7870·3a20·283f·6929·5e5c····regexp:·(?i)^\ | ||
| 000e5030:·732a·6c6f·6361·6c5f·6576·656e·7473·5c73··s*local_events\s | 000e5030:·732a·6c6f·6361·6c5f·6576·656e·7473·5c73··s*local_events\s | ||
| 000e5040:·2a3d·5c73·2a0a·2020·2020·2020·6c69·6e65··*=\s*.······line | 000e5040:·2a3d·5c73·2a0a·2020·2020·2020·6c69·6e65··*=\s*.······line | ||
| 000e5050:·3a20·6c6f·6361·6c5f·6576·656e·7473·203d··:·local_events·= | 000e5050:·3a20·6c6f·6361·6c5f·6576·656e·7473·203d··:·local_events·= | ||
| 000e5060:·2079·6573·0a20·2020·2020·2073·7461·7465···yes.······state | 000e5060:·2079·6573·0a20·2020·2020·2073·7461·7465···yes.······state | ||
| 000e5070:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | 000e5070:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 000e5080:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 000e5090:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000e50a0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000e50b0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000e50c0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000e50d0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000e50e0:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 000e50 | 000e5080:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 000e5090:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| Max diff block lines reached; 14465/24600 bytes (58.80%) of diff not shown. | |||
| Offset 7492, 29 lines modified | Offset 7492, 29 lines modified | ||
| 7492 | ··lineinfile: | 7492 | ··lineinfile: |
| 7493 | ····dest:·/etc/audit/auditd.conf | 7493 | ····dest:·/etc/audit/auditd.conf |
| 7494 | ····regexp:·^\s*flush\s*=\s*.*$ | 7494 | ····regexp:·^\s*flush\s*=\s*.*$ |
| 7495 | ····line:·flush·=·{{·var_auditd_flush·}} | 7495 | ····line:·flush·=·{{·var_auditd_flush·}} |
| 7496 | ····state:·present | 7496 | ····state:·present |
| 7497 | ····create:·true | 7497 | ····create:·true |
| 7498 | ··when: | 7498 | ··when: |
| 7499 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7500 | ··-·'"audit"·in·ansible_facts.packages' | 7499 | ··-·'"audit"·in·ansible_facts.packages' |
| 7500 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7501 | ··tags: | 7501 | ··tags: |
| 7502 | ··-·NIST-800-171-3.3.1 | 7502 | ··-·NIST-800-171-3.3.1 |
| 7503 | ··-·NIST-800-53-AU-11 | 7503 | ··-·NIST-800-53-AU-11 |
| 7504 | ··-·NIST-800-53-CM-6(a) | 7504 | ··-·NIST-800-53-CM-6(a) |
| 7505 | ··-·auditd_data_retention_flush | 7505 | ··-·auditd_data_retention_flush |
| 7506 | ··-·low_complexity | 7506 | ··-·low_complexity |
| 7507 | ··-·low_disruption | 7507 | ··-·low_disruption |
| 7508 | ··-·medium_severity | 7508 | ··-·medium_severity |
| 7509 | ··-·no_reboot_needed | 7509 | ··-·no_reboot_needed |
| 7510 | ··-·restrict_strategy | 7510 | ··-·restrict_strategy |
| 7511 | Remediation_Shell_script_⇲ | 7511 | Remediation_Shell_script_⇲ |
| 7512 | #·Remediation·is·applicable·only·in·certain·platforms | 7512 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7513 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7513 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7514 | var_auditd_flush='incremental_async' | 7514 | var_auditd_flush='incremental_async' |
| 7515 | AUDITCONFIG=/etc/audit/auditd.conf | 7515 | AUDITCONFIG=/etc/audit/auditd.conf |
| 7516 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush | 7516 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush |
| Offset 7592, 30 lines modified | Offset 7592, 30 lines modified | ||
| 7592 | ····lineinfile: | 7592 | ····lineinfile: |
| 7593 | ······path:·/etc/audit/auditd.conf | 7593 | ······path:·/etc/audit/auditd.conf |
| 7594 | ······create:·true | 7594 | ······create:·true |
| 7595 | ······regexp:·(?i)^\s*freq\s*=\s* | 7595 | ······regexp:·(?i)^\s*freq\s*=\s* |
| 7596 | ······line:·freq·=·50 | 7596 | ······line:·freq·=·50 |
| 7597 | ······state:·present | 7597 | ······state:·present |
| 7598 | ··when: | 7598 | ··when: |
| 7599 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7600 | ··-·'"audit"·in·ansible_facts.packages' | 7599 | ··-·'"audit"·in·ansible_facts.packages' |
| 7600 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7601 | ··tags: | 7601 | ··tags: |
| 7602 | ··-·NIST-800-53-CM-6 | 7602 | ··-·NIST-800-53-CM-6 |
| 7603 | ··-·auditd_freq | 7603 | ··-·auditd_freq |
| 7604 | ··-·low_complexity | 7604 | ··-·low_complexity |
| 7605 | ··-·low_disruption | 7605 | ··-·low_disruption |
| 7606 | ··-·medium_severity | 7606 | ··-·medium_severity |
| 7607 | ··-·no_reboot_needed | 7607 | ··-·no_reboot_needed |
| 7608 | ··-·restrict_strategy | 7608 | ··-·restrict_strategy |
| 7609 | Remediation_Shell_script_⇲ | 7609 | Remediation_Shell_script_⇲ |
| 7610 | Complexity:·low | 7610 | Complexity:·low |
| 7611 | Disruption:·low | 7611 | Disruption:·low |
| 7612 | Strategy:···restrict | 7612 | Strategy:···restrict |
| 7613 | #·Remediation·is·applicable·only·in·certain·platforms | 7613 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7614 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7614 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7615 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then | 7615 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then |
| 7616 | ····LC_ALL=C·sed·-i·"/^\s*freq\s*=\s*/Id"·"/etc/audit/auditd.conf" | 7616 | ····LC_ALL=C·sed·-i·"/^\s*freq\s*=\s*/Id"·"/etc/audit/auditd.conf" |
| 7617 | else | 7617 | else |
| 7618 | ····touch·"/etc/audit/auditd.conf" | 7618 | ····touch·"/etc/audit/auditd.conf" |
| 7619 | fi | 7619 | fi |
| Offset 7679, 31 lines modified | Offset 7679, 31 lines modified | ||
| 7679 | ····lineinfile: | 7679 | ····lineinfile: |
| 7680 | ······path:·/etc/audit/auditd.conf | 7680 | ······path:·/etc/audit/auditd.conf |
| 7681 | ······create:·true | 7681 | ······create:·true |
| 7682 | ······regexp:·(?i)^\s*local_events\s*=\s* | 7682 | ······regexp:·(?i)^\s*local_events\s*=\s* |
| 7683 | ······line:·local_events·=·yes | 7683 | ······line:·local_events·=·yes |
| 7684 | ······state:·present | 7684 | ······state:·present |
| 7685 | ··when: | 7685 | ··when: |
| 7686 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7687 | ··-·'"audit"·in·ansible_facts.packages' | 7686 | ··-·'"audit"·in·ansible_facts.packages' |
| 7687 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7688 | ··tags: | 7688 | ··tags: |
| 7689 | ··-·DISA-STIG-OL08-00-030061 | 7689 | ··-·DISA-STIG-OL08-00-030061 |
| 7690 | ··-·NIST-800-53-CM-6 | 7690 | ··-·NIST-800-53-CM-6 |
| 7691 | ··-·auditd_local_events | 7691 | ··-·auditd_local_events |
| 7692 | ··-·low_complexity | 7692 | ··-·low_complexity |
| 7693 | ··-·low_disruption | 7693 | ··-·low_disruption |
| 7694 | ··-·medium_severity | 7694 | ··-·medium_severity |
| 7695 | ··-·no_reboot_needed | 7695 | ··-·no_reboot_needed |
| 7696 | ··-·restrict_strategy | 7696 | ··-·restrict_strategy |
| 7697 | Remediation_Shell_script_⇲ | 7697 | Remediation_Shell_script_⇲ |
| 7698 | Complexity:·low | 7698 | Complexity:·low |
| 7699 | Disruption:·low | 7699 | Disruption:·low |
| 7700 | Strategy:···restrict | 7700 | Strategy:···restrict |
| 7701 | #·Remediation·is·applicable·only·in·certain·platforms | 7701 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7702 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7702 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7703 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then | 7703 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then |
| 7704 | ····LC_ALL=C·sed·-i·"/^\s*local_events\s*=\s*/Id"·"/etc/audit/auditd.conf" | 7704 | ····LC_ALL=C·sed·-i·"/^\s*local_events\s*=\s*/Id"·"/etc/audit/auditd.conf" |
| 7705 | else | 7705 | else |
| 7706 | ····touch·"/etc/audit/auditd.conf" | 7706 | ····touch·"/etc/audit/auditd.conf" |
| 7707 | fi | 7707 | fi |
| Offset 7768, 16 lines modified | Offset 7768, 16 lines modified | ||
| 7768 | ····lineinfile: | 7768 | ····lineinfile: |
| 7769 | ······path:·/etc/audit/auditd.conf | 7769 | ······path:·/etc/audit/auditd.conf |
| 7770 | ······create:·true | 7770 | ······create:·true |
| 7771 | ······regexp:·(?i)^\s*log_format\s*=\s* | 7771 | ······regexp:·(?i)^\s*log_format\s*=\s* |
| 7772 | ······line:·log_format·=·ENRICHED | 7772 | ······line:·log_format·=·ENRICHED |
| 7773 | ······state:·present | 7773 | ······state:·present |
| 7774 | ··when: | 7774 | ··when: |
| 7775 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7776 | ··-·'"audit"·in·ansible_facts.packages' | 7775 | ··-·'"audit"·in·ansible_facts.packages' |
| 7776 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7777 | ··tags: | 7777 | ··tags: |
| 7778 | ··-·DISA-STIG-OL08-00-030063 | 7778 | ··-·DISA-STIG-OL08-00-030063 |
| 7779 | ··-·NIST-800-53-AU-3 | 7779 | ··-·NIST-800-53-AU-3 |
| 7780 | ··-·NIST-800-53-CM-6 | 7780 | ··-·NIST-800-53-CM-6 |
| 7781 | ··-·auditd_log_format | 7781 | ··-·auditd_log_format |
| 7782 | ··-·low_complexity | 7782 | ··-·low_complexity |
| 7783 | ··-·low_disruption | 7783 | ··-·low_disruption |
| Offset 7785, 15 lines modified | Offset 7785, 15 lines modified | ||
| 7785 | ··-·no_reboot_needed | 7785 | ··-·no_reboot_needed |
| 7786 | ··-·restrict_strategy | 7786 | ··-·restrict_strategy |
| 7787 | Remediation_Shell_script_⇲ | 7787 | Remediation_Shell_script_⇲ |
| 7788 | Complexity:·low | 7788 | Complexity:·low |
| 7789 | Disruption:·low | 7789 | Disruption:·low |
| 7790 | Strategy:···restrict | 7790 | Strategy:···restrict |
| 7791 | #·Remediation·is·applicable·only·in·certain·platforms | 7791 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7792 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7792 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7793 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then | 7793 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then |
| 7794 | ····LC_ALL=C·sed·-i·"/^\s*log_format\s*=\s*/Id"·"/etc/audit/auditd.conf" | 7794 | ····LC_ALL=C·sed·-i·"/^\s*log_format\s*=\s*/Id"·"/etc/audit/auditd.conf" |
| 7795 | else | 7795 | else |
| Max diff block lines reached; 2184/6471 bytes (33.75%) of diff not shown. | |||
| Offset 28061, 22 lines modified | Offset 28061, 22 lines modified | ||
| 0006d9c0:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | 0006d9c0:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0006d9d0:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | 0006d9d0:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | ||
| 0006d9e0:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | 0006d9e0:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | ||
| 0006d9f0:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | 0006d9f0:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | ||
| 0006da00:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | 0006da00:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | ||
| 0006da10:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | 0006da10:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | ||
| 0006da20:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | 0006da20:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | ||
| 0006da30:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 0006da40:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0006da50:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0006da60:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0006da70:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0006da80:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 0006da90:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 0006da | 0006da30:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | ||
| 0006da40:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0006da50:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 0006da60:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0006da70:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0006da80:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0006da90:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0006daa0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0006dab0:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | 0006dab0:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | ||
| 0006dac0:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | 0006dac0:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | ||
| 0006dad0:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | 0006dad0:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | ||
| 0006dae0:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | 0006dae0:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | ||
| 0006daf0:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | 0006daf0:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | ||
| 0006db00:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 0006db00:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 0006db10:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | 0006db10:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | ||
| Offset 28384, 23 lines modified | Offset 28384, 23 lines modified | ||
| 0006edf0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 0006edf0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 0006ee00:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 0006ee00:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 0006ee10:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 0006ee10:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 0006ee20:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 0006ee20:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 0006ee30:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 0006ee30:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 0006ee40:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 0006ee40:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 0006ee50:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 0006ee50:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 0006ee60:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 0006ee70:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0006ee80:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0006ee90:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0006eea0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0006eeb0:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 0006eec0:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 0006ee | 0006ee60:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 0006ee70:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0006ee80:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 0006ee90:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0006eea0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0006eeb0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0006eec0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0006eed0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0006eee0:· | 0006eee0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 0006eef0:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | 0006eef0:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | ||
| 0006ef00:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | 0006ef00:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | ||
| 0006ef10:·302d·3033·3034·3930·0a20·202d·204e·4953··0-030490.··-·NIS | 0006ef10:·302d·3033·3034·3930·0a20·202d·204e·4953··0-030490.··-·NIS | ||
| 0006ef20:·542d·3830·302d·3137·312d·332e·312e·370a··T-800-171-3.1.7. | 0006ef20:·542d·3830·302d·3137·312d·332e·312e·370a··T-800-171-3.1.7. | ||
| 0006ef30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | 0006ef30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0006ef40:·4155·2d31·3228·6329·0a20·202d·204e·4953··AU-12(c).··-·NIS | 0006ef40:·4155·2d31·3228·6329·0a20·202d·204e·4953··AU-12(c).··-·NIS | ||
| 0006ef50:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | 0006ef50:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | ||
| Offset 28695, 23 lines modified | Offset 28695, 23 lines modified | ||
| 00070160:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | 00070160:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | ||
| 00070170:·640a·2020·2020·2020·6372·6561·7465·3a20··d.······create:· | 00070170:·640a·2020·2020·2020·6372·6561·7465·3a20··d.······create:· | ||
| 00070180:·7472·7565·0a20·2020·2020·206d·6f64·653a··true.······mode: | 00070180:·7472·7565·0a20·2020·2020·206d·6f64·653a··true.······mode: | ||
| 00070190:·206f·2d72·7778·0a20·2020·2020·2073·7461···o-rwx.······sta | 00070190:·206f·2d72·7778·0a20·2020·2020·2073·7461···o-rwx.······sta | ||
| 000701a0:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | 000701a0:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | ||
| 000701b0:·7768·656e·3a20·7379·7363·616c·6c73·5f66··when:·syscalls_f | 000701b0:·7768·656e·3a20·7379·7363·616c·6c73·5f66··when:·syscalls_f | ||
| 000701c0:·6f75·6e64·207c·206c·656e·6774·6820·3d3d··ound·|·length·== | 000701c0:·6f75·6e64·207c·206c·656e·6774·6820·3d3d··ound·|·length·== | ||
| 000701d0:·2030·0a20·2077·6865·6e3a·0a20·202d·20 | 000701d0:·2030·0a20·2077·6865·6e3a·0a20·202d·2027···0.··when:.··-·' | ||
| 000701e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 000701f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00070200:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00070210:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00070220:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 00070230:·6572·225d·0a20·202d·2027·2261·7564·6974··er"].··-·'"audit | |||
| 00070240:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00070 | 000701e0:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | ||
| 000701f0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 00070200:·7327·0a20·202d·2061·6e73·6962·6c65·5f76··s'.··-·ansible_v | |||
| 00070210:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00070220:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00070230:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00070240:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00070250:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 00070260:·2061·7564·6974·5f61·7263·6820·3d3d·2022···audit_arch·==·" | 00070260:·2061·7564·6974·5f61·7263·6820·3d3d·2022···audit_arch·==·" | ||
| 00070270:·6236·3422·0a20·2074·6167·733a·0a20·202d··b64".··tags:.··- | 00070270:·6236·3422·0a20·2074·6167·733a·0a20·202d··b64".··tags:.··- | ||
| 00070280:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | 00070280:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | ||
| 00070290:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | 00070290:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | ||
| 000702a0:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | 000702a0:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | ||
| 000702b0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 000702b0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 000702c0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 000702c0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| Offset 28745, 21 lines modified | Offset 28745, 21 lines modified | ||
| 00070480:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | 00070480:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 00070490:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | 00070490:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 000704a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | 000704a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 000704b0:·3232·3636·3922·3e3c·7072·653e·3c63·6f64··22669"><pre><cod | 000704b0:·3232·3636·3922·3e3c·7072·653e·3c63·6f64··22669"><pre><cod | ||
| 000704c0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | 000704c0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 000704d0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | 000704d0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 000704e0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | 000704e0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 000704f0:·6174·666f·726d·730a·6966·20 | 000704f0:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | ||
| 00070500:· | 00070500:·2d71·7569·6574·202d·7120·6175·6469·7420··-quiet·-q·audit· | ||
| 00070510:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | 00070510:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | ||
| 00070520:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 00070530:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 000705 | 00070540:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | ||
| 00070530:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 00070540:·3b20·7270·6d20·2d2d·7175·6965·7420·2d71··;·rpm·--quiet·-q | |||
| 00070550:· | 00070550:·7265·6e76·205d·3b20·7468·656e·0a0a·2320··renv·];·then..#· | ||
| 00070560:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | 00070560:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | ||
| 00070570:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | 00070570:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | ||
| 00070580:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | 00070580:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | ||
| 00070590:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | 00070590:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | ||
| 000705a0:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | 000705a0:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | ||
| 000705b0:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | 000705b0:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | ||
| 000705c0:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | 000705c0:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | ||
| Offset 30557, 23 lines modified | Offset 30557, 23 lines modified | ||
| 000775c0:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | 000775c0:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | ||
| 000775d0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | 000775d0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 000775e0:·0a2d·206e·616d·653a·2053·6574·2061·7263··.-·name:·Set·arc | 000775e0:·0a2d·206e·616d·653a·2053·6574·2061·7263··.-·name:·Set·arc | ||
| 000775f0:·6869·7465·6374·7572·6520·666f·7220·6175··hitecture·for·au | 000775f0:·6869·7465·6374·7572·6520·666f·7220·6175··hitecture·for·au | ||
| 00077600:·6469·7420·6368·6f77·6e20·7461·736b·730a··dit·chown·tasks. | 00077600:·6469·7420·6368·6f77·6e20·7461·736b·730a··dit·chown·tasks. | ||
| 00077610:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | 00077610:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 00077620:·6175·6469·745f·6172·6368·3a20·6236·340a··audit_arch:·b64. | 00077620:·6175·6469·745f·6172·6368·3a20·6236·340a··audit_arch:·b64. | ||
| 00077630:·2020·7768·656e·3a0a·2020·2d20· | 00077630:·2020·7768·656e·3a0a·2020·2d20·2722·6175····when:.··-·'"au | ||
| 00077640:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 00077650:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 00077660:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| Max diff block lines reached; 267244/277517 bytes (96.30%) of diff not shown. | |||
| Offset 1640, 16 lines modified | Offset 1640, 16 lines modified | ||
| 1640 | ··-·reboot_required | 1640 | ··-·reboot_required |
| 1641 | ··-·restrict_strategy | 1641 | ··-·restrict_strategy |
| 1642 | -·name:·Set·architecture·for·audit·chmod·tasks | 1642 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 1643 | ··set_fact: | 1643 | ··set_fact: |
| 1644 | ····audit_arch:·b64 | 1644 | ····audit_arch:·b64 |
| 1645 | ··when: | 1645 | ··when: |
| 1646 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1647 | ··-·'"audit"·in·ansible_facts.packages' | 1646 | ··-·'"audit"·in·ansible_facts.packages' |
| 1647 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1648 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1648 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 1649 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 1649 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 1650 | ··tags: | 1650 | ··tags: |
| 1651 | ··-·CJIS-5.4.1.1 | 1651 | ··-·CJIS-5.4.1.1 |
| 1652 | ··-·DISA-STIG-OL08-00-030490 | 1652 | ··-·DISA-STIG-OL08-00-030490 |
| 1653 | ··-·NIST-800-171-3.1.7 | 1653 | ··-·NIST-800-171-3.1.7 |
| 1654 | ··-·NIST-800-53-AU-12(c) | 1654 | ··-·NIST-800-53-AU-12(c) |
| Offset 1786, 16 lines modified | Offset 1786, 16 lines modified | ||
| 1786 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1786 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1787 | ········-F·auid!=unset·-F·key=perm_mod | 1787 | ········-F·auid!=unset·-F·key=perm_mod |
| 1788 | ······create:·true | 1788 | ······create:·true |
| 1789 | ······mode:·o-rwx | 1789 | ······mode:·o-rwx |
| 1790 | ······state:·present | 1790 | ······state:·present |
| 1791 | ····when:·syscalls_found·|·length·==·0 | 1791 | ····when:·syscalls_found·|·length·==·0 |
| 1792 | ··when: | 1792 | ··when: |
| 1793 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1794 | ··-·'"audit"·in·ansible_facts.packages' | 1793 | ··-·'"audit"·in·ansible_facts.packages' |
| 1794 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1795 | ··tags: | 1795 | ··tags: |
| 1796 | ··-·CJIS-5.4.1.1 | 1796 | ··-·CJIS-5.4.1.1 |
| 1797 | ··-·DISA-STIG-OL08-00-030490 | 1797 | ··-·DISA-STIG-OL08-00-030490 |
| 1798 | ··-·NIST-800-171-3.1.7 | 1798 | ··-·NIST-800-171-3.1.7 |
| 1799 | ··-·NIST-800-53-AU-12(c) | 1799 | ··-·NIST-800-53-AU-12(c) |
| 1800 | ··-·NIST-800-53-AU-2(d) | 1800 | ··-·NIST-800-53-AU-2(d) |
| 1801 | ··-·NIST-800-53-CM-6(a) | 1801 | ··-·NIST-800-53-CM-6(a) |
| Offset 1930, 16 lines modified | Offset 1930, 16 lines modified | ||
| 1930 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1930 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1931 | ········-F·auid!=unset·-F·key=perm_mod | 1931 | ········-F·auid!=unset·-F·key=perm_mod |
| 1932 | ······create:·true | 1932 | ······create:·true |
| 1933 | ······mode:·o-rwx | 1933 | ······mode:·o-rwx |
| 1934 | ······state:·present | 1934 | ······state:·present |
| 1935 | ····when:·syscalls_found·|·length·==·0 | 1935 | ····when:·syscalls_found·|·length·==·0 |
| 1936 | ··when: | 1936 | ··when: |
| 1937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1938 | ··-·'"audit"·in·ansible_facts.packages' | 1937 | ··-·'"audit"·in·ansible_facts.packages' |
| 1938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1939 | ··-·audit_arch·==·"b64" | 1939 | ··-·audit_arch·==·"b64" |
| 1940 | ··tags: | 1940 | ··tags: |
| 1941 | ··-·CJIS-5.4.1.1 | 1941 | ··-·CJIS-5.4.1.1 |
| 1942 | ··-·DISA-STIG-OL08-00-030490 | 1942 | ··-·DISA-STIG-OL08-00-030490 |
| 1943 | ··-·NIST-800-171-3.1.7 | 1943 | ··-·NIST-800-171-3.1.7 |
| 1944 | ··-·NIST-800-53-AU-12(c) | 1944 | ··-·NIST-800-53-AU-12(c) |
| 1945 | ··-·NIST-800-53-AU-2(d) | 1945 | ··-·NIST-800-53-AU-2(d) |
| Offset 1949, 15 lines modified | Offset 1949, 15 lines modified | ||
| 1949 | ··-·low_complexity | 1949 | ··-·low_complexity |
| 1950 | ··-·low_disruption | 1950 | ··-·low_disruption |
| 1951 | ··-·medium_severity | 1951 | ··-·medium_severity |
| 1952 | ··-·reboot_required | 1952 | ··-·reboot_required |
| 1953 | ··-·restrict_strategy | 1953 | ··-·restrict_strategy |
| 1954 | Remediation_Shell_script_⇲ | 1954 | Remediation_Shell_script_⇲ |
| 1955 | #·Remediation·is·applicable·only·in·certain·platforms | 1955 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1956 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 1956 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1957 | #·First·perform·the·remediation·of·the·syscall·rule | 1957 | #·First·perform·the·remediation·of·the·syscall·rule |
| 1958 | #·Retrieve·hardware·architecture·of·the·underlying·system | 1958 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 1959 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 1959 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 1960 | for·ARCH·in·"${RULE_ARCHS[@]}" | 1960 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 1961 | do | 1961 | do |
| Offset 2318, 16 lines modified | Offset 2318, 16 lines modified | ||
| 2318 | ··-·reboot_required | 2318 | ··-·reboot_required |
| 2319 | ··-·restrict_strategy | 2319 | ··-·restrict_strategy |
| 2320 | -·name:·Set·architecture·for·audit·chown·tasks | 2320 | -·name:·Set·architecture·for·audit·chown·tasks |
| 2321 | ··set_fact: | 2321 | ··set_fact: |
| 2322 | ····audit_arch:·b64 | 2322 | ····audit_arch:·b64 |
| 2323 | ··when: | 2323 | ··when: |
| 2324 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2325 | ··-·'"audit"·in·ansible_facts.packages' | 2324 | ··-·'"audit"·in·ansible_facts.packages' |
| 2325 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2326 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 2326 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 2327 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 2327 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 2328 | ··tags: | 2328 | ··tags: |
| 2329 | ··-·CJIS-5.4.1.1 | 2329 | ··-·CJIS-5.4.1.1 |
| 2330 | ··-·DISA-STIG-OL08-00-030480 | 2330 | ··-·DISA-STIG-OL08-00-030480 |
| 2331 | ··-·NIST-800-171-3.1.7 | 2331 | ··-·NIST-800-171-3.1.7 |
| 2332 | ··-·NIST-800-53-AU-12(c) | 2332 | ··-·NIST-800-53-AU-12(c) |
| Offset 2466, 16 lines modified | Offset 2466, 16 lines modified | ||
| 2466 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2466 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2467 | ········-F·auid!=unset·-F·key=perm_mod | 2467 | ········-F·auid!=unset·-F·key=perm_mod |
| 2468 | ······create:·true | 2468 | ······create:·true |
| 2469 | ······mode:·o-rwx | 2469 | ······mode:·o-rwx |
| 2470 | ······state:·present | 2470 | ······state:·present |
| 2471 | ····when:·syscalls_found·|·length·==·0 | 2471 | ····when:·syscalls_found·|·length·==·0 |
| 2472 | ··when: | 2472 | ··when: |
| 2473 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2474 | ··-·'"audit"·in·ansible_facts.packages' | 2473 | ··-·'"audit"·in·ansible_facts.packages' |
| 2474 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2475 | ··tags: | 2475 | ··tags: |
| 2476 | ··-·CJIS-5.4.1.1 | 2476 | ··-·CJIS-5.4.1.1 |
| 2477 | ··-·DISA-STIG-OL08-00-030480 | 2477 | ··-·DISA-STIG-OL08-00-030480 |
| 2478 | ··-·NIST-800-171-3.1.7 | 2478 | ··-·NIST-800-171-3.1.7 |
| 2479 | ··-·NIST-800-53-AU-12(c) | 2479 | ··-·NIST-800-53-AU-12(c) |
| 2480 | ··-·NIST-800-53-AU-2(d) | 2480 | ··-·NIST-800-53-AU-2(d) |
| 2481 | ··-·NIST-800-53-CM-6(a) | 2481 | ··-·NIST-800-53-CM-6(a) |
| Offset 2612, 16 lines modified | Offset 2612, 16 lines modified | ||
| 2612 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2612 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2613 | ········-F·auid!=unset·-F·key=perm_mod | 2613 | ········-F·auid!=unset·-F·key=perm_mod |
| 2614 | ······create:·true | 2614 | ······create:·true |
| 2615 | ······mode:·o-rwx | 2615 | ······mode:·o-rwx |
| 2616 | ······state:·present | 2616 | ······state:·present |
| 2617 | ····when:·syscalls_found·|·length·==·0 | 2617 | ····when:·syscalls_found·|·length·==·0 |
| 2618 | ··when: | 2618 | ··when: |
| 2619 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2620 | ··-·'"audit"·in·ansible_facts.packages' | 2619 | ··-·'"audit"·in·ansible_facts.packages' |
| 2620 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2621 | ··-·audit_arch·==·"b64" | 2621 | ··-·audit_arch·==·"b64" |
| 2622 | ··tags: | 2622 | ··tags: |
| 2623 | ··-·CJIS-5.4.1.1 | 2623 | ··-·CJIS-5.4.1.1 |
| 2624 | ··-·DISA-STIG-OL08-00-030480 | 2624 | ··-·DISA-STIG-OL08-00-030480 |
| 2625 | ··-·NIST-800-171-3.1.7 | 2625 | ··-·NIST-800-171-3.1.7 |
| 2626 | ··-·NIST-800-53-AU-12(c) | 2626 | ··-·NIST-800-53-AU-12(c) |
| 2627 | ··-·NIST-800-53-AU-2(d) | 2627 | ··-·NIST-800-53-AU-2(d) |
| Offset 2631, 15 lines modified | Offset 2631, 15 lines modified | ||
| 2631 | ··-·low_complexity | 2631 | ··-·low_complexity |
| 2632 | ··-·low_disruption | 2632 | ··-·low_disruption |
| 2633 | ··-·medium_severity | 2633 | ··-·medium_severity |
| Max diff block lines reached; 83262/87896 bytes (94.73%) of diff not shown. | |||
| Offset 31620, 23 lines modified | Offset 31620, 23 lines modified | ||
| 0007b830:·7569·7265·640a·2020·2d20·7265·7374·7269··uired.··-·restri | 0007b830:·7569·7265·640a·2020·2d20·7265·7374·7269··uired.··-·restri | ||
| 0007b840:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | 0007b840:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | ||
| 0007b850:·616d·653a·2053·6574·2061·7263·6869·7465··ame:·Set·archite | 0007b850:·616d·653a·2053·6574·2061·7263·6869·7465··ame:·Set·archite | ||
| 0007b860:·6374·7572·6520·666f·7220·6175·6469·7420··cture·for·audit· | 0007b860:·6374·7572·6520·666f·7220·6175·6469·7420··cture·for·audit· | ||
| 0007b870:·6368·6d6f·6420·7461·736b·730a·2020·7365··chmod·tasks.··se | 0007b870:·6368·6d6f·6420·7461·736b·730a·2020·7365··chmod·tasks.··se | ||
| 0007b880:·745f·6661·6374·3a0a·2020·2020·6175·6469··t_fact:.····audi | 0007b880:·745f·6661·6374·3a0a·2020·2020·6175·6469··t_fact:.····audi | ||
| 0007b890:·745f·6172·6368·3a20·6236·340a·2020·7768··t_arch:·b64.··wh | 0007b890:·745f·6172·6368·3a20·6236·340a·2020·7768··t_arch:·b64.··wh | ||
| 0007b8a0:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 0007b8b0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0007b8c0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0007b8d0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0007b8e0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0007b8f0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0007b900:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 0007b | 0007b8a0:·656e·3a0a·2020·2d20·2722·6175·6469·7422··en:.··-·'"audit" | ||
| 0007b8b0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0007b8c0:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 0007b8d0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0007b8e0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0007b8f0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0007b900:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0007b910:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0007b920:·6 | 0007b920:·6e65·7222·5d0a·2020·2d20·616e·7369·626c··ner"].··-·ansibl | ||
| 0007b930:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | 0007b930:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | ||
| 0007b940:·3d20·2261·6172·6368·3634·2220·6f72·2061··=·"aarch64"·or·a | 0007b940:·3d20·2261·6172·6368·3634·2220·6f72·2061··=·"aarch64"·or·a | ||
| 0007b950:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | 0007b950:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | ||
| 0007b960:·7572·6520·3d3d·2022·7070·6336·3422·206f··ure·==·"ppc64"·o | 0007b960:·7572·6520·3d3d·2022·7070·6336·3422·206f··ure·==·"ppc64"·o | ||
| 0007b970:·7220·616e·7369·626c·655f·6172·6368·6974··r·ansible_archit | 0007b970:·7220·616e·7369·626c·655f·6172·6368·6974··r·ansible_archit | ||
| 0007b980:·6563·7475·7265·0a20·2020·203d·3d20·2270··ecture.····==·"p | 0007b980:·6563·7475·7265·0a20·2020·203d·3d20·2270··ecture.····==·"p | ||
| 0007b990:·7063·3634·6c65·2220·6f72·2061·6e73·6962··pc64le"·or·ansib | 0007b990:·7063·3634·6c65·2220·6f72·2061·6e73·6962··pc64le"·or·ansib | ||
| Offset 31943, 23 lines modified | Offset 31943, 23 lines modified | ||
| 0007cc60:·206b·6579·3d70·6572·6d5f·6d6f·640a·2020···key=perm_mod.·· | 0007cc60:·206b·6579·3d70·6572·6d5f·6d6f·640a·2020···key=perm_mod.·· | ||
| 0007cc70:·2020·2020·6372·6561·7465·3a20·7472·7565······create:·true | 0007cc70:·2020·2020·6372·6561·7465·3a20·7472·7565······create:·true | ||
| 0007cc80:·0a20·2020·2020·206d·6f64·653a·206f·2d72··.······mode:·o-r | 0007cc80:·0a20·2020·2020·206d·6f64·653a·206f·2d72··.······mode:·o-r | ||
| 0007cc90:·7778·0a20·2020·2020·2073·7461·7465·3a20··wx.······state:· | 0007cc90:·7778·0a20·2020·2020·2073·7461·7465·3a20··wx.······state:· | ||
| 0007cca0:·7072·6573·656e·740a·2020·2020·7768·656e··present.····when | 0007cca0:·7072·6573·656e·740a·2020·2020·7768·656e··present.····when | ||
| 0007ccb0:·3a20·7379·7363·616c·6c73·5f66·6f75·6e64··:·syscalls_found | 0007ccb0:·3a20·7379·7363·616c·6c73·5f66·6f75·6e64··:·syscalls_found | ||
| 0007ccc0:·207c·206c·656e·6774·6820·3d3d·2030·0a20···|·length·==·0.· | 0007ccc0:·207c·206c·656e·6774·6820·3d3d·2030·0a20···|·length·==·0.· | ||
| 0007ccd0:·2077·6865·6e3a·0a20·202d·20 | 0007ccd0:·2077·6865·6e3a·0a20·202d·2027·2261·7564···when:.··-·'"aud | ||
| 0007cce0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0007ccf0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0007cd00:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0007cd10:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0007cd20:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0007cd30:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | |||
| 0007cd40:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0007c | 0007cce0:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | ||
| 0007ccf0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0007cd00:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 0007cd10:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0007cd20:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0007cd30:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0007cd40:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0007cd50:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0007cd60:·0a20·202d·2043·4a49·532d·352e·342e·312e··.··-·CJIS-5.4.1. | 0007cd60:·0a20·202d·2043·4a49·532d·352e·342e·312e··.··-·CJIS-5.4.1. | ||
| 0007cd70:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | 0007cd70:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0007cd80:·4f4c·3038·2d30·302d·3033·3034·3930·0a20··OL08-00-030490.· | 0007cd80:·4f4c·3038·2d30·302d·3033·3034·3930·0a20··OL08-00-030490.· | ||
| 0007cd90:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 0007cd90:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0007cda0:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | 0007cda0:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | ||
| 0007cdb0:·3030·2d35·332d·4155·2d31·3228·6329·0a20··00-53-AU-12(c).· | 0007cdb0:·3030·2d35·332d·4155·2d31·3228·6329·0a20··00-53-AU-12(c).· | ||
| 0007cdc0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 0007cdc0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| Offset 32255, 23 lines modified | Offset 32255, 23 lines modified | ||
| 0007dfe0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 0007dfe0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 0007dff0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 0007dff0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 0007e000:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 0007e000:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 0007e010:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 0007e010:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 0007e020:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 0007e020:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 0007e030:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 0007e030:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 0007e040:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 0007e040:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 0007e050:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 0007e060:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0007e070:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0007e080:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0007e090:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0007e0a0:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 0007e0b0:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 0007e0 | 0007e050:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 0007e060:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0007e070:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 0007e080:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0007e090:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0007e0a0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0007e0b0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0007e0c0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0007e0d0:· | 0007e0d0:·225d·0a20·202d·2061·7564·6974·5f61·7263··"].··-·audit_arc | ||
| 0007e0e0:·6820·3d3d·2022·6236·3422·0a20·2074·6167··h·==·"b64".··tag | 0007e0e0:·6820·3d3d·2022·6236·3422·0a20·2074·6167··h·==·"b64".··tag | ||
| 0007e0f0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 0007e0f0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 0007e100:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | 0007e100:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | ||
| 0007e110:·472d·4f4c·3038·2d30·302d·3033·3034·3930··G-OL08-00-030490 | 0007e110:·472d·4f4c·3038·2d30·302d·3033·3034·3930··G-OL08-00-030490 | ||
| 0007e120:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 0007e120:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0007e130:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 0007e130:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 0007e140:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | 0007e140:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | ||
| Offset 32305, 20 lines modified | Offset 32305, 20 lines modified | ||
| 0007e300:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | 0007e300:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0007e310:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | 0007e310:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0007e320:·643d·2269·646d·3232·3636·3922·3e3c·7072··d="idm22669"><pr | 0007e320:·643d·2269·646d·3232·3636·3922·3e3c·7072··d="idm22669"><pr | ||
| 0007e330:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 0007e330:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0007e340:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 0007e340:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0007e350:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 0007e350:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0007e360:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 0007e360:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0007e370:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0007e380:·6175·6469·7420·2661·6d70·3b26·616d·703b··audit·&& | |||
| 0007e3 | 0007e390:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| 0007e3 | 0007e3a0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | ||
| 0007e3 | 0007e3b0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | ||
| 0007e3 | 0007e3c0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | ||
| 0007e3b0:·703b·2661·6d70·3b20·7270·6d20·2d2d·7175··p;&·rpm·--qu | |||
| 0007e3c0:·6965·7420·2d71·2061·7564·6974·3b20·7468··iet·-q·audit;·th | |||
| 0007e3d0:·656e·0a0a·2320·4669·7273·7420·7065·7266··en..#·First·perf | 0007e3d0:·656e·0a0a·2320·4669·7273·7420·7065·7266··en..#·First·perf | ||
| 0007e3e0:·6f72·6d20·7468·6520·7265·6d65·6469·6174··orm·the·remediat | 0007e3e0:·6f72·6d20·7468·6520·7265·6d65·6469·6174··orm·the·remediat | ||
| 0007e3f0:·696f·6e20·6f66·2074·6865·2073·7973·6361··ion·of·the·sysca | 0007e3f0:·696f·6e20·6f66·2074·6865·2073·7973·6361··ion·of·the·sysca | ||
| 0007e400:·6c6c·2072·756c·650a·2320·5265·7472·6965··ll·rule.#·Retrie | 0007e400:·6c6c·2072·756c·650a·2320·5265·7472·6965··ll·rule.#·Retrie | ||
| 0007e410:·7665·2068·6172·6477·6172·6520·6172·6368··ve·hardware·arch | 0007e410:·7665·2068·6172·6477·6172·6520·6172·6368··ve·hardware·arch | ||
| 0007e420:·6974·6563·7475·7265·206f·6620·7468·6520··itecture·of·the· | 0007e420:·6974·6563·7475·7265·206f·6620·7468·6520··itecture·of·the· | ||
| 0007e430:·756e·6465·726c·7969·6e67·2073·7973·7465··underlying·syste | 0007e430:·756e·6465·726c·7969·6e67·2073·7973·7465··underlying·syste | ||
| Offset 34117, 22 lines modified | Offset 34117, 22 lines modified | ||
| 00085440:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | 00085440:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 00085450:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | 00085450:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | ||
| 00085460:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | 00085460:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | ||
| 00085470:·666f·7220·6175·6469·7420·6368·6f77·6e20··for·audit·chown· | 00085470:·666f·7220·6175·6469·7420·6368·6f77·6e20··for·audit·chown· | ||
| 00085480:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | 00085480:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | ||
| 00085490:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | 00085490:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | ||
| 000854a0:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | 000854a0:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | ||
| 000854b0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000854c0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000854d0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000854e0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| Max diff block lines reached; 722778/732982 bytes (98.61%) of diff not shown. | |||
| Offset 1991, 16 lines modified | Offset 1991, 16 lines modified | ||
| 1991 | ··-·reboot_required | 1991 | ··-·reboot_required |
| 1992 | ··-·restrict_strategy | 1992 | ··-·restrict_strategy |
| 1993 | -·name:·Set·architecture·for·audit·chmod·tasks | 1993 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 1994 | ··set_fact: | 1994 | ··set_fact: |
| 1995 | ····audit_arch:·b64 | 1995 | ····audit_arch:·b64 |
| 1996 | ··when: | 1996 | ··when: |
| 1997 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1998 | ··-·'"audit"·in·ansible_facts.packages' | 1997 | ··-·'"audit"·in·ansible_facts.packages' |
| 1998 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1999 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1999 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 2000 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 2000 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 2001 | ··tags: | 2001 | ··tags: |
| 2002 | ··-·CJIS-5.4.1.1 | 2002 | ··-·CJIS-5.4.1.1 |
| 2003 | ··-·DISA-STIG-OL08-00-030490 | 2003 | ··-·DISA-STIG-OL08-00-030490 |
| 2004 | ··-·NIST-800-171-3.1.7 | 2004 | ··-·NIST-800-171-3.1.7 |
| 2005 | ··-·NIST-800-53-AU-12(c) | 2005 | ··-·NIST-800-53-AU-12(c) |
| Offset 2137, 16 lines modified | Offset 2137, 16 lines modified | ||
| 2137 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2137 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2138 | ········-F·auid!=unset·-F·key=perm_mod | 2138 | ········-F·auid!=unset·-F·key=perm_mod |
| 2139 | ······create:·true | 2139 | ······create:·true |
| 2140 | ······mode:·o-rwx | 2140 | ······mode:·o-rwx |
| 2141 | ······state:·present | 2141 | ······state:·present |
| 2142 | ····when:·syscalls_found·|·length·==·0 | 2142 | ····when:·syscalls_found·|·length·==·0 |
| 2143 | ··when: | 2143 | ··when: |
| 2144 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2145 | ··-·'"audit"·in·ansible_facts.packages' | 2144 | ··-·'"audit"·in·ansible_facts.packages' |
| 2145 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2146 | ··tags: | 2146 | ··tags: |
| 2147 | ··-·CJIS-5.4.1.1 | 2147 | ··-·CJIS-5.4.1.1 |
| 2148 | ··-·DISA-STIG-OL08-00-030490 | 2148 | ··-·DISA-STIG-OL08-00-030490 |
| 2149 | ··-·NIST-800-171-3.1.7 | 2149 | ··-·NIST-800-171-3.1.7 |
| 2150 | ··-·NIST-800-53-AU-12(c) | 2150 | ··-·NIST-800-53-AU-12(c) |
| 2151 | ··-·NIST-800-53-AU-2(d) | 2151 | ··-·NIST-800-53-AU-2(d) |
| 2152 | ··-·NIST-800-53-CM-6(a) | 2152 | ··-·NIST-800-53-CM-6(a) |
| Offset 2281, 16 lines modified | Offset 2281, 16 lines modified | ||
| 2281 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2281 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2282 | ········-F·auid!=unset·-F·key=perm_mod | 2282 | ········-F·auid!=unset·-F·key=perm_mod |
| 2283 | ······create:·true | 2283 | ······create:·true |
| 2284 | ······mode:·o-rwx | 2284 | ······mode:·o-rwx |
| 2285 | ······state:·present | 2285 | ······state:·present |
| 2286 | ····when:·syscalls_found·|·length·==·0 | 2286 | ····when:·syscalls_found·|·length·==·0 |
| 2287 | ··when: | 2287 | ··when: |
| 2288 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2289 | ··-·'"audit"·in·ansible_facts.packages' | 2288 | ··-·'"audit"·in·ansible_facts.packages' |
| 2289 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2290 | ··-·audit_arch·==·"b64" | 2290 | ··-·audit_arch·==·"b64" |
| 2291 | ··tags: | 2291 | ··tags: |
| 2292 | ··-·CJIS-5.4.1.1 | 2292 | ··-·CJIS-5.4.1.1 |
| 2293 | ··-·DISA-STIG-OL08-00-030490 | 2293 | ··-·DISA-STIG-OL08-00-030490 |
| 2294 | ··-·NIST-800-171-3.1.7 | 2294 | ··-·NIST-800-171-3.1.7 |
| 2295 | ··-·NIST-800-53-AU-12(c) | 2295 | ··-·NIST-800-53-AU-12(c) |
| 2296 | ··-·NIST-800-53-AU-2(d) | 2296 | ··-·NIST-800-53-AU-2(d) |
| Offset 2300, 15 lines modified | Offset 2300, 15 lines modified | ||
| 2300 | ··-·low_complexity | 2300 | ··-·low_complexity |
| 2301 | ··-·low_disruption | 2301 | ··-·low_disruption |
| 2302 | ··-·medium_severity | 2302 | ··-·medium_severity |
| 2303 | ··-·reboot_required | 2303 | ··-·reboot_required |
| 2304 | ··-·restrict_strategy | 2304 | ··-·restrict_strategy |
| 2305 | Remediation_Shell_script_⇲ | 2305 | Remediation_Shell_script_⇲ |
| 2306 | #·Remediation·is·applicable·only·in·certain·platforms | 2306 | #·Remediation·is·applicable·only·in·certain·platforms |
| 2307 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 2307 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 2308 | #·First·perform·the·remediation·of·the·syscall·rule | 2308 | #·First·perform·the·remediation·of·the·syscall·rule |
| 2309 | #·Retrieve·hardware·architecture·of·the·underlying·system | 2309 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 2310 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 2310 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 2311 | for·ARCH·in·"${RULE_ARCHS[@]}" | 2311 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 2312 | do | 2312 | do |
| Offset 2669, 16 lines modified | Offset 2669, 16 lines modified | ||
| 2669 | ··-·reboot_required | 2669 | ··-·reboot_required |
| 2670 | ··-·restrict_strategy | 2670 | ··-·restrict_strategy |
| 2671 | -·name:·Set·architecture·for·audit·chown·tasks | 2671 | -·name:·Set·architecture·for·audit·chown·tasks |
| 2672 | ··set_fact: | 2672 | ··set_fact: |
| 2673 | ····audit_arch:·b64 | 2673 | ····audit_arch:·b64 |
| 2674 | ··when: | 2674 | ··when: |
| 2675 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2676 | ··-·'"audit"·in·ansible_facts.packages' | 2675 | ··-·'"audit"·in·ansible_facts.packages' |
| 2676 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2677 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 2677 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 2678 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 2678 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 2679 | ··tags: | 2679 | ··tags: |
| 2680 | ··-·CJIS-5.4.1.1 | 2680 | ··-·CJIS-5.4.1.1 |
| 2681 | ··-·DISA-STIG-OL08-00-030480 | 2681 | ··-·DISA-STIG-OL08-00-030480 |
| 2682 | ··-·NIST-800-171-3.1.7 | 2682 | ··-·NIST-800-171-3.1.7 |
| 2683 | ··-·NIST-800-53-AU-12(c) | 2683 | ··-·NIST-800-53-AU-12(c) |
| Offset 2817, 16 lines modified | Offset 2817, 16 lines modified | ||
| 2817 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2817 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2818 | ········-F·auid!=unset·-F·key=perm_mod | 2818 | ········-F·auid!=unset·-F·key=perm_mod |
| 2819 | ······create:·true | 2819 | ······create:·true |
| 2820 | ······mode:·o-rwx | 2820 | ······mode:·o-rwx |
| 2821 | ······state:·present | 2821 | ······state:·present |
| 2822 | ····when:·syscalls_found·|·length·==·0 | 2822 | ····when:·syscalls_found·|·length·==·0 |
| 2823 | ··when: | 2823 | ··when: |
| 2824 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2825 | ··-·'"audit"·in·ansible_facts.packages' | 2824 | ··-·'"audit"·in·ansible_facts.packages' |
| 2825 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2826 | ··tags: | 2826 | ··tags: |
| 2827 | ··-·CJIS-5.4.1.1 | 2827 | ··-·CJIS-5.4.1.1 |
| 2828 | ··-·DISA-STIG-OL08-00-030480 | 2828 | ··-·DISA-STIG-OL08-00-030480 |
| 2829 | ··-·NIST-800-171-3.1.7 | 2829 | ··-·NIST-800-171-3.1.7 |
| 2830 | ··-·NIST-800-53-AU-12(c) | 2830 | ··-·NIST-800-53-AU-12(c) |
| 2831 | ··-·NIST-800-53-AU-2(d) | 2831 | ··-·NIST-800-53-AU-2(d) |
| 2832 | ··-·NIST-800-53-CM-6(a) | 2832 | ··-·NIST-800-53-CM-6(a) |
| Offset 2963, 16 lines modified | Offset 2963, 16 lines modified | ||
| 2963 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2963 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2964 | ········-F·auid!=unset·-F·key=perm_mod | 2964 | ········-F·auid!=unset·-F·key=perm_mod |
| 2965 | ······create:·true | 2965 | ······create:·true |
| 2966 | ······mode:·o-rwx | 2966 | ······mode:·o-rwx |
| 2967 | ······state:·present | 2967 | ······state:·present |
| 2968 | ····when:·syscalls_found·|·length·==·0 | 2968 | ····when:·syscalls_found·|·length·==·0 |
| 2969 | ··when: | 2969 | ··when: |
| 2970 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2971 | ··-·'"audit"·in·ansible_facts.packages' | 2970 | ··-·'"audit"·in·ansible_facts.packages' |
| 2971 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2972 | ··-·audit_arch·==·"b64" | 2972 | ··-·audit_arch·==·"b64" |
| 2973 | ··tags: | 2973 | ··tags: |
| 2974 | ··-·CJIS-5.4.1.1 | 2974 | ··-·CJIS-5.4.1.1 |
| 2975 | ··-·DISA-STIG-OL08-00-030480 | 2975 | ··-·DISA-STIG-OL08-00-030480 |
| 2976 | ··-·NIST-800-171-3.1.7 | 2976 | ··-·NIST-800-171-3.1.7 |
| 2977 | ··-·NIST-800-53-AU-12(c) | 2977 | ··-·NIST-800-53-AU-12(c) |
| 2978 | ··-·NIST-800-53-AU-2(d) | 2978 | ··-·NIST-800-53-AU-2(d) |
| Offset 2982, 15 lines modified | Offset 2982, 15 lines modified | ||
| 2982 | ··-·low_complexity | 2982 | ··-·low_complexity |
| 2983 | ··-·low_disruption | 2983 | ··-·low_disruption |
| 2984 | ··-·medium_severity | 2984 | ··-·medium_severity |
| Max diff block lines reached; 222439/227073 bytes (97.96%) of diff not shown. | |||
| Offset 57892, 23 lines modified | Offset 57892, 23 lines modified | ||
| 000e2230:·2020·2020·7265·6765·7870·3a20·5e5c·732a······regexp:·^\s* | 000e2230:·2020·2020·7265·6765·7870·3a20·5e5c·732a······regexp:·^\s* | ||
| 000e2240:·666c·7573·685c·732a·3d5c·732a·2e2a·240a··flush\s*=\s*.*$. | 000e2240:·666c·7573·685c·732a·3d5c·732a·2e2a·240a··flush\s*=\s*.*$. | ||
| 000e2250:·2020·2020·6c69·6e65·3a20·666c·7573·6820······line:·flush· | 000e2250:·2020·2020·6c69·6e65·3a20·666c·7573·6820······line:·flush· | ||
| 000e2260:·3d20·7b7b·2076·6172·5f61·7564·6974·645f··=·{{·var_auditd_ | 000e2260:·3d20·7b7b·2076·6172·5f61·7564·6974·645f··=·{{·var_auditd_ | ||
| 000e2270:·666c·7573·6820·7d7d·0a20·2020·2073·7461··flush·}}.····sta | 000e2270:·666c·7573·6820·7d7d·0a20·2020·2073·7461··flush·}}.····sta | ||
| 000e2280:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | 000e2280:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | ||
| 000e2290:·6372·6561·7465·3a20·7472·7565·0a20·2077··create:·true.··w | 000e2290:·6372·6561·7465·3a20·7472·7565·0a20·2077··create:·true.··w | ||
| 000e22a0:·6865·6e3a·0a20·202d·20 | 000e22a0:·6865·6e3a·0a20·202d·2027·2261·7564·6974··hen:.··-·'"audit | ||
| 000e22b0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000e22c0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000e22d0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000e22e0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000e22f0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 000e2300:·202d·2027·2261·7564·6974·2220·696e·2061···-·'"audit"·in·a | |||
| 000e2 | 000e22b0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 000e22c0:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000e22d0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000e22e0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000e22f0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000e2300:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000e2310:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000e2320:·6 | 000e2320:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 000e2330:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 000e2330:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 000e2340:·332e·332e·310a·2020·2d20·4e49·5354·2d38··3.3.1.··-·NIST-8 | 000e2340:·332e·332e·310a·2020·2d20·4e49·5354·2d38··3.3.1.··-·NIST-8 | ||
| 000e2350:·3030·2d35·332d·4155·2d31·310a·2020·2d20··00-53-AU-11.··-· | 000e2350:·3030·2d35·332d·4155·2d31·310a·2020·2d20··00-53-AU-11.··-· | ||
| 000e2360:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | 000e2360:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 000e2370:·2861·290a·2020·2d20·6175·6469·7464·5f64··(a).··-·auditd_d | 000e2370:·2861·290a·2020·2d20·6175·6469·7464·5f64··(a).··-·auditd_d | ||
| 000e2380:·6174·615f·7265·7465·6e74·696f·6e5f·666c··ata_retention_fl | 000e2380:·6174·615f·7265·7465·6e74·696f·6e5f·666c··ata_retention_fl | ||
| 000e2390:·7573·680a·2020·2d20·6c6f·775f·636f·6d70··ush.··-·low_comp | 000e2390:·7573·680a·2020·2d20·6c6f·775f·636f·6d70··ush.··-·low_comp | ||
| Offset 57934, 21 lines modified | Offset 57934, 21 lines modified | ||
| 000e24d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | 000e24d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 000e24e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | 000e24e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 000e24f0:·7073·6522·2069·643d·2269·646d·3335·3533··pse"·id="idm3553 | 000e24f0:·7073·6522·2069·643d·2269·646d·3335·3533··pse"·id="idm3553 | ||
| 000e2500:·3122·3e3c·7072·653e·3c63·6f64·653e·2320··1"><pre><code>#· | 000e2500:·3122·3e3c·7072·653e·3c63·6f64·653e·2320··1"><pre><code>#· | ||
| 000e2510:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 000e2510:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 000e2520:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 000e2520:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000e2530:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 000e2530:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 000e2540:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 000e2550:·6574·202d·7120·6175·6469·7420·2661·6d70··et·-q·audit·& | |||
| 000e25 | 000e2560:·3b26·616d·703b·205b·2021·202d·6620·2f2e··;&·[·!·-f·/. | ||
| 000e25 | 000e2570:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | ||
| 000e25 | 000e2580:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | ||
| 000e25 | 000e2590:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | ||
| 000e2580:·205d·2026·616d·703b·2661·6d70·3b20·7270···]·&&·rp | |||
| 000e2590:·6d20·2d2d·7175·6965·7420·2d71·2061·7564··m·--quiet·-q·aud | |||
| 000e25a0:· | 000e25a0:·205d·3b20·7468·656e·0a0a·7661·725f·6175···];·then..var_au | ||
| 000e25b0:·6469·7464·5f66·6c75·7368·3d27·3c61·6262··ditd_flush='<abb | 000e25b0:·6469·7464·5f66·6c75·7368·3d27·3c61·6262··ditd_flush='<abb | ||
| 000e25c0:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | 000e25c0:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | ||
| 000e25d0:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | 000e25d0:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | ||
| 000e25e0:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | 000e25e0:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | ||
| 000e25f0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000e25f0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000e2600:·5f76·616c·7565·5f76·6172·5f61·7564·6974··_value_var_audit | 000e2600:·5f76·616c·7565·5f76·6172·5f61·7564·6974··_value_var_audit | ||
| 000e2610:·645f·666c·7573·6822·3e69·6e63·7265·6d65··d_flush">increme | 000e2610:·645f·666c·7573·6822·3e69·6e63·7265·6d65··d_flush">increme | ||
| Offset 58262, 23 lines modified | Offset 58262, 23 lines modified | ||
| 000e3950:·6469·7464·2e63·6f6e·660a·2020·2020·2020··ditd.conf.······ | 000e3950:·6469·7464·2e63·6f6e·660a·2020·2020·2020··ditd.conf.······ | ||
| 000e3960:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 000e3960:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 000e3970:·2020·2072·6567·6578·703a·2028·3f69·295e·····regexp:·(?i)^ | 000e3970:·2020·2072·6567·6578·703a·2028·3f69·295e·····regexp:·(?i)^ | ||
| 000e3980:·5c73·2a66·7265·715c·732a·3d5c·732a·0a20··\s*freq\s*=\s*.· | 000e3980:·5c73·2a66·7265·715c·732a·3d5c·732a·0a20··\s*freq\s*=\s*.· | ||
| 000e3990:·2020·2020·206c·696e·653a·2066·7265·7120·······line:·freq· | 000e3990:·2020·2020·206c·696e·653a·2066·7265·7120·······line:·freq· | ||
| 000e39a0:·3d20·3530·0a20·2020·2020·2073·7461·7465··=·50.······state | 000e39a0:·3d20·3530·0a20·2020·2020·2073·7461·7465··=·50.······state | ||
| 000e39b0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | 000e39b0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 000e39c0:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 000e39d0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000e39e0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000e39f0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000e3a00:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000e3a10:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000e3a20:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 000e3 | 000e39c0:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 000e39d0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000e39e0:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 000e39f0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 000e3a00:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 000e3a10:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 000e3a20:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 000e3a30:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 000e3a40:· | 000e3a40:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 000e3a50:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | 000e3a50:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 000e3a60:·0a20·202d·2061·7564·6974·645f·6672·6571··.··-·auditd_freq | 000e3a60:·0a20·202d·2061·7564·6974·645f·6672·6571··.··-·auditd_freq | ||
| 000e3a70:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | 000e3a70:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | ||
| 000e3a80:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | 000e3a80:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | ||
| 000e3a90:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | 000e3a90:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | ||
| 000e3aa0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | 000e3aa0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | ||
| 000e3ab0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | 000e3ab0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| Offset 58312, 21 lines modified | Offset 58312, 21 lines modified | ||
| 000e3c70:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | 000e3c70:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 000e3c80:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | 000e3c80:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 000e3c90:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | 000e3c90:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 000e3ca0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | 000e3ca0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 000e3cb0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 000e3cb0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 000e3cc0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 000e3cc0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 000e3cd0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 000e3cd0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 000e3ce0:·6c61·7466·6f72·6d73·0a69·6620· | 000e3ce0:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | ||
| 000e3cf0:·2d | 000e3cf0:·2d2d·7175·6965·7420·2d71·2061·7564·6974··--quiet·-q·audit | ||
| 000e3d00:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 000e3d00:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 000e3d10:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 000e3d20:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 000e3d | 000e3d30:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 000e3d40:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 000e3d20:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 000e3d30:·703b·2072·706d·202d·2d71·7569·6574·202d··p;·rpm·--quiet·- | |||
| 000e3d40:·7120·6175·6469·743b·2074·6865·6e0a·0a69··q·audit;·then..i | |||
| 000e3d50:·6620·5b20·2d65·2022·2f65·7463·2f61·7564··f·[·-e·"/etc/aud | 000e3d50:·6620·5b20·2d65·2022·2f65·7463·2f61·7564··f·[·-e·"/etc/aud | ||
| 000e3d60:·6974·2f61·7564·6974·642e·636f·6e66·2220··it/auditd.conf"· | 000e3d60:·6974·2f61·7564·6974·642e·636f·6e66·2220··it/auditd.conf"· | ||
| 000e3d70:·5d20·3b20·7468·656e·0a20·2020·200a·2020··]·;·then.····.·· | 000e3d70:·5d20·3b20·7468·656e·0a20·2020·200a·2020··]·;·then.····.·· | ||
| 000e3d80:·2020·4c43·5f41·4c4c·3d43·2073·6564·202d····LC_ALL=C·sed·- | 000e3d80:·2020·4c43·5f41·4c4c·3d43·2073·6564·202d····LC_ALL=C·sed·- | ||
| 000e3d90:·6920·222f·5e5c·732a·6672·6571·5c73·2a3d··i·"/^\s*freq\s*= | 000e3d90:·6920·222f·5e5c·732a·6672·6571·5c73·2a3d··i·"/^\s*freq\s*= | ||
| 000e3da0:·5c73·2a2f·4964·2220·222f·6574·632f·6175··\s*/Id"·"/etc/au | 000e3da0:·5c73·2a2f·4964·2220·222f·6574·632f·6175··\s*/Id"·"/etc/au | ||
| 000e3db0:·6469·742f·6175·6469·7464·2e63·6f6e·6622··dit/auditd.conf" | 000e3db0:·6469·742f·6175·6469·7464·2e63·6f6e·6622··dit/auditd.conf" | ||
| Offset 58601, 23 lines modified | Offset 58601, 23 lines modified | ||
| 000e4e80:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | 000e4e80:·7265·6174·653a·2074·7275·650a·2020·2020··reate:·true.···· | ||
| 000e4e90:·2020·7265·6765·7870·3a20·283f·6929·5e5c····regexp:·(?i)^\ | 000e4e90:·2020·7265·6765·7870·3a20·283f·6929·5e5c····regexp:·(?i)^\ | ||
| 000e4ea0:·732a·6c6f·6361·6c5f·6576·656e·7473·5c73··s*local_events\s | 000e4ea0:·732a·6c6f·6361·6c5f·6576·656e·7473·5c73··s*local_events\s | ||
| 000e4eb0:·2a3d·5c73·2a0a·2020·2020·2020·6c69·6e65··*=\s*.······line | 000e4eb0:·2a3d·5c73·2a0a·2020·2020·2020·6c69·6e65··*=\s*.······line | ||
| 000e4ec0:·3a20·6c6f·6361·6c5f·6576·656e·7473·203d··:·local_events·= | 000e4ec0:·3a20·6c6f·6361·6c5f·6576·656e·7473·203d··:·local_events·= | ||
| 000e4ed0:·2079·6573·0a20·2020·2020·2073·7461·7465···yes.······state | 000e4ed0:·2079·6573·0a20·2020·2020·2073·7461·7465···yes.······state | ||
| 000e4ee0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | 000e4ee0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 000e4ef0:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | |||
| 000e4f00:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 000e4f10:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 000e4f20:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 000e4f30:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 000e4f40:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 000e4f50:·2722·6175·6469·7422·2069·6e20·616e·7369··'"audit"·in·ansi | |||
| 000e4 | 000e4ef0:·3a0a·2020·2d20·2722·6175·6469·7422·2069··:.··-·'"audit"·i | ||
| 000e4f00:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000e4f10:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| Max diff block lines reached; 14465/24600 bytes (58.80%) of diff not shown. | |||
| Offset 7485, 29 lines modified | Offset 7485, 29 lines modified | ||
| 7485 | ··lineinfile: | 7485 | ··lineinfile: |
| 7486 | ····dest:·/etc/audit/auditd.conf | 7486 | ····dest:·/etc/audit/auditd.conf |
| 7487 | ····regexp:·^\s*flush\s*=\s*.*$ | 7487 | ····regexp:·^\s*flush\s*=\s*.*$ |
| 7488 | ····line:·flush·=·{{·var_auditd_flush·}} | 7488 | ····line:·flush·=·{{·var_auditd_flush·}} |
| 7489 | ····state:·present | 7489 | ····state:·present |
| 7490 | ····create:·true | 7490 | ····create:·true |
| 7491 | ··when: | 7491 | ··when: |
| 7492 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7493 | ··-·'"audit"·in·ansible_facts.packages' | 7492 | ··-·'"audit"·in·ansible_facts.packages' |
| 7493 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7494 | ··tags: | 7494 | ··tags: |
| 7495 | ··-·NIST-800-171-3.3.1 | 7495 | ··-·NIST-800-171-3.3.1 |
| 7496 | ··-·NIST-800-53-AU-11 | 7496 | ··-·NIST-800-53-AU-11 |
| 7497 | ··-·NIST-800-53-CM-6(a) | 7497 | ··-·NIST-800-53-CM-6(a) |
| 7498 | ··-·auditd_data_retention_flush | 7498 | ··-·auditd_data_retention_flush |
| 7499 | ··-·low_complexity | 7499 | ··-·low_complexity |
| 7500 | ··-·low_disruption | 7500 | ··-·low_disruption |
| 7501 | ··-·medium_severity | 7501 | ··-·medium_severity |
| 7502 | ··-·no_reboot_needed | 7502 | ··-·no_reboot_needed |
| 7503 | ··-·restrict_strategy | 7503 | ··-·restrict_strategy |
| 7504 | Remediation_Shell_script_⇲ | 7504 | Remediation_Shell_script_⇲ |
| 7505 | #·Remediation·is·applicable·only·in·certain·platforms | 7505 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7506 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7506 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7507 | var_auditd_flush='incremental_async' | 7507 | var_auditd_flush='incremental_async' |
| 7508 | AUDITCONFIG=/etc/audit/auditd.conf | 7508 | AUDITCONFIG=/etc/audit/auditd.conf |
| 7509 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush | 7509 | #·if·flush·is·present,·flush·param·edited·to·var_auditd_flush |
| Offset 7585, 30 lines modified | Offset 7585, 30 lines modified | ||
| 7585 | ····lineinfile: | 7585 | ····lineinfile: |
| 7586 | ······path:·/etc/audit/auditd.conf | 7586 | ······path:·/etc/audit/auditd.conf |
| 7587 | ······create:·true | 7587 | ······create:·true |
| 7588 | ······regexp:·(?i)^\s*freq\s*=\s* | 7588 | ······regexp:·(?i)^\s*freq\s*=\s* |
| 7589 | ······line:·freq·=·50 | 7589 | ······line:·freq·=·50 |
| 7590 | ······state:·present | 7590 | ······state:·present |
| 7591 | ··when: | 7591 | ··when: |
| 7592 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7593 | ··-·'"audit"·in·ansible_facts.packages' | 7592 | ··-·'"audit"·in·ansible_facts.packages' |
| 7593 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7594 | ··tags: | 7594 | ··tags: |
| 7595 | ··-·NIST-800-53-CM-6 | 7595 | ··-·NIST-800-53-CM-6 |
| 7596 | ··-·auditd_freq | 7596 | ··-·auditd_freq |
| 7597 | ··-·low_complexity | 7597 | ··-·low_complexity |
| 7598 | ··-·low_disruption | 7598 | ··-·low_disruption |
| 7599 | ··-·medium_severity | 7599 | ··-·medium_severity |
| 7600 | ··-·no_reboot_needed | 7600 | ··-·no_reboot_needed |
| 7601 | ··-·restrict_strategy | 7601 | ··-·restrict_strategy |
| 7602 | Remediation_Shell_script_⇲ | 7602 | Remediation_Shell_script_⇲ |
| 7603 | Complexity:·low | 7603 | Complexity:·low |
| 7604 | Disruption:·low | 7604 | Disruption:·low |
| 7605 | Strategy:···restrict | 7605 | Strategy:···restrict |
| 7606 | #·Remediation·is·applicable·only·in·certain·platforms | 7606 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7607 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7607 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7608 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then | 7608 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then |
| 7609 | ····LC_ALL=C·sed·-i·"/^\s*freq\s*=\s*/Id"·"/etc/audit/auditd.conf" | 7609 | ····LC_ALL=C·sed·-i·"/^\s*freq\s*=\s*/Id"·"/etc/audit/auditd.conf" |
| 7610 | else | 7610 | else |
| 7611 | ····touch·"/etc/audit/auditd.conf" | 7611 | ····touch·"/etc/audit/auditd.conf" |
| 7612 | fi | 7612 | fi |
| Offset 7672, 31 lines modified | Offset 7672, 31 lines modified | ||
| 7672 | ····lineinfile: | 7672 | ····lineinfile: |
| 7673 | ······path:·/etc/audit/auditd.conf | 7673 | ······path:·/etc/audit/auditd.conf |
| 7674 | ······create:·true | 7674 | ······create:·true |
| 7675 | ······regexp:·(?i)^\s*local_events\s*=\s* | 7675 | ······regexp:·(?i)^\s*local_events\s*=\s* |
| 7676 | ······line:·local_events·=·yes | 7676 | ······line:·local_events·=·yes |
| 7677 | ······state:·present | 7677 | ······state:·present |
| 7678 | ··when: | 7678 | ··when: |
| 7679 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7680 | ··-·'"audit"·in·ansible_facts.packages' | 7679 | ··-·'"audit"·in·ansible_facts.packages' |
| 7680 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7681 | ··tags: | 7681 | ··tags: |
| 7682 | ··-·DISA-STIG-OL08-00-030061 | 7682 | ··-·DISA-STIG-OL08-00-030061 |
| 7683 | ··-·NIST-800-53-CM-6 | 7683 | ··-·NIST-800-53-CM-6 |
| 7684 | ··-·auditd_local_events | 7684 | ··-·auditd_local_events |
| 7685 | ··-·low_complexity | 7685 | ··-·low_complexity |
| 7686 | ··-·low_disruption | 7686 | ··-·low_disruption |
| 7687 | ··-·medium_severity | 7687 | ··-·medium_severity |
| 7688 | ··-·no_reboot_needed | 7688 | ··-·no_reboot_needed |
| 7689 | ··-·restrict_strategy | 7689 | ··-·restrict_strategy |
| 7690 | Remediation_Shell_script_⇲ | 7690 | Remediation_Shell_script_⇲ |
| 7691 | Complexity:·low | 7691 | Complexity:·low |
| 7692 | Disruption:·low | 7692 | Disruption:·low |
| 7693 | Strategy:···restrict | 7693 | Strategy:···restrict |
| 7694 | #·Remediation·is·applicable·only·in·certain·platforms | 7694 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7695 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7695 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7696 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then | 7696 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then |
| 7697 | ····LC_ALL=C·sed·-i·"/^\s*local_events\s*=\s*/Id"·"/etc/audit/auditd.conf" | 7697 | ····LC_ALL=C·sed·-i·"/^\s*local_events\s*=\s*/Id"·"/etc/audit/auditd.conf" |
| 7698 | else | 7698 | else |
| 7699 | ····touch·"/etc/audit/auditd.conf" | 7699 | ····touch·"/etc/audit/auditd.conf" |
| 7700 | fi | 7700 | fi |
| Offset 7761, 16 lines modified | Offset 7761, 16 lines modified | ||
| 7761 | ····lineinfile: | 7761 | ····lineinfile: |
| 7762 | ······path:·/etc/audit/auditd.conf | 7762 | ······path:·/etc/audit/auditd.conf |
| 7763 | ······create:·true | 7763 | ······create:·true |
| 7764 | ······regexp:·(?i)^\s*log_format\s*=\s* | 7764 | ······regexp:·(?i)^\s*log_format\s*=\s* |
| 7765 | ······line:·log_format·=·ENRICHED | 7765 | ······line:·log_format·=·ENRICHED |
| 7766 | ······state:·present | 7766 | ······state:·present |
| 7767 | ··when: | 7767 | ··when: |
| 7768 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7769 | ··-·'"audit"·in·ansible_facts.packages' | 7768 | ··-·'"audit"·in·ansible_facts.packages' |
| 7769 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7770 | ··tags: | 7770 | ··tags: |
| 7771 | ··-·DISA-STIG-OL08-00-030063 | 7771 | ··-·DISA-STIG-OL08-00-030063 |
| 7772 | ··-·NIST-800-53-AU-3 | 7772 | ··-·NIST-800-53-AU-3 |
| 7773 | ··-·NIST-800-53-CM-6 | 7773 | ··-·NIST-800-53-CM-6 |
| 7774 | ··-·auditd_log_format | 7774 | ··-·auditd_log_format |
| 7775 | ··-·low_complexity | 7775 | ··-·low_complexity |
| 7776 | ··-·low_disruption | 7776 | ··-·low_disruption |
| Offset 7778, 15 lines modified | Offset 7778, 15 lines modified | ||
| 7778 | ··-·no_reboot_needed | 7778 | ··-·no_reboot_needed |
| 7779 | ··-·restrict_strategy | 7779 | ··-·restrict_strategy |
| 7780 | Remediation_Shell_script_⇲ | 7780 | Remediation_Shell_script_⇲ |
| 7781 | Complexity:·low | 7781 | Complexity:·low |
| 7782 | Disruption:·low | 7782 | Disruption:·low |
| 7783 | Strategy:···restrict | 7783 | Strategy:···restrict |
| 7784 | #·Remediation·is·applicable·only·in·certain·platforms | 7784 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7785 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7785 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7786 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then | 7786 | if·[·-e·"/etc/audit/auditd.conf"·]·;·then |
| 7787 | ····LC_ALL=C·sed·-i·"/^\s*log_format\s*=\s*/Id"·"/etc/audit/auditd.conf" | 7787 | ····LC_ALL=C·sed·-i·"/^\s*log_format\s*=\s*/Id"·"/etc/audit/auditd.conf" |
| 7788 | else | 7788 | else |
| Max diff block lines reached; 2184/6471 bytes (33.75%) of diff not shown. | |||
| Offset 52112, 23 lines modified | Offset 52112, 23 lines modified | ||
| 000cb8f0:·7569·7265·640a·2020·2d20·7265·7374·7269··uired.··-·restri | 000cb8f0:·7569·7265·640a·2020·2d20·7265·7374·7269··uired.··-·restri | ||
| 000cb900:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | 000cb900:·6374·5f73·7472·6174·6567·790a·0a2d·206e··ct_strategy..-·n | ||
| 000cb910:·616d·653a·2053·6574·2061·7263·6869·7465··ame:·Set·archite | 000cb910:·616d·653a·2053·6574·2061·7263·6869·7465··ame:·Set·archite | ||
| 000cb920:·6374·7572·6520·666f·7220·6175·6469·7420··cture·for·audit· | 000cb920:·6374·7572·6520·666f·7220·6175·6469·7420··cture·for·audit· | ||
| 000cb930:·6368·6d6f·6420·7461·736b·730a·2020·7365··chmod·tasks.··se | 000cb930:·6368·6d6f·6420·7461·736b·730a·2020·7365··chmod·tasks.··se | ||
| 000cb940:·745f·6661·6374·3a0a·2020·2020·6175·6469··t_fact:.····audi | 000cb940:·745f·6661·6374·3a0a·2020·2020·6175·6469··t_fact:.····audi | ||
| 000cb950:·745f·6172·6368·3a20·6236·340a·2020·7768··t_arch:·b64.··wh | 000cb950:·745f·6172·6368·3a20·6236·340a·2020·7768··t_arch:·b64.··wh | ||
| 000cb960:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 000cb970:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000cb980:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 000cb990:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 000cb9a0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 000cb9b0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 000cb9c0:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | |||
| 000cb9 | 000cb960:·656e·3a0a·2020·2d20·2722·6175·6469·7422··en:.··-·'"audit" | ||
| 000cb970:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000cb980:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 000cb990:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000cb9a0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000cb9b0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000cb9c0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000cb9d0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 000cb9e0:·6 | 000cb9e0:·6e65·7222·5d0a·2020·2d20·616e·7369·626c··ner"].··-·ansibl | ||
| 000cb9f0:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | 000cb9f0:·655f·6172·6368·6974·6563·7475·7265·203d··e_architecture·= | ||
| 000cba00:·3d20·2261·6172·6368·3634·2220·6f72·2061··=·"aarch64"·or·a | 000cba00:·3d20·2261·6172·6368·3634·2220·6f72·2061··=·"aarch64"·or·a | ||
| 000cba10:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | 000cba10:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | ||
| 000cba20:·7572·6520·3d3d·2022·7070·6336·3422·206f··ure·==·"ppc64"·o | 000cba20:·7572·6520·3d3d·2022·7070·6336·3422·206f··ure·==·"ppc64"·o | ||
| 000cba30:·7220·616e·7369·626c·655f·6172·6368·6974··r·ansible_archit | 000cba30:·7220·616e·7369·626c·655f·6172·6368·6974··r·ansible_archit | ||
| 000cba40:·6563·7475·7265·0a20·2020·203d·3d20·2270··ecture.····==·"p | 000cba40:·6563·7475·7265·0a20·2020·203d·3d20·2270··ecture.····==·"p | ||
| 000cba50:·7063·3634·6c65·2220·6f72·2061·6e73·6962··pc64le"·or·ansib | 000cba50:·7063·3634·6c65·2220·6f72·2061·6e73·6962··pc64le"·or·ansib | ||
| Offset 52435, 23 lines modified | Offset 52435, 23 lines modified | ||
| 000ccd20:·206b·6579·3d70·6572·6d5f·6d6f·640a·2020···key=perm_mod.·· | 000ccd20:·206b·6579·3d70·6572·6d5f·6d6f·640a·2020···key=perm_mod.·· | ||
| 000ccd30:·2020·2020·6372·6561·7465·3a20·7472·7565······create:·true | 000ccd30:·2020·2020·6372·6561·7465·3a20·7472·7565······create:·true | ||
| 000ccd40:·0a20·2020·2020·206d·6f64·653a·206f·2d72··.······mode:·o-r | 000ccd40:·0a20·2020·2020·206d·6f64·653a·206f·2d72··.······mode:·o-r | ||
| 000ccd50:·7778·0a20·2020·2020·2073·7461·7465·3a20··wx.······state:· | 000ccd50:·7778·0a20·2020·2020·2073·7461·7465·3a20··wx.······state:· | ||
| 000ccd60:·7072·6573·656e·740a·2020·2020·7768·656e··present.····when | 000ccd60:·7072·6573·656e·740a·2020·2020·7768·656e··present.····when | ||
| 000ccd70:·3a20·7379·7363·616c·6c73·5f66·6f75·6e64··:·syscalls_found | 000ccd70:·3a20·7379·7363·616c·6c73·5f66·6f75·6e64··:·syscalls_found | ||
| 000ccd80:·207c·206c·656e·6774·6820·3d3d·2030·0a20···|·length·==·0.· | 000ccd80:·207c·206c·656e·6774·6820·3d3d·2030·0a20···|·length·==·0.· | ||
| 000ccd90:·2077·6865·6e3a·0a20·202d·20 | 000ccd90:·2077·6865·6e3a·0a20·202d·2027·2261·7564···when:.··-·'"aud | ||
| 000ccda0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 000ccdb0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000ccdc0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000ccdd0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000ccde0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000ccdf0:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | |||
| 000cce00:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000cc | 000ccda0:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | ||
| 000ccdb0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 000ccdc0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 000ccdd0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000ccde0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000ccdf0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000cce00:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000cce10:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 000cce20:·0a20·202d·2043·4a49·532d·352e·342e·312e··.··-·CJIS-5.4.1. | 000cce20:·0a20·202d·2043·4a49·532d·352e·342e·312e··.··-·CJIS-5.4.1. | ||
| 000cce30:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | 000cce30:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 000cce40:·4f4c·3038·2d30·302d·3033·3034·3930·0a20··OL08-00-030490.· | 000cce40:·4f4c·3038·2d30·302d·3033·3034·3930·0a20··OL08-00-030490.· | ||
| 000cce50:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | 000cce50:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 000cce60:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | 000cce60:·332e·312e·370a·2020·2d20·4e49·5354·2d38··3.1.7.··-·NIST-8 | ||
| 000cce70:·3030·2d35·332d·4155·2d31·3228·6329·0a20··00-53-AU-12(c).· | 000cce70:·3030·2d35·332d·4155·2d31·3228·6329·0a20··00-53-AU-12(c).· | ||
| 000cce80:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | 000cce80:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| Offset 52747, 23 lines modified | Offset 52747, 23 lines modified | ||
| 000ce0a0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 000ce0a0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 000ce0b0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 000ce0b0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 000ce0c0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 000ce0c0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 000ce0d0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 000ce0d0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 000ce0e0:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 000ce0e0:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 000ce0f0:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 000ce0f0:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 000ce100:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 000ce100:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 000ce110:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 000ce120:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000ce130:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000ce140:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000ce150:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000ce160:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 000ce170:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 000ce1 | 000ce110:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 000ce120:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000ce130:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 000ce140:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000ce150:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 000ce160:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 000ce170:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 000ce180:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 000ce190:· | 000ce190:·225d·0a20·202d·2061·7564·6974·5f61·7263··"].··-·audit_arc | ||
| 000ce1a0:·6820·3d3d·2022·6236·3422·0a20·2074·6167··h·==·"b64".··tag | 000ce1a0:·6820·3d3d·2022·6236·3422·0a20·2074·6167··h·==·"b64".··tag | ||
| 000ce1b0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | 000ce1b0:·733a·0a20·202d·2043·4a49·532d·352e·342e··s:.··-·CJIS-5.4. | ||
| 000ce1c0:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | 000ce1c0:·312e·310a·2020·2d20·4449·5341·2d53·5449··1.1.··-·DISA-STI | ||
| 000ce1d0:·472d·4f4c·3038·2d30·302d·3033·3034·3930··G-OL08-00-030490 | 000ce1d0:·472d·4f4c·3038·2d30·302d·3033·3034·3930··G-OL08-00-030490 | ||
| 000ce1e0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | 000ce1e0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 000ce1f0:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | 000ce1f0:·312d·332e·312e·370a·2020·2d20·4e49·5354··1-3.1.7.··-·NIST | ||
| 000ce200:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | 000ce200:·2d38·3030·2d35·332d·4155·2d31·3228·6329··-800-53-AU-12(c) | ||
| Offset 52797, 20 lines modified | Offset 52797, 20 lines modified | ||
| 000ce3c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | 000ce3c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 000ce3d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | 000ce3d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 000ce3e0:·643d·2269·646d·3232·3636·3922·3e3c·7072··d="idm22669"><pr | 000ce3e0:·643d·2269·646d·3232·3636·3922·3e3c·7072··d="idm22669"><pr | ||
| 000ce3f0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 000ce3f0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 000ce400:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 000ce400:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 000ce410:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 000ce410:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 000ce420:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 000ce420:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 000ce430:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 000ce440:·6175·6469·7420·2661·6d70·3b26·616d·703b··audit·&& | |||
| 000ce4 | 000ce450:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| 000ce4 | 000ce460:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | ||
| 000ce4 | 000ce470:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | ||
| 000ce4 | 000ce480:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | ||
| 000ce470:·703b·2661·6d70·3b20·7270·6d20·2d2d·7175··p;&·rpm·--qu | |||
| 000ce480:·6965·7420·2d71·2061·7564·6974·3b20·7468··iet·-q·audit;·th | |||
| 000ce490:·656e·0a0a·2320·4669·7273·7420·7065·7266··en..#·First·perf | 000ce490:·656e·0a0a·2320·4669·7273·7420·7065·7266··en..#·First·perf | ||
| 000ce4a0:·6f72·6d20·7468·6520·7265·6d65·6469·6174··orm·the·remediat | 000ce4a0:·6f72·6d20·7468·6520·7265·6d65·6469·6174··orm·the·remediat | ||
| 000ce4b0:·696f·6e20·6f66·2074·6865·2073·7973·6361··ion·of·the·sysca | 000ce4b0:·696f·6e20·6f66·2074·6865·2073·7973·6361··ion·of·the·sysca | ||
| 000ce4c0:·6c6c·2072·756c·650a·2320·5265·7472·6965··ll·rule.#·Retrie | 000ce4c0:·6c6c·2072·756c·650a·2320·5265·7472·6965··ll·rule.#·Retrie | ||
| 000ce4d0:·7665·2068·6172·6477·6172·6520·6172·6368··ve·hardware·arch | 000ce4d0:·7665·2068·6172·6477·6172·6520·6172·6368··ve·hardware·arch | ||
| 000ce4e0:·6974·6563·7475·7265·206f·6620·7468·6520··itecture·of·the· | 000ce4e0:·6974·6563·7475·7265·206f·6620·7468·6520··itecture·of·the· | ||
| 000ce4f0:·756e·6465·726c·7969·6e67·2073·7973·7465··underlying·syste | 000ce4f0:·756e·6465·726c·7969·6e67·2073·7973·7465··underlying·syste | ||
| Offset 54609, 22 lines modified | Offset 54609, 22 lines modified | ||
| 000d5500:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | 000d5500:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 000d5510:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | 000d5510:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | ||
| 000d5520:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | 000d5520:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | ||
| 000d5530:·666f·7220·6175·6469·7420·6368·6f77·6e20··for·audit·chown· | 000d5530:·666f·7220·6175·6469·7420·6368·6f77·6e20··for·audit·chown· | ||
| 000d5540:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | 000d5540:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | ||
| 000d5550:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | 000d5550:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | ||
| 000d5560:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | 000d5560:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | ||
| 000d5570:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000d5580:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000d5590:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000d55a0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| Max diff block lines reached; 623234/633438 bytes (98.39%) of diff not shown. | |||
| Offset 6778, 16 lines modified | Offset 6778, 16 lines modified | ||
| 6778 | ··-·reboot_required | 6778 | ··-·reboot_required |
| 6779 | ··-·restrict_strategy | 6779 | ··-·restrict_strategy |
| 6780 | -·name:·Set·architecture·for·audit·chmod·tasks | 6780 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 6781 | ··set_fact: | 6781 | ··set_fact: |
| 6782 | ····audit_arch:·b64 | 6782 | ····audit_arch:·b64 |
| 6783 | ··when: | 6783 | ··when: |
| 6784 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6785 | ··-·'"audit"·in·ansible_facts.packages' | 6784 | ··-·'"audit"·in·ansible_facts.packages' |
| 6785 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6786 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 6786 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 6787 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 6787 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 6788 | ··tags: | 6788 | ··tags: |
| 6789 | ··-·CJIS-5.4.1.1 | 6789 | ··-·CJIS-5.4.1.1 |
| 6790 | ··-·DISA-STIG-OL08-00-030490 | 6790 | ··-·DISA-STIG-OL08-00-030490 |
| 6791 | ··-·NIST-800-171-3.1.7 | 6791 | ··-·NIST-800-171-3.1.7 |
| 6792 | ··-·NIST-800-53-AU-12(c) | 6792 | ··-·NIST-800-53-AU-12(c) |
| Offset 6924, 16 lines modified | Offset 6924, 16 lines modified | ||
| 6924 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 6924 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 6925 | ········-F·auid!=unset·-F·key=perm_mod | 6925 | ········-F·auid!=unset·-F·key=perm_mod |
| 6926 | ······create:·true | 6926 | ······create:·true |
| 6927 | ······mode:·o-rwx | 6927 | ······mode:·o-rwx |
| 6928 | ······state:·present | 6928 | ······state:·present |
| 6929 | ····when:·syscalls_found·|·length·==·0 | 6929 | ····when:·syscalls_found·|·length·==·0 |
| 6930 | ··when: | 6930 | ··when: |
| 6931 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6932 | ··-·'"audit"·in·ansible_facts.packages' | 6931 | ··-·'"audit"·in·ansible_facts.packages' |
| 6932 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6933 | ··tags: | 6933 | ··tags: |
| 6934 | ··-·CJIS-5.4.1.1 | 6934 | ··-·CJIS-5.4.1.1 |
| 6935 | ··-·DISA-STIG-OL08-00-030490 | 6935 | ··-·DISA-STIG-OL08-00-030490 |
| 6936 | ··-·NIST-800-171-3.1.7 | 6936 | ··-·NIST-800-171-3.1.7 |
| 6937 | ··-·NIST-800-53-AU-12(c) | 6937 | ··-·NIST-800-53-AU-12(c) |
| 6938 | ··-·NIST-800-53-AU-2(d) | 6938 | ··-·NIST-800-53-AU-2(d) |
| 6939 | ··-·NIST-800-53-CM-6(a) | 6939 | ··-·NIST-800-53-CM-6(a) |
| Offset 7068, 16 lines modified | Offset 7068, 16 lines modified | ||
| 7068 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7068 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7069 | ········-F·auid!=unset·-F·key=perm_mod | 7069 | ········-F·auid!=unset·-F·key=perm_mod |
| 7070 | ······create:·true | 7070 | ······create:·true |
| 7071 | ······mode:·o-rwx | 7071 | ······mode:·o-rwx |
| 7072 | ······state:·present | 7072 | ······state:·present |
| 7073 | ····when:·syscalls_found·|·length·==·0 | 7073 | ····when:·syscalls_found·|·length·==·0 |
| 7074 | ··when: | 7074 | ··when: |
| 7075 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7076 | ··-·'"audit"·in·ansible_facts.packages' | 7075 | ··-·'"audit"·in·ansible_facts.packages' |
| 7076 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7077 | ··-·audit_arch·==·"b64" | 7077 | ··-·audit_arch·==·"b64" |
| 7078 | ··tags: | 7078 | ··tags: |
| 7079 | ··-·CJIS-5.4.1.1 | 7079 | ··-·CJIS-5.4.1.1 |
| 7080 | ··-·DISA-STIG-OL08-00-030490 | 7080 | ··-·DISA-STIG-OL08-00-030490 |
| 7081 | ··-·NIST-800-171-3.1.7 | 7081 | ··-·NIST-800-171-3.1.7 |
| 7082 | ··-·NIST-800-53-AU-12(c) | 7082 | ··-·NIST-800-53-AU-12(c) |
| 7083 | ··-·NIST-800-53-AU-2(d) | 7083 | ··-·NIST-800-53-AU-2(d) |
| Offset 7087, 15 lines modified | Offset 7087, 15 lines modified | ||
| 7087 | ··-·low_complexity | 7087 | ··-·low_complexity |
| 7088 | ··-·low_disruption | 7088 | ··-·low_disruption |
| 7089 | ··-·medium_severity | 7089 | ··-·medium_severity |
| 7090 | ··-·reboot_required | 7090 | ··-·reboot_required |
| 7091 | ··-·restrict_strategy | 7091 | ··-·restrict_strategy |
| 7092 | Remediation_Shell_script_⇲ | 7092 | Remediation_Shell_script_⇲ |
| 7093 | #·Remediation·is·applicable·only·in·certain·platforms | 7093 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7094 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 7094 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 7095 | #·First·perform·the·remediation·of·the·syscall·rule | 7095 | #·First·perform·the·remediation·of·the·syscall·rule |
| 7096 | #·Retrieve·hardware·architecture·of·the·underlying·system | 7096 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 7097 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 7097 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 7098 | for·ARCH·in·"${RULE_ARCHS[@]}" | 7098 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 7099 | do | 7099 | do |
| Offset 7456, 16 lines modified | Offset 7456, 16 lines modified | ||
| 7456 | ··-·reboot_required | 7456 | ··-·reboot_required |
| 7457 | ··-·restrict_strategy | 7457 | ··-·restrict_strategy |
| 7458 | -·name:·Set·architecture·for·audit·chown·tasks | 7458 | -·name:·Set·architecture·for·audit·chown·tasks |
| 7459 | ··set_fact: | 7459 | ··set_fact: |
| 7460 | ····audit_arch:·b64 | 7460 | ····audit_arch:·b64 |
| 7461 | ··when: | 7461 | ··when: |
| 7462 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7463 | ··-·'"audit"·in·ansible_facts.packages' | 7462 | ··-·'"audit"·in·ansible_facts.packages' |
| 7463 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7464 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 7464 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 7465 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 7465 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 7466 | ··tags: | 7466 | ··tags: |
| 7467 | ··-·CJIS-5.4.1.1 | 7467 | ··-·CJIS-5.4.1.1 |
| 7468 | ··-·DISA-STIG-OL08-00-030480 | 7468 | ··-·DISA-STIG-OL08-00-030480 |
| 7469 | ··-·NIST-800-171-3.1.7 | 7469 | ··-·NIST-800-171-3.1.7 |
| 7470 | ··-·NIST-800-53-AU-12(c) | 7470 | ··-·NIST-800-53-AU-12(c) |
| Offset 7604, 16 lines modified | Offset 7604, 16 lines modified | ||
| 7604 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7604 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7605 | ········-F·auid!=unset·-F·key=perm_mod | 7605 | ········-F·auid!=unset·-F·key=perm_mod |
| 7606 | ······create:·true | 7606 | ······create:·true |
| 7607 | ······mode:·o-rwx | 7607 | ······mode:·o-rwx |
| 7608 | ······state:·present | 7608 | ······state:·present |
| 7609 | ····when:·syscalls_found·|·length·==·0 | 7609 | ····when:·syscalls_found·|·length·==·0 |
| 7610 | ··when: | 7610 | ··when: |
| 7611 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7612 | ··-·'"audit"·in·ansible_facts.packages' | 7611 | ··-·'"audit"·in·ansible_facts.packages' |
| 7612 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7613 | ··tags: | 7613 | ··tags: |
| 7614 | ··-·CJIS-5.4.1.1 | 7614 | ··-·CJIS-5.4.1.1 |
| 7615 | ··-·DISA-STIG-OL08-00-030480 | 7615 | ··-·DISA-STIG-OL08-00-030480 |
| 7616 | ··-·NIST-800-171-3.1.7 | 7616 | ··-·NIST-800-171-3.1.7 |
| 7617 | ··-·NIST-800-53-AU-12(c) | 7617 | ··-·NIST-800-53-AU-12(c) |
| 7618 | ··-·NIST-800-53-AU-2(d) | 7618 | ··-·NIST-800-53-AU-2(d) |
| 7619 | ··-·NIST-800-53-CM-6(a) | 7619 | ··-·NIST-800-53-CM-6(a) |
| Offset 7750, 16 lines modified | Offset 7750, 16 lines modified | ||
| 7750 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 7750 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 7751 | ········-F·auid!=unset·-F·key=perm_mod | 7751 | ········-F·auid!=unset·-F·key=perm_mod |
| 7752 | ······create:·true | 7752 | ······create:·true |
| 7753 | ······mode:·o-rwx | 7753 | ······mode:·o-rwx |
| 7754 | ······state:·present | 7754 | ······state:·present |
| 7755 | ····when:·syscalls_found·|·length·==·0 | 7755 | ····when:·syscalls_found·|·length·==·0 |
| 7756 | ··when: | 7756 | ··when: |
| 7757 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7758 | ··-·'"audit"·in·ansible_facts.packages' | 7757 | ··-·'"audit"·in·ansible_facts.packages' |
| 7758 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7759 | ··-·audit_arch·==·"b64" | 7759 | ··-·audit_arch·==·"b64" |
| 7760 | ··tags: | 7760 | ··tags: |
| 7761 | ··-·CJIS-5.4.1.1 | 7761 | ··-·CJIS-5.4.1.1 |
| 7762 | ··-·DISA-STIG-OL08-00-030480 | 7762 | ··-·DISA-STIG-OL08-00-030480 |
| 7763 | ··-·NIST-800-171-3.1.7 | 7763 | ··-·NIST-800-171-3.1.7 |
| 7764 | ··-·NIST-800-53-AU-12(c) | 7764 | ··-·NIST-800-53-AU-12(c) |
| 7765 | ··-·NIST-800-53-AU-2(d) | 7765 | ··-·NIST-800-53-AU-2(d) |
| Offset 7769, 15 lines modified | Offset 7769, 15 lines modified | ||
| 7769 | ··-·low_complexity | 7769 | ··-·low_complexity |
| 7770 | ··-·low_disruption | 7770 | ··-·low_disruption |
| 7771 | ··-·medium_severity | 7771 | ··-·medium_severity |
| Max diff block lines reached; 194788/199422 bytes (97.68%) of diff not shown. | |||
| Offset 26376, 22 lines modified | Offset 26376, 22 lines modified | ||
| 00067070:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | 00067070:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 00067080:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | 00067080:·6174·6567·790a·0a2d·206e·616d·653a·2053··ategy..-·name:·S | ||
| 00067090:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | 00067090:·6574·2061·7263·6869·7465·6374·7572·6520··et·architecture· | ||
| 000670a0:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | 000670a0:·666f·7220·6175·6469·7420·6368·6d6f·6420··for·audit·chmod· | ||
| 000670b0:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | 000670b0:·7461·736b·730a·2020·7365·745f·6661·6374··tasks.··set_fact | ||
| 000670c0:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | 000670c0:·3a0a·2020·2020·6175·6469·745f·6172·6368··:.····audit_arch | ||
| 000670d0:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | 000670d0:·3a20·6236·340a·2020·7768·656e·3a0a·2020··:·b64.··when:.·· | ||
| 000670e0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 000670f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00067100:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00067110:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00067120:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00067130:·6169·6e65·7222·5d0a·2020·2d20·2722·6175··ainer"].··-·'"au | |||
| 00067140:·6469·7422·2069·6e20·616e·7369·626c·655f··dit"·in·ansible_ | |||
| 00067 | 000670e0:·2d20·2722·6175·6469·7422·2069·6e20·616e··-·'"audit"·in·an | ||
| 000670f0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 00067100:·6167·6573·270a·2020·2d20·616e·7369·626c··ages'.··-·ansibl | |||
| 00067110:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 00067120:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 00067130:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 00067140:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 00067150:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 00067160:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | 00067160:·2020·2d20·616e·7369·626c·655f·6172·6368····-·ansible_arch | ||
| 00067170:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | 00067170:·6974·6563·7475·7265·203d·3d20·2261·6172··itecture·==·"aar | ||
| 00067180:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | 00067180:·6368·3634·2220·6f72·2061·6e73·6962·6c65··ch64"·or·ansible | ||
| 00067190:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | 00067190:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | ||
| 000671a0:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | 000671a0:·2022·7070·6336·3422·206f·7220·616e·7369···"ppc64"·or·ansi | ||
| 000671b0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | 000671b0:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 000671c0:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | 000671c0:·0a20·2020·203d·3d20·2270·7063·3634·6c65··.····==·"ppc64le | ||
| Offset 26699, 23 lines modified | Offset 26699, 23 lines modified | ||
| 000684a0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | 000684a0:·6572·6d5f·6d6f·640a·2020·2020·2020·6372··erm_mod.······cr | ||
| 000684b0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | 000684b0:·6561·7465·3a20·7472·7565·0a20·2020·2020··eate:·true.····· | ||
| 000684c0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | 000684c0:·206d·6f64·653a·206f·2d72·7778·0a20·2020···mode:·o-rwx.··· | ||
| 000684d0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 000684d0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 000684e0:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | 000684e0:·740a·2020·2020·7768·656e·3a20·7379·7363··t.····when:·sysc | ||
| 000684f0:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | 000684f0:·616c·6c73·5f66·6f75·6e64·207c·206c·656e··alls_found·|·len | ||
| 00068500:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | 00068500:·6774·6820·3d3d·2030·0a20·2077·6865·6e3a··gth·==·0.··when: | ||
| 00068510:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | |||
| 00068520:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00068530:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00068540:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00068550:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00068560:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 00068570:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | |||
| 000685 | 00068510:·0a20·202d·2027·2261·7564·6974·2220·696e··.··-·'"audit"·in | ||
| 00068520:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00068530:·6163·6b61·6765·7327·0a20·202d·2061·6e73··ackages'.··-·ans | |||
| 00068540:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 00068550:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00068560:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00068570:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 00068580:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 00068590:· | 00068590:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 000685a0:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | 000685a0:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | ||
| 000685b0:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | 000685b0:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | ||
| 000685c0:·302d·3033·3034·3930·0a20·202d·204e·4953··0-030490.··-·NIS | 000685c0:·302d·3033·3034·3930·0a20·202d·204e·4953··0-030490.··-·NIS | ||
| 000685d0:·542d·3830·302d·3137·312d·332e·312e·370a··T-800-171-3.1.7. | 000685d0:·542d·3830·302d·3137·312d·332e·312e·370a··T-800-171-3.1.7. | ||
| 000685e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | 000685e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 000685f0:·4155·2d31·3228·6329·0a20·202d·204e·4953··AU-12(c).··-·NIS | 000685f0:·4155·2d31·3228·6329·0a20·202d·204e·4953··AU-12(c).··-·NIS | ||
| 00068600:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | 00068600:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | ||
| Offset 27010, 23 lines modified | Offset 27010, 23 lines modified | ||
| 00069810:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | 00069810:·7420·2d46·206b·6579·3d70·6572·6d5f·6d6f··t·-F·key=perm_mo | ||
| 00069820:·640a·2020·2020·2020·6372·6561·7465·3a20··d.······create:· | 00069820:·640a·2020·2020·2020·6372·6561·7465·3a20··d.······create:· | ||
| 00069830:·7472·7565·0a20·2020·2020·206d·6f64·653a··true.······mode: | 00069830:·7472·7565·0a20·2020·2020·206d·6f64·653a··true.······mode: | ||
| 00069840:·206f·2d72·7778·0a20·2020·2020·2073·7461···o-rwx.······sta | 00069840:·206f·2d72·7778·0a20·2020·2020·2073·7461···o-rwx.······sta | ||
| 00069850:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | 00069850:·7465·3a20·7072·6573·656e·740a·2020·2020··te:·present.···· | ||
| 00069860:·7768·656e·3a20·7379·7363·616c·6c73·5f66··when:·syscalls_f | 00069860:·7768·656e·3a20·7379·7363·616c·6c73·5f66··when:·syscalls_f | ||
| 00069870:·6f75·6e64·207c·206c·656e·6774·6820·3d3d··ound·|·length·== | 00069870:·6f75·6e64·207c·206c·656e·6774·6820·3d3d··ound·|·length·== | ||
| 00069880:·2030·0a20·2077·6865·6e3a·0a20·202d·20 | 00069880:·2030·0a20·2077·6865·6e3a·0a20·202d·2027···0.··when:.··-·' | ||
| 00069890:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 000698a0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 000698b0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 000698c0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 000698d0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 000698e0:·6572·225d·0a20·202d·2027·2261·7564·6974··er"].··-·'"audit | |||
| 000698f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00069 | 00069890:·2261·7564·6974·2220·696e·2061·6e73·6962··"audit"·in·ansib | ||
| 000698a0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 000698b0:·7327·0a20·202d·2061·6e73·6962·6c65·5f76··s'.··-·ansible_v | |||
| 000698c0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 000698d0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 000698e0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 000698f0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00069900:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 00069910:·2061·7564·6974·5f61·7263·6820·3d3d·2022···audit_arch·==·" | 00069910:·2061·7564·6974·5f61·7263·6820·3d3d·2022···audit_arch·==·" | ||
| 00069920:·6236·3422·0a20·2074·6167·733a·0a20·202d··b64".··tags:.··- | 00069920:·6236·3422·0a20·2074·6167·733a·0a20·202d··b64".··tags:.··- | ||
| 00069930:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | 00069930:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | ||
| 00069940:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | 00069940:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | ||
| 00069950:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | 00069950:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | ||
| 00069960:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 00069960:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 00069970:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 00069970:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| Offset 27060, 21 lines modified | Offset 27060, 21 lines modified | ||
| 00069b30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | 00069b30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 00069b40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | 00069b40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 00069b50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | 00069b50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 00069b60:·3232·3636·3922·3e3c·7072·653e·3c63·6f64··22669"><pre><cod | 00069b60:·3232·3636·3922·3e3c·7072·653e·3c63·6f64··22669"><pre><cod | ||
| 00069b70:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | 00069b70:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 00069b80:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | 00069b80:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 00069b90:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | 00069b90:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 00069ba0:·6174·666f·726d·730a·6966·20 | 00069ba0:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | ||
| 00069bb0:· | 00069bb0:·2d71·7569·6574·202d·7120·6175·6469·7420··-quiet·-q·audit· | ||
| 00069bc0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | 00069bc0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | ||
| 00069bd0:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 00069be0:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 00069b | 00069bf0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | ||
| 00069be0:·7265·6e76·205d·2026·616d·703b·2661·6d70··renv·]·&& | |||
| 00069bf0:·3b20·7270·6d20·2d2d·7175·6965·7420·2d71··;·rpm·--quiet·-q | |||
| 00069c00:· | 00069c00:·7265·6e76·205d·3b20·7468·656e·0a0a·2320··renv·];·then..#· | ||
| 00069c10:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | 00069c10:·4669·7273·7420·7065·7266·6f72·6d20·7468··First·perform·th | ||
| 00069c20:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | 00069c20:·6520·7265·6d65·6469·6174·696f·6e20·6f66··e·remediation·of | ||
| 00069c30:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | 00069c30:·2074·6865·2073·7973·6361·6c6c·2072·756c···the·syscall·rul | ||
| 00069c40:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | 00069c40:·650a·2320·5265·7472·6965·7665·2068·6172··e.#·Retrieve·har | ||
| 00069c50:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | 00069c50:·6477·6172·6520·6172·6368·6974·6563·7475··dware·architectu | ||
| 00069c60:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | 00069c60:·7265·206f·6620·7468·6520·756e·6465·726c··re·of·the·underl | ||
| 00069c70:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | 00069c70:·7969·6e67·2073·7973·7465·6d0a·5b20·2224··ying·system.[·"$ | ||
| Offset 28872, 23 lines modified | Offset 28872, 23 lines modified | ||
| 00070c70:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | 00070c70:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | ||
| 00070c80:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | 00070c80:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 00070c90:·0a2d·206e·616d·653a·2053·6574·2061·7263··.-·name:·Set·arc | 00070c90:·0a2d·206e·616d·653a·2053·6574·2061·7263··.-·name:·Set·arc | ||
| 00070ca0:·6869·7465·6374·7572·6520·666f·7220·6175··hitecture·for·au | 00070ca0:·6869·7465·6374·7572·6520·666f·7220·6175··hitecture·for·au | ||
| 00070cb0:·6469·7420·6368·6f77·6e20·7461·736b·730a··dit·chown·tasks. | 00070cb0:·6469·7420·6368·6f77·6e20·7461·736b·730a··dit·chown·tasks. | ||
| 00070cc0:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | 00070cc0:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 00070cd0:·6175·6469·745f·6172·6368·3a20·6236·340a··audit_arch:·b64. | 00070cd0:·6175·6469·745f·6172·6368·3a20·6236·340a··audit_arch:·b64. | ||
| 00070ce0:·2020·7768·656e·3a0a·2020·2d20· | 00070ce0:·2020·7768·656e·3a0a·2020·2d20·2722·6175····when:.··-·'"au | ||
| 00070cf0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 00070d00:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 00070d10:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| Max diff block lines reached; 380129/390402 bytes (97.37%) of diff not shown. | |||
| Offset 1302, 16 lines modified | Offset 1302, 16 lines modified | ||
| 1302 | ··-·reboot_required | 1302 | ··-·reboot_required |
| 1303 | ··-·restrict_strategy | 1303 | ··-·restrict_strategy |
| 1304 | -·name:·Set·architecture·for·audit·chmod·tasks | 1304 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 1305 | ··set_fact: | 1305 | ··set_fact: |
| 1306 | ····audit_arch:·b64 | 1306 | ····audit_arch:·b64 |
| 1307 | ··when: | 1307 | ··when: |
| 1308 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1309 | ··-·'"audit"·in·ansible_facts.packages' | 1308 | ··-·'"audit"·in·ansible_facts.packages' |
| 1309 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1310 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1310 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 1311 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 1311 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 1312 | ··tags: | 1312 | ··tags: |
| 1313 | ··-·CJIS-5.4.1.1 | 1313 | ··-·CJIS-5.4.1.1 |
| 1314 | ··-·DISA-STIG-OL08-00-030490 | 1314 | ··-·DISA-STIG-OL08-00-030490 |
| 1315 | ··-·NIST-800-171-3.1.7 | 1315 | ··-·NIST-800-171-3.1.7 |
| 1316 | ··-·NIST-800-53-AU-12(c) | 1316 | ··-·NIST-800-53-AU-12(c) |
| Offset 1448, 16 lines modified | Offset 1448, 16 lines modified | ||
| 1448 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1448 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1449 | ········-F·auid!=unset·-F·key=perm_mod | 1449 | ········-F·auid!=unset·-F·key=perm_mod |
| 1450 | ······create:·true | 1450 | ······create:·true |
| 1451 | ······mode:·o-rwx | 1451 | ······mode:·o-rwx |
| 1452 | ······state:·present | 1452 | ······state:·present |
| 1453 | ····when:·syscalls_found·|·length·==·0 | 1453 | ····when:·syscalls_found·|·length·==·0 |
| 1454 | ··when: | 1454 | ··when: |
| 1455 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1456 | ··-·'"audit"·in·ansible_facts.packages' | 1455 | ··-·'"audit"·in·ansible_facts.packages' |
| 1456 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1457 | ··tags: | 1457 | ··tags: |
| 1458 | ··-·CJIS-5.4.1.1 | 1458 | ··-·CJIS-5.4.1.1 |
| 1459 | ··-·DISA-STIG-OL08-00-030490 | 1459 | ··-·DISA-STIG-OL08-00-030490 |
| 1460 | ··-·NIST-800-171-3.1.7 | 1460 | ··-·NIST-800-171-3.1.7 |
| 1461 | ··-·NIST-800-53-AU-12(c) | 1461 | ··-·NIST-800-53-AU-12(c) |
| 1462 | ··-·NIST-800-53-AU-2(d) | 1462 | ··-·NIST-800-53-AU-2(d) |
| 1463 | ··-·NIST-800-53-CM-6(a) | 1463 | ··-·NIST-800-53-CM-6(a) |
| Offset 1592, 16 lines modified | Offset 1592, 16 lines modified | ||
| 1592 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 1592 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 1593 | ········-F·auid!=unset·-F·key=perm_mod | 1593 | ········-F·auid!=unset·-F·key=perm_mod |
| 1594 | ······create:·true | 1594 | ······create:·true |
| 1595 | ······mode:·o-rwx | 1595 | ······mode:·o-rwx |
| 1596 | ······state:·present | 1596 | ······state:·present |
| 1597 | ····when:·syscalls_found·|·length·==·0 | 1597 | ····when:·syscalls_found·|·length·==·0 |
| 1598 | ··when: | 1598 | ··when: |
| 1599 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1600 | ··-·'"audit"·in·ansible_facts.packages' | 1599 | ··-·'"audit"·in·ansible_facts.packages' |
| 1600 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1601 | ··-·audit_arch·==·"b64" | 1601 | ··-·audit_arch·==·"b64" |
| 1602 | ··tags: | 1602 | ··tags: |
| 1603 | ··-·CJIS-5.4.1.1 | 1603 | ··-·CJIS-5.4.1.1 |
| 1604 | ··-·DISA-STIG-OL08-00-030490 | 1604 | ··-·DISA-STIG-OL08-00-030490 |
| 1605 | ··-·NIST-800-171-3.1.7 | 1605 | ··-·NIST-800-171-3.1.7 |
| 1606 | ··-·NIST-800-53-AU-12(c) | 1606 | ··-·NIST-800-53-AU-12(c) |
| 1607 | ··-·NIST-800-53-AU-2(d) | 1607 | ··-·NIST-800-53-AU-2(d) |
| Offset 1611, 15 lines modified | Offset 1611, 15 lines modified | ||
| 1611 | ··-·low_complexity | 1611 | ··-·low_complexity |
| 1612 | ··-·low_disruption | 1612 | ··-·low_disruption |
| 1613 | ··-·medium_severity | 1613 | ··-·medium_severity |
| 1614 | ··-·reboot_required | 1614 | ··-·reboot_required |
| 1615 | ··-·restrict_strategy | 1615 | ··-·restrict_strategy |
| 1616 | Remediation_Shell_script_⇲ | 1616 | Remediation_Shell_script_⇲ |
| 1617 | #·Remediation·is·applicable·only·in·certain·platforms | 1617 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1618 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 1618 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1619 | #·First·perform·the·remediation·of·the·syscall·rule | 1619 | #·First·perform·the·remediation·of·the·syscall·rule |
| 1620 | #·Retrieve·hardware·architecture·of·the·underlying·system | 1620 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 1621 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 1621 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 1622 | for·ARCH·in·"${RULE_ARCHS[@]}" | 1622 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 1623 | do | 1623 | do |
| Offset 1980, 16 lines modified | Offset 1980, 16 lines modified | ||
| 1980 | ··-·reboot_required | 1980 | ··-·reboot_required |
| 1981 | ··-·restrict_strategy | 1981 | ··-·restrict_strategy |
| 1982 | -·name:·Set·architecture·for·audit·chown·tasks | 1982 | -·name:·Set·architecture·for·audit·chown·tasks |
| 1983 | ··set_fact: | 1983 | ··set_fact: |
| 1984 | ····audit_arch:·b64 | 1984 | ····audit_arch:·b64 |
| 1985 | ··when: | 1985 | ··when: |
| 1986 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1987 | ··-·'"audit"·in·ansible_facts.packages' | 1986 | ··-·'"audit"·in·ansible_facts.packages' |
| 1987 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1988 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 1988 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 1989 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 1989 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 1990 | ··tags: | 1990 | ··tags: |
| 1991 | ··-·CJIS-5.4.1.1 | 1991 | ··-·CJIS-5.4.1.1 |
| 1992 | ··-·DISA-STIG-OL08-00-030480 | 1992 | ··-·DISA-STIG-OL08-00-030480 |
| 1993 | ··-·NIST-800-171-3.1.7 | 1993 | ··-·NIST-800-171-3.1.7 |
| 1994 | ··-·NIST-800-53-AU-12(c) | 1994 | ··-·NIST-800-53-AU-12(c) |
| Offset 2128, 16 lines modified | Offset 2128, 16 lines modified | ||
| 2128 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2128 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2129 | ········-F·auid!=unset·-F·key=perm_mod | 2129 | ········-F·auid!=unset·-F·key=perm_mod |
| 2130 | ······create:·true | 2130 | ······create:·true |
| 2131 | ······mode:·o-rwx | 2131 | ······mode:·o-rwx |
| 2132 | ······state:·present | 2132 | ······state:·present |
| 2133 | ····when:·syscalls_found·|·length·==·0 | 2133 | ····when:·syscalls_found·|·length·==·0 |
| 2134 | ··when: | 2134 | ··when: |
| 2135 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2136 | ··-·'"audit"·in·ansible_facts.packages' | 2135 | ··-·'"audit"·in·ansible_facts.packages' |
| 2136 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2137 | ··tags: | 2137 | ··tags: |
| 2138 | ··-·CJIS-5.4.1.1 | 2138 | ··-·CJIS-5.4.1.1 |
| 2139 | ··-·DISA-STIG-OL08-00-030480 | 2139 | ··-·DISA-STIG-OL08-00-030480 |
| 2140 | ··-·NIST-800-171-3.1.7 | 2140 | ··-·NIST-800-171-3.1.7 |
| 2141 | ··-·NIST-800-53-AU-12(c) | 2141 | ··-·NIST-800-53-AU-12(c) |
| 2142 | ··-·NIST-800-53-AU-2(d) | 2142 | ··-·NIST-800-53-AU-2(d) |
| 2143 | ··-·NIST-800-53-CM-6(a) | 2143 | ··-·NIST-800-53-CM-6(a) |
| Offset 2274, 16 lines modified | Offset 2274, 16 lines modified | ||
| 2274 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 2274 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 2275 | ········-F·auid!=unset·-F·key=perm_mod | 2275 | ········-F·auid!=unset·-F·key=perm_mod |
| 2276 | ······create:·true | 2276 | ······create:·true |
| 2277 | ······mode:·o-rwx | 2277 | ······mode:·o-rwx |
| 2278 | ······state:·present | 2278 | ······state:·present |
| 2279 | ····when:·syscalls_found·|·length·==·0 | 2279 | ····when:·syscalls_found·|·length·==·0 |
| 2280 | ··when: | 2280 | ··when: |
| 2281 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2282 | ··-·'"audit"·in·ansible_facts.packages' | 2281 | ··-·'"audit"·in·ansible_facts.packages' |
| 2282 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2283 | ··-·audit_arch·==·"b64" | 2283 | ··-·audit_arch·==·"b64" |
| 2284 | ··tags: | 2284 | ··tags: |
| 2285 | ··-·CJIS-5.4.1.1 | 2285 | ··-·CJIS-5.4.1.1 |
| 2286 | ··-·DISA-STIG-OL08-00-030480 | 2286 | ··-·DISA-STIG-OL08-00-030480 |
| 2287 | ··-·NIST-800-171-3.1.7 | 2287 | ··-·NIST-800-171-3.1.7 |
| 2288 | ··-·NIST-800-53-AU-12(c) | 2288 | ··-·NIST-800-53-AU-12(c) |
| 2289 | ··-·NIST-800-53-AU-2(d) | 2289 | ··-·NIST-800-53-AU-2(d) |
| Offset 2293, 15 lines modified | Offset 2293, 15 lines modified | ||
| 2293 | ··-·low_complexity | 2293 | ··-·low_complexity |
| 2294 | ··-·low_disruption | 2294 | ··-·low_disruption |
| 2295 | ··-·medium_severity | 2295 | ··-·medium_severity |
| Max diff block lines reached; 120428/125062 bytes (96.29%) of diff not shown. | |||
| Offset 108219, 23 lines modified | Offset 108219, 23 lines modified | ||
| 001a6ba0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | 001a6ba0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 001a6bb0:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | 001a6bb0:·7472·6174·6567·790a·0a2d·206e·616d·653a··trategy..-·name: | ||
| 001a6bc0:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | 001a6bc0:·2053·6574·2061·7263·6869·7465·6374·7572···Set·architectur | ||
| 001a6bd0:·6520·666f·7220·6175·6469·7420·6368·6d6f··e·for·audit·chmo | 001a6bd0:·6520·666f·7220·6175·6469·7420·6368·6d6f··e·for·audit·chmo | ||
| 001a6be0:·6420·7461·736b·730a·2020·7365·745f·6661··d·tasks.··set_fa | 001a6be0:·6420·7461·736b·730a·2020·7365·745f·6661··d·tasks.··set_fa | ||
| 001a6bf0:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | 001a6bf0:·6374·3a0a·2020·2020·6175·6469·745f·6172··ct:.····audit_ar | ||
| 001a6c00:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | 001a6c00:·6368·3a20·6236·340a·2020·7768·656e·3a0a··ch:·b64.··when:. | ||
| 001a6c10:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 001a6c20:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 001a6c30:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 001a6c40:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 001a6c50:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 001a6c60:·6e74·6169·6e65·7222·5d0a·2020·2d20·2722··ntainer"].··-·'" | |||
| 001a6c70:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | |||
| 001a6c | 001a6c10:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | ||
| 001a6c20:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 001a6c30:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 001a6c40:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 001a6c50:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 001a6c60:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 001a6c70:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 001a6c80:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 001a6c90:· | 001a6c90:·5d0a·2020·2d20·616e·7369·626c·655f·6172··].··-·ansible_ar | ||
| 001a6ca0:·6368·6974·6563·7475·7265·203d·3d20·2261··chitecture·==·"a | 001a6ca0:·6368·6974·6563·7475·7265·203d·3d20·2261··chitecture·==·"a | ||
| 001a6cb0:·6172·6368·3634·2220·6f72·2061·6e73·6962··arch64"·or·ansib | 001a6cb0:·6172·6368·3634·2220·6f72·2061·6e73·6962··arch64"·or·ansib | ||
| 001a6cc0:·6c65·5f61·7263·6869·7465·6374·7572·6520··le_architecture· | 001a6cc0:·6c65·5f61·7263·6869·7465·6374·7572·6520··le_architecture· | ||
| 001a6cd0:·3d3d·2022·7070·6336·3422·206f·7220·616e··==·"ppc64"·or·an | 001a6cd0:·3d3d·2022·7070·6336·3422·206f·7220·616e··==·"ppc64"·or·an | ||
| 001a6ce0:·7369·626c·655f·6172·6368·6974·6563·7475··sible_architectu | 001a6ce0:·7369·626c·655f·6172·6368·6974·6563·7475··sible_architectu | ||
| 001a6cf0:·7265·0a20·2020·203d·3d20·2270·7063·3634··re.····==·"ppc64 | 001a6cf0:·7265·0a20·2020·203d·3d20·2270·7063·3634··re.····==·"ppc64 | ||
| 001a6d00:·6c65·2220·6f72·2061·6e73·6962·6c65·5f61··le"·or·ansible_a | 001a6d00:·6c65·2220·6f72·2061·6e73·6962·6c65·5f61··le"·or·ansible_a | ||
| Offset 108542, 23 lines modified | Offset 108542, 23 lines modified | ||
| 001a7fd0:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | 001a7fd0:·3d70·6572·6d5f·6d6f·640a·2020·2020·2020··=perm_mod.······ | ||
| 001a7fe0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | 001a7fe0:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | ||
| 001a7ff0:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | 001a7ff0:·2020·206d·6f64·653a·206f·2d72·7778·0a20·····mode:·o-rwx.· | ||
| 001a8000:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | 001a8000:·2020·2020·2073·7461·7465·3a20·7072·6573·······state:·pres | ||
| 001a8010:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | 001a8010:·656e·740a·2020·2020·7768·656e·3a20·7379··ent.····when:·sy | ||
| 001a8020:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | 001a8020:·7363·616c·6c73·5f66·6f75·6e64·207c·206c··scalls_found·|·l | ||
| 001a8030:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | 001a8030:·656e·6774·6820·3d3d·2030·0a20·2077·6865··ength·==·0.··whe | ||
| 001a8040:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | |||
| 001a8050:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 001a8060:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 001a8070:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 001a8080:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 001a8090:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 001a80a0:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | |||
| 001a80 | 001a8040:·6e3a·0a20·202d·2027·2261·7564·6974·2220··n:.··-·'"audit"· | ||
| 001a8050:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 001a8060:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 001a8070:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 001a8080:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 001a8090:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 001a80a0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 001a80b0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 001a80c0:·6 | 001a80c0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 001a80d0:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | 001a80d0:·2043·4a49·532d·352e·342e·312e·310a·2020···CJIS-5.4.1.1.·· | ||
| 001a80e0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | 001a80e0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | ||
| 001a80f0:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | 001a80f0:·2d30·302d·3033·3034·3930·0a20·202d·204e··-00-030490.··-·N | ||
| 001a8100:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | 001a8100:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | ||
| 001a8110:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | 001a8110:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 001a8120:·332d·4155·2d31·3228·6329·0a20·202d·204e··3-AU-12(c).··-·N | 001a8120:·332d·4155·2d31·3228·6329·0a20·202d·204e··3-AU-12(c).··-·N | ||
| 001a8130:·4953·542d·3830·302d·3533·2d41·552d·3228··IST-800-53-AU-2( | 001a8130:·4953·542d·3830·302d·3533·2d41·552d·3228··IST-800-53-AU-2( | ||
| Offset 108854, 22 lines modified | Offset 108854, 22 lines modified | ||
| 001a9350:·6d6f·640a·2020·2020·2020·6372·6561·7465··mod.······create | 001a9350:·6d6f·640a·2020·2020·2020·6372·6561·7465··mod.······create | ||
| 001a9360:·3a20·7472·7565·0a20·2020·2020·206d·6f64··:·true.······mod | 001a9360:·3a20·7472·7565·0a20·2020·2020·206d·6f64··:·true.······mod | ||
| 001a9370:·653a·206f·2d72·7778·0a20·2020·2020·2073··e:·o-rwx.······s | 001a9370:·653a·206f·2d72·7778·0a20·2020·2020·2073··e:·o-rwx.······s | ||
| 001a9380:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | 001a9380:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | ||
| 001a9390:·2020·7768·656e·3a20·7379·7363·616c·6c73····when:·syscalls | 001a9390:·2020·7768·656e·3a20·7379·7363·616c·6c73····when:·syscalls | ||
| 001a93a0:·5f66·6f75·6e64·207c·206c·656e·6774·6820··_found·|·length· | 001a93a0:·5f66·6f75·6e64·207c·206c·656e·6774·6820··_found·|·length· | ||
| 001a93b0:·3d3d·2030·0a20·2077·6865·6e3a·0a20·202d··==·0.··when:.··- | 001a93b0:·3d3d·2030·0a20·2077·6865·6e3a·0a20·202d··==·0.··when:.··- | ||
| 001a93c0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 001a93d0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 001a93e0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 001a93f0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 001a9400:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 001a9410:·696e·6572·225d·0a20·202d·2027·2261·7564··iner"].··-·'"aud | |||
| 001a9420:·6974·2220·696e·2061·6e73·6962·6c65·5f66··it"·in·ansible_f | |||
| 001a9 | 001a93c0:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | ||
| 001a93d0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 001a93e0:·6765·7327·0a20·202d·2061·6e73·6962·6c65··ges'.··-·ansible | |||
| 001a93f0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 001a9400:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 001a9410:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 001a9420:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 001a9430:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 001a9440:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | 001a9440:·202d·2061·7564·6974·5f61·7263·6820·3d3d···-·audit_arch·== | ||
| 001a9450:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | 001a9450:·2022·6236·3422·0a20·2074·6167·733a·0a20···"b64".··tags:.· | ||
| 001a9460:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | 001a9460:·202d·2043·4a49·532d·352e·342e·312e·310a···-·CJIS-5.4.1.1. | ||
| 001a9470:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | 001a9470:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 001a9480:·3038·2d30·302d·3033·3034·3930·0a20·202d··08-00-030490.··- | 001a9480:·3038·2d30·302d·3033·3034·3930·0a20·202d··08-00-030490.··- | ||
| 001a9490:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | 001a9490:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 001a94a0:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | 001a94a0:·312e·370a·2020·2d20·4e49·5354·2d38·3030··1.7.··-·NIST-800 | ||
| Offset 108903, 21 lines modified | Offset 108903, 21 lines modified | ||
| 001a9660:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 001a9660:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 001a9670:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 001a9670:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 001a9680:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 001a9680:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 001a9690:·646d·3232·3636·3922·3e3c·7072·653e·3c63··dm22669"><pre><c | 001a9690:·646d·3232·3636·3922·3e3c·7072·653e·3c63··dm22669"><pre><c | ||
| 001a96a0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 001a96a0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 001a96b0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 001a96b0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 001a96c0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 001a96c0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 001a96d0:·706c·6174·666f·726d·730a·6966·20 | 001a96d0:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | ||
| 001a96e0:·202d·2d71·7569·6574·202d·7120·6175·6469···--quiet·-q·audi | |||
| 001a96f0:·7420·2661·6d70·3b26·616d·703b·205b·2021··t·&&·[·! | |||
| 001a9 | 001a9700:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 001a9 | 001a9710:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 001a97 | 001a9720:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 001a9730:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 001a9710:·6e65·7265·6e76·205d·2026·616d·703b·2661··nerenv·]·&&a | |||
| 001a9720:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 001a9730:·2d71·2061·7564·6974·3b20·7468·656e·0a0a··-q·audit;·then.. | |||
| 001a9740:·2320·4669·7273·7420·7065·7266·6f72·6d20··#·First·perform· | 001a9740:·2320·4669·7273·7420·7065·7266·6f72·6d20··#·First·perform· | ||
| 001a9750:·7468·6520·7265·6d65·6469·6174·696f·6e20··the·remediation· | 001a9750:·7468·6520·7265·6d65·6469·6174·696f·6e20··the·remediation· | ||
| 001a9760:·6f66·2074·6865·2073·7973·6361·6c6c·2072··of·the·syscall·r | 001a9760:·6f66·2074·6865·2073·7973·6361·6c6c·2072··of·the·syscall·r | ||
| 001a9770:·756c·650a·2320·5265·7472·6965·7665·2068··ule.#·Retrieve·h | 001a9770:·756c·650a·2320·5265·7472·6965·7665·2068··ule.#·Retrieve·h | ||
| 001a9780:·6172·6477·6172·6520·6172·6368·6974·6563··ardware·architec | 001a9780:·6172·6477·6172·6520·6172·6368·6974·6563··ardware·architec | ||
| 001a9790:·7475·7265·206f·6620·7468·6520·756e·6465··ture·of·the·unde | 001a9790:·7475·7265·206f·6620·7468·6520·756e·6465··ture·of·the·unde | ||
| 001a97a0:·726c·7969·6e67·2073·7973·7465·6d0a·5b20··rlying·system.[· | 001a97a0:·726c·7969·6e67·2073·7973·7465·6d0a·5b20··rlying·system.[· | ||
| Offset 110715, 23 lines modified | Offset 110715, 23 lines modified | ||
| 001b07a0:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | 001b07a0:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | ||
| 001b07b0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | 001b07b0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 001b07c0:·790a·0a2d·206e·616d·653a·2053·6574·2061··y..-·name:·Set·a | 001b07c0:·790a·0a2d·206e·616d·653a·2053·6574·2061··y..-·name:·Set·a | ||
| 001b07d0:·7263·6869·7465·6374·7572·6520·666f·7220··rchitecture·for· | 001b07d0:·7263·6869·7465·6374·7572·6520·666f·7220··rchitecture·for· | ||
| 001b07e0:·6175·6469·7420·6368·6f77·6e20·7461·736b··audit·chown·task | 001b07e0:·6175·6469·7420·6368·6f77·6e20·7461·736b··audit·chown·task | ||
| 001b07f0:·730a·2020·7365·745f·6661·6374·3a0a·2020··s.··set_fact:.·· | 001b07f0:·730a·2020·7365·745f·6661·6374·3a0a·2020··s.··set_fact:.·· | ||
| 001b0800:·2020·6175·6469·745f·6172·6368·3a20·6236····audit_arch:·b6 | 001b0800:·2020·6175·6469·745f·6172·6368·3a20·6236····audit_arch:·b6 | ||
| 001b0810:·340a·2020·7768·656e·3a0a·2020·2d20· | 001b0810:·340a·2020·7768·656e·3a0a·2020·2d20·2722··4.··when:.··-·'" | ||
| 001b0820:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 001b0830:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| Max diff block lines reached; 588764/599116 bytes (98.27%) of diff not shown. | |||
| Offset 18655, 16 lines modified | Offset 18655, 16 lines modified | ||
| 18655 | ··-·reboot_required | 18655 | ··-·reboot_required |
| 18656 | ··-·restrict_strategy | 18656 | ··-·restrict_strategy |
| 18657 | -·name:·Set·architecture·for·audit·chmod·tasks | 18657 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 18658 | ··set_fact: | 18658 | ··set_fact: |
| 18659 | ····audit_arch:·b64 | 18659 | ····audit_arch:·b64 |
| 18660 | ··when: | 18660 | ··when: |
| 18661 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18662 | ··-·'"audit"·in·ansible_facts.packages' | 18661 | ··-·'"audit"·in·ansible_facts.packages' |
| 18662 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18663 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 18663 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 18664 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 18664 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 18665 | ··tags: | 18665 | ··tags: |
| 18666 | ··-·CJIS-5.4.1.1 | 18666 | ··-·CJIS-5.4.1.1 |
| 18667 | ··-·DISA-STIG-OL08-00-030490 | 18667 | ··-·DISA-STIG-OL08-00-030490 |
| 18668 | ··-·NIST-800-171-3.1.7 | 18668 | ··-·NIST-800-171-3.1.7 |
| 18669 | ··-·NIST-800-53-AU-12(c) | 18669 | ··-·NIST-800-53-AU-12(c) |
| Offset 18801, 16 lines modified | Offset 18801, 16 lines modified | ||
| 18801 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 18801 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 18802 | ········-F·auid!=unset·-F·key=perm_mod | 18802 | ········-F·auid!=unset·-F·key=perm_mod |
| 18803 | ······create:·true | 18803 | ······create:·true |
| 18804 | ······mode:·o-rwx | 18804 | ······mode:·o-rwx |
| 18805 | ······state:·present | 18805 | ······state:·present |
| 18806 | ····when:·syscalls_found·|·length·==·0 | 18806 | ····when:·syscalls_found·|·length·==·0 |
| 18807 | ··when: | 18807 | ··when: |
| 18808 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18809 | ··-·'"audit"·in·ansible_facts.packages' | 18808 | ··-·'"audit"·in·ansible_facts.packages' |
| 18809 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18810 | ··tags: | 18810 | ··tags: |
| 18811 | ··-·CJIS-5.4.1.1 | 18811 | ··-·CJIS-5.4.1.1 |
| 18812 | ··-·DISA-STIG-OL08-00-030490 | 18812 | ··-·DISA-STIG-OL08-00-030490 |
| 18813 | ··-·NIST-800-171-3.1.7 | 18813 | ··-·NIST-800-171-3.1.7 |
| 18814 | ··-·NIST-800-53-AU-12(c) | 18814 | ··-·NIST-800-53-AU-12(c) |
| 18815 | ··-·NIST-800-53-AU-2(d) | 18815 | ··-·NIST-800-53-AU-2(d) |
| 18816 | ··-·NIST-800-53-CM-6(a) | 18816 | ··-·NIST-800-53-CM-6(a) |
| Offset 18945, 16 lines modified | Offset 18945, 16 lines modified | ||
| 18945 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 18945 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 18946 | ········-F·auid!=unset·-F·key=perm_mod | 18946 | ········-F·auid!=unset·-F·key=perm_mod |
| 18947 | ······create:·true | 18947 | ······create:·true |
| 18948 | ······mode:·o-rwx | 18948 | ······mode:·o-rwx |
| 18949 | ······state:·present | 18949 | ······state:·present |
| 18950 | ····when:·syscalls_found·|·length·==·0 | 18950 | ····when:·syscalls_found·|·length·==·0 |
| 18951 | ··when: | 18951 | ··when: |
| 18952 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18953 | ··-·'"audit"·in·ansible_facts.packages' | 18952 | ··-·'"audit"·in·ansible_facts.packages' |
| 18953 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18954 | ··-·audit_arch·==·"b64" | 18954 | ··-·audit_arch·==·"b64" |
| 18955 | ··tags: | 18955 | ··tags: |
| 18956 | ··-·CJIS-5.4.1.1 | 18956 | ··-·CJIS-5.4.1.1 |
| 18957 | ··-·DISA-STIG-OL08-00-030490 | 18957 | ··-·DISA-STIG-OL08-00-030490 |
| 18958 | ··-·NIST-800-171-3.1.7 | 18958 | ··-·NIST-800-171-3.1.7 |
| 18959 | ··-·NIST-800-53-AU-12(c) | 18959 | ··-·NIST-800-53-AU-12(c) |
| 18960 | ··-·NIST-800-53-AU-2(d) | 18960 | ··-·NIST-800-53-AU-2(d) |
| Offset 18964, 15 lines modified | Offset 18964, 15 lines modified | ||
| 18964 | ··-·low_complexity | 18964 | ··-·low_complexity |
| 18965 | ··-·low_disruption | 18965 | ··-·low_disruption |
| 18966 | ··-·medium_severity | 18966 | ··-·medium_severity |
| 18967 | ··-·reboot_required | 18967 | ··-·reboot_required |
| 18968 | ··-·restrict_strategy | 18968 | ··-·restrict_strategy |
| 18969 | Remediation_Shell_script_⇲ | 18969 | Remediation_Shell_script_⇲ |
| 18970 | #·Remediation·is·applicable·only·in·certain·platforms | 18970 | #·Remediation·is·applicable·only·in·certain·platforms |
| 18971 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 18971 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 18972 | #·First·perform·the·remediation·of·the·syscall·rule | 18972 | #·First·perform·the·remediation·of·the·syscall·rule |
| 18973 | #·Retrieve·hardware·architecture·of·the·underlying·system | 18973 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 18974 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 18974 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 18975 | for·ARCH·in·"${RULE_ARCHS[@]}" | 18975 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 18976 | do | 18976 | do |
| Offset 19333, 16 lines modified | Offset 19333, 16 lines modified | ||
| 19333 | ··-·reboot_required | 19333 | ··-·reboot_required |
| 19334 | ··-·restrict_strategy | 19334 | ··-·restrict_strategy |
| 19335 | -·name:·Set·architecture·for·audit·chown·tasks | 19335 | -·name:·Set·architecture·for·audit·chown·tasks |
| 19336 | ··set_fact: | 19336 | ··set_fact: |
| 19337 | ····audit_arch:·b64 | 19337 | ····audit_arch:·b64 |
| 19338 | ··when: | 19338 | ··when: |
| 19339 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19340 | ··-·'"audit"·in·ansible_facts.packages' | 19339 | ··-·'"audit"·in·ansible_facts.packages' |
| 19340 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19341 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 19341 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 19342 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 19342 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 19343 | ··tags: | 19343 | ··tags: |
| 19344 | ··-·CJIS-5.4.1.1 | 19344 | ··-·CJIS-5.4.1.1 |
| 19345 | ··-·DISA-STIG-OL08-00-030480 | 19345 | ··-·DISA-STIG-OL08-00-030480 |
| 19346 | ··-·NIST-800-171-3.1.7 | 19346 | ··-·NIST-800-171-3.1.7 |
| 19347 | ··-·NIST-800-53-AU-12(c) | 19347 | ··-·NIST-800-53-AU-12(c) |
| Offset 19481, 16 lines modified | Offset 19481, 16 lines modified | ||
| 19481 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 19481 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 19482 | ········-F·auid!=unset·-F·key=perm_mod | 19482 | ········-F·auid!=unset·-F·key=perm_mod |
| 19483 | ······create:·true | 19483 | ······create:·true |
| 19484 | ······mode:·o-rwx | 19484 | ······mode:·o-rwx |
| 19485 | ······state:·present | 19485 | ······state:·present |
| 19486 | ····when:·syscalls_found·|·length·==·0 | 19486 | ····when:·syscalls_found·|·length·==·0 |
| 19487 | ··when: | 19487 | ··when: |
| 19488 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19489 | ··-·'"audit"·in·ansible_facts.packages' | 19488 | ··-·'"audit"·in·ansible_facts.packages' |
| 19489 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19490 | ··tags: | 19490 | ··tags: |
| 19491 | ··-·CJIS-5.4.1.1 | 19491 | ··-·CJIS-5.4.1.1 |
| 19492 | ··-·DISA-STIG-OL08-00-030480 | 19492 | ··-·DISA-STIG-OL08-00-030480 |
| 19493 | ··-·NIST-800-171-3.1.7 | 19493 | ··-·NIST-800-171-3.1.7 |
| 19494 | ··-·NIST-800-53-AU-12(c) | 19494 | ··-·NIST-800-53-AU-12(c) |
| 19495 | ··-·NIST-800-53-AU-2(d) | 19495 | ··-·NIST-800-53-AU-2(d) |
| 19496 | ··-·NIST-800-53-CM-6(a) | 19496 | ··-·NIST-800-53-CM-6(a) |
| Offset 19627, 16 lines modified | Offset 19627, 16 lines modified | ||
| 19627 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 19627 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 19628 | ········-F·auid!=unset·-F·key=perm_mod | 19628 | ········-F·auid!=unset·-F·key=perm_mod |
| 19629 | ······create:·true | 19629 | ······create:·true |
| 19630 | ······mode:·o-rwx | 19630 | ······mode:·o-rwx |
| 19631 | ······state:·present | 19631 | ······state:·present |
| 19632 | ····when:·syscalls_found·|·length·==·0 | 19632 | ····when:·syscalls_found·|·length·==·0 |
| 19633 | ··when: | 19633 | ··when: |
| 19634 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19635 | ··-·'"audit"·in·ansible_facts.packages' | 19634 | ··-·'"audit"·in·ansible_facts.packages' |
| 19635 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19636 | ··-·audit_arch·==·"b64" | 19636 | ··-·audit_arch·==·"b64" |
| 19637 | ··tags: | 19637 | ··tags: |
| 19638 | ··-·CJIS-5.4.1.1 | 19638 | ··-·CJIS-5.4.1.1 |
| 19639 | ··-·DISA-STIG-OL08-00-030480 | 19639 | ··-·DISA-STIG-OL08-00-030480 |
| 19640 | ··-·NIST-800-171-3.1.7 | 19640 | ··-·NIST-800-171-3.1.7 |
| 19641 | ··-·NIST-800-53-AU-12(c) | 19641 | ··-·NIST-800-53-AU-12(c) |
| 19642 | ··-·NIST-800-53-AU-2(d) | 19642 | ··-·NIST-800-53-AU-2(d) |
| Offset 19646, 15 lines modified | Offset 19646, 15 lines modified | ||
| 19646 | ··-·low_complexity | 19646 | ··-·low_complexity |
| 19647 | ··-·low_disruption | 19647 | ··-·low_disruption |
| 19648 | ··-·medium_severity | 19648 | ··-·medium_severity |
| Max diff block lines reached; 186878/191528 bytes (97.57%) of diff not shown. | |||
| Offset 108237, 23 lines modified | Offset 108237, 23 lines modified | ||
| 001a6cc0:·6972·6564·0a20·202d·2072·6573·7472·6963··ired.··-·restric | 001a6cc0:·6972·6564·0a20·202d·2072·6573·7472·6963··ired.··-·restric | ||
| 001a6cd0:·745f·7374·7261·7465·6779·0a0a·2d20·6e61··t_strategy..-·na | 001a6cd0:·745f·7374·7261·7465·6779·0a0a·2d20·6e61··t_strategy..-·na | ||
| 001a6ce0:·6d65·3a20·5365·7420·6172·6368·6974·6563··me:·Set·architec | 001a6ce0:·6d65·3a20·5365·7420·6172·6368·6974·6563··me:·Set·architec | ||
| 001a6cf0:·7475·7265·2066·6f72·2061·7564·6974·2063··ture·for·audit·c | 001a6cf0:·7475·7265·2066·6f72·2061·7564·6974·2063··ture·for·audit·c | ||
| 001a6d00:·686d·6f64·2074·6173·6b73·0a20·2073·6574··hmod·tasks.··set | 001a6d00:·686d·6f64·2074·6173·6b73·0a20·2073·6574··hmod·tasks.··set | ||
| 001a6d10:·5f66·6163·743a·0a20·2020·2061·7564·6974··_fact:.····audit | 001a6d10:·5f66·6163·743a·0a20·2020·2061·7564·6974··_fact:.····audit | ||
| 001a6d20:·5f61·7263·683a·2062·3634·0a20·2077·6865··_arch:·b64.··whe | 001a6d20:·5f61·7263·683a·2062·3634·0a20·2077·6865··_arch:·b64.··whe | ||
| 001a6d30:·6e3a·0a20·202d·2061·6e73·6962·6c65·5f76··n:.··-·ansible_v | |||
| 001a6d40:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 001a6d50:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 001a6d60:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 001a6d70:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 001a6d80:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | |||
| 001a6d90:·2027·2261·7564·6974·2220·696e·2061·6e73···'"audit"·in·ans | |||
| 001a6d | 001a6d30:·6e3a·0a20·202d·2027·2261·7564·6974·2220··n:.··-·'"audit"· | ||
| 001a6d40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 001a6d50:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 001a6d60:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 001a6d70:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 001a6d80:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 001a6d90:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 001a6da0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 001a6db0:·6 | 001a6db0:·6572·225d·0a20·202d·2061·6e73·6962·6c65··er"].··-·ansible | ||
| 001a6dc0:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | 001a6dc0:·5f61·7263·6869·7465·6374·7572·6520·3d3d··_architecture·== | ||
| 001a6dd0:·2022·6161·7263·6836·3422·206f·7220·616e···"aarch64"·or·an | 001a6dd0:·2022·6161·7263·6836·3422·206f·7220·616e···"aarch64"·or·an | ||
| 001a6de0:·7369·626c·655f·6172·6368·6974·6563·7475··sible_architectu | 001a6de0:·7369·626c·655f·6172·6368·6974·6563·7475··sible_architectu | ||
| 001a6df0:·7265·203d·3d20·2270·7063·3634·2220·6f72··re·==·"ppc64"·or | 001a6df0:·7265·203d·3d20·2270·7063·3634·2220·6f72··re·==·"ppc64"·or | ||
| 001a6e00:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | 001a6e00:·2061·6e73·6962·6c65·5f61·7263·6869·7465···ansible_archite | ||
| 001a6e10:·6374·7572·650a·2020·2020·3d3d·2022·7070··cture.····==·"pp | 001a6e10:·6374·7572·650a·2020·2020·3d3d·2022·7070··cture.····==·"pp | ||
| 001a6e20:·6336·346c·6522·206f·7220·616e·7369·626c··c64le"·or·ansibl | 001a6e20:·6336·346c·6522·206f·7220·616e·7369·626c··c64le"·or·ansibl | ||
| Offset 108560, 23 lines modified | Offset 108560, 23 lines modified | ||
| 001a80f0:·6b65·793d·7065·726d·5f6d·6f64·0a20·2020··key=perm_mod.··· | 001a80f0:·6b65·793d·7065·726d·5f6d·6f64·0a20·2020··key=perm_mod.··· | ||
| 001a8100:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | 001a8100:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | ||
| 001a8110:·2020·2020·2020·6d6f·6465·3a20·6f2d·7277········mode:·o-rw | 001a8110:·2020·2020·2020·6d6f·6465·3a20·6f2d·7277········mode:·o-rw | ||
| 001a8120:·780a·2020·2020·2020·7374·6174·653a·2070··x.······state:·p | 001a8120:·780a·2020·2020·2020·7374·6174·653a·2070··x.······state:·p | ||
| 001a8130:·7265·7365·6e74·0a20·2020·2077·6865·6e3a··resent.····when: | 001a8130:·7265·7365·6e74·0a20·2020·2077·6865·6e3a··resent.····when: | ||
| 001a8140:·2073·7973·6361·6c6c·735f·666f·756e·6420···syscalls_found· | 001a8140:·2073·7973·6361·6c6c·735f·666f·756e·6420···syscalls_found· | ||
| 001a8150:·7c20·6c65·6e67·7468·203d·3d20·300a·2020··|·length·==·0.·· | 001a8150:·7c20·6c65·6e67·7468·203d·3d20·300a·2020··|·length·==·0.·· | ||
| 001a8160:·7768·656e·3a0a·2020·2d20· | 001a8160:·7768·656e·3a0a·2020·2d20·2722·6175·6469··when:.··-·'"audi | ||
| 001a8170:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 001a8180:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 001a8190:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 001a81a0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 001a81b0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 001a81c0:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | |||
| 001a81 | 001a8170:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | ||
| 001a8180:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 001a8190:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 001a81a0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 001a81b0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 001a81c0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 001a81d0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 001a81e0:·6 | 001a81e0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 001a81f0:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | 001a81f0:·2020·2d20·434a·4953·2d35·2e34·2e31·2e31····-·CJIS-5.4.1.1 | ||
| 001a8200:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | 001a8200:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 001a8210:·4c30·382d·3030·2d30·3330·3439·300a·2020··L08-00-030490.·· | 001a8210:·4c30·382d·3030·2d30·3330·3439·300a·2020··L08-00-030490.·· | ||
| 001a8220:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | 001a8220:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 001a8230:·2e31·2e37·0a20·202d·204e·4953·542d·3830··.1.7.··-·NIST-80 | 001a8230:·2e31·2e37·0a20·202d·204e·4953·542d·3830··.1.7.··-·NIST-80 | ||
| 001a8240:·302d·3533·2d41·552d·3132·2863·290a·2020··0-53-AU-12(c).·· | 001a8240:·302d·3533·2d41·552d·3132·2863·290a·2020··0-53-AU-12(c).·· | ||
| 001a8250:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | 001a8250:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| Offset 108872, 23 lines modified | Offset 108872, 23 lines modified | ||
| 001a9470:·726d·5f6d·6f64·0a20·2020·2020·2063·7265··rm_mod.······cre | 001a9470:·726d·5f6d·6f64·0a20·2020·2020·2063·7265··rm_mod.······cre | ||
| 001a9480:·6174·653a·2074·7275·650a·2020·2020·2020··ate:·true.······ | 001a9480:·6174·653a·2074·7275·650a·2020·2020·2020··ate:·true.······ | ||
| 001a9490:·6d6f·6465·3a20·6f2d·7277·780a·2020·2020··mode:·o-rwx.···· | 001a9490:·6d6f·6465·3a20·6f2d·7277·780a·2020·2020··mode:·o-rwx.···· | ||
| 001a94a0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | 001a94a0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | ||
| 001a94b0:·0a20·2020·2077·6865·6e3a·2073·7973·6361··.····when:·sysca | 001a94b0:·0a20·2020·2077·6865·6e3a·2073·7973·6361··.····when:·sysca | ||
| 001a94c0:·6c6c·735f·666f·756e·6420·7c20·6c65·6e67··lls_found·|·leng | 001a94c0:·6c6c·735f·666f·756e·6420·7c20·6c65·6e67··lls_found·|·leng | ||
| 001a94d0:·7468·203d·3d20·300a·2020·7768·656e·3a0a··th·==·0.··when:. | 001a94d0:·7468·203d·3d20·300a·2020·7768·656e·3a0a··th·==·0.··when:. | ||
| 001a94e0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 001a94f0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 001a9500:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 001a9510:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 001a9520:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 001a9530:·6e74·6169·6e65·7222·5d0a·2020·2d20·2722··ntainer"].··-·'" | |||
| 001a9540:·6175·6469·7422·2069·6e20·616e·7369·626c··audit"·in·ansibl | |||
| 001a9 | 001a94e0:·2020·2d20·2722·6175·6469·7422·2069·6e20····-·'"audit"·in· | ||
| 001a94f0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 001a9500:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 001a9510:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 001a9520:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 001a9530:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 001a9540:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 001a9550:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 001a9560:· | 001a9560:·5d0a·2020·2d20·6175·6469·745f·6172·6368··].··-·audit_arch | ||
| 001a9570:·203d·3d20·2262·3634·220a·2020·7461·6773···==·"b64".··tags | 001a9570:·203d·3d20·2262·3634·220a·2020·7461·6773···==·"b64".··tags | ||
| 001a9580:·3a0a·2020·2d20·434a·4953·2d35·2e34·2e31··:.··-·CJIS-5.4.1 | 001a9580:·3a0a·2020·2d20·434a·4953·2d35·2e34·2e31··:.··-·CJIS-5.4.1 | ||
| 001a9590:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | 001a9590:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | ||
| 001a95a0:·2d4f·4c30·382d·3030·2d30·3330·3439·300a··-OL08-00-030490. | 001a95a0:·2d4f·4c30·382d·3030·2d30·3330·3439·300a··-OL08-00-030490. | ||
| 001a95b0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | 001a95b0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 001a95c0:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | 001a95c0:·2d33·2e31·2e37·0a20·202d·204e·4953·542d··-3.1.7.··-·NIST- | ||
| 001a95d0:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | 001a95d0:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | ||
| Offset 108922, 20 lines modified | Offset 108922, 20 lines modified | ||
| 001a9790:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 001a9790:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 001a97a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 001a97a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 001a97b0:·3d22·6964·6d32·3236·3639·223e·3c70·7265··="idm22669"><pre | 001a97b0:·3d22·6964·6d32·3236·3639·223e·3c70·7265··="idm22669"><pre | ||
| 001a97c0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 001a97c0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 001a97d0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 001a97d0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 001a97e0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 001a97e0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 001a97f0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 001a97f0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 001a9800:·7270·6d20·2d2d·7175·6965·7420·2d71·2061··rpm·--quiet·-q·a | |||
| 001a9810:·7564·6974·2026·616d·703b·2661·6d70·3b20··udit·&&· | |||
| 001a98 | 001a9820:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 001a98 | 001a9830:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 001a98 | 001a9840:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 001a98 | 001a9850:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | ||
| 001a9840:·3b26·616d·703b·2072·706d·202d·2d71·7569··;&·rpm·--qui | |||
| 001a9850:·6574·202d·7120·6175·6469·743b·2074·6865··et·-q·audit;·the | |||
| 001a9860:·6e0a·0a23·2046·6972·7374·2070·6572·666f··n..#·First·perfo | 001a9860:·6e0a·0a23·2046·6972·7374·2070·6572·666f··n..#·First·perfo | ||
| 001a9870:·726d·2074·6865·2072·656d·6564·6961·7469··rm·the·remediati | 001a9870:·726d·2074·6865·2072·656d·6564·6961·7469··rm·the·remediati | ||
| 001a9880:·6f6e·206f·6620·7468·6520·7379·7363·616c··on·of·the·syscal | 001a9880:·6f6e·206f·6620·7468·6520·7379·7363·616c··on·of·the·syscal | ||
| 001a9890:·6c20·7275·6c65·0a23·2052·6574·7269·6576··l·rule.#·Retriev | 001a9890:·6c20·7275·6c65·0a23·2052·6574·7269·6576··l·rule.#·Retriev | ||
| 001a98a0:·6520·6861·7264·7761·7265·2061·7263·6869··e·hardware·archi | 001a98a0:·6520·6861·7264·7761·7265·2061·7263·6869··e·hardware·archi | ||
| 001a98b0:·7465·6374·7572·6520·6f66·2074·6865·2075··tecture·of·the·u | 001a98b0:·7465·6374·7572·6520·6f66·2074·6865·2075··tecture·of·the·u | ||
| 001a98c0:·6e64·6572·6c79·696e·6720·7379·7374·656d··nderlying·system | 001a98c0:·6e64·6572·6c79·696e·6720·7379·7374·656d··nderlying·system | ||
| Offset 110734, 22 lines modified | Offset 110734, 22 lines modified | ||
| 001b08d0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | 001b08d0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 001b08e0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | 001b08e0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | ||
| 001b08f0:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | 001b08f0:·7420·6172·6368·6974·6563·7475·7265·2066··t·architecture·f | ||
| 001b0900:·6f72·2061·7564·6974·2063·686f·776e·2074··or·audit·chown·t | 001b0900:·6f72·2061·7564·6974·2063·686f·776e·2074··or·audit·chown·t | ||
| 001b0910:·6173·6b73·0a20·2073·6574·5f66·6163·743a··asks.··set_fact: | 001b0910:·6173·6b73·0a20·2073·6574·5f66·6163·743a··asks.··set_fact: | ||
| 001b0920:·0a20·2020·2061·7564·6974·5f61·7263·683a··.····audit_arch: | 001b0920:·0a20·2020·2061·7564·6974·5f61·7263·683a··.····audit_arch: | ||
| 001b0930:·2062·3634·0a20·2077·6865·6e3a·0a20·202d···b64.··when:.··- | 001b0930:·2062·3634·0a20·2077·6865·6e3a·0a20·202d···b64.··when:.··- | ||
| 001b0940:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 001b0950:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 001b0960:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 001b0970:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 001b0980:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| Max diff block lines reached; 587453/597667 bytes (98.29%) of diff not shown. | |||
| Offset 18659, 16 lines modified | Offset 18659, 16 lines modified | ||
| 18659 | ··-·reboot_required | 18659 | ··-·reboot_required |
| 18660 | ··-·restrict_strategy | 18660 | ··-·restrict_strategy |
| 18661 | -·name:·Set·architecture·for·audit·chmod·tasks | 18661 | -·name:·Set·architecture·for·audit·chmod·tasks |
| 18662 | ··set_fact: | 18662 | ··set_fact: |
| 18663 | ····audit_arch:·b64 | 18663 | ····audit_arch:·b64 |
| 18664 | ··when: | 18664 | ··when: |
| 18665 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18666 | ··-·'"audit"·in·ansible_facts.packages' | 18665 | ··-·'"audit"·in·ansible_facts.packages' |
| 18666 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18667 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 18667 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 18668 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 18668 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 18669 | ··tags: | 18669 | ··tags: |
| 18670 | ··-·CJIS-5.4.1.1 | 18670 | ··-·CJIS-5.4.1.1 |
| 18671 | ··-·DISA-STIG-OL08-00-030490 | 18671 | ··-·DISA-STIG-OL08-00-030490 |
| 18672 | ··-·NIST-800-171-3.1.7 | 18672 | ··-·NIST-800-171-3.1.7 |
| 18673 | ··-·NIST-800-53-AU-12(c) | 18673 | ··-·NIST-800-53-AU-12(c) |
| Offset 18805, 16 lines modified | Offset 18805, 16 lines modified | ||
| 18805 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 18805 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 18806 | ········-F·auid!=unset·-F·key=perm_mod | 18806 | ········-F·auid!=unset·-F·key=perm_mod |
| 18807 | ······create:·true | 18807 | ······create:·true |
| 18808 | ······mode:·o-rwx | 18808 | ······mode:·o-rwx |
| 18809 | ······state:·present | 18809 | ······state:·present |
| 18810 | ····when:·syscalls_found·|·length·==·0 | 18810 | ····when:·syscalls_found·|·length·==·0 |
| 18811 | ··when: | 18811 | ··when: |
| 18812 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18813 | ··-·'"audit"·in·ansible_facts.packages' | 18812 | ··-·'"audit"·in·ansible_facts.packages' |
| 18813 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18814 | ··tags: | 18814 | ··tags: |
| 18815 | ··-·CJIS-5.4.1.1 | 18815 | ··-·CJIS-5.4.1.1 |
| 18816 | ··-·DISA-STIG-OL08-00-030490 | 18816 | ··-·DISA-STIG-OL08-00-030490 |
| 18817 | ··-·NIST-800-171-3.1.7 | 18817 | ··-·NIST-800-171-3.1.7 |
| 18818 | ··-·NIST-800-53-AU-12(c) | 18818 | ··-·NIST-800-53-AU-12(c) |
| 18819 | ··-·NIST-800-53-AU-2(d) | 18819 | ··-·NIST-800-53-AU-2(d) |
| 18820 | ··-·NIST-800-53-CM-6(a) | 18820 | ··-·NIST-800-53-CM-6(a) |
| Offset 18949, 16 lines modified | Offset 18949, 16 lines modified | ||
| 18949 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 18949 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 18950 | ········-F·auid!=unset·-F·key=perm_mod | 18950 | ········-F·auid!=unset·-F·key=perm_mod |
| 18951 | ······create:·true | 18951 | ······create:·true |
| 18952 | ······mode:·o-rwx | 18952 | ······mode:·o-rwx |
| 18953 | ······state:·present | 18953 | ······state:·present |
| 18954 | ····when:·syscalls_found·|·length·==·0 | 18954 | ····when:·syscalls_found·|·length·==·0 |
| 18955 | ··when: | 18955 | ··when: |
| 18956 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18957 | ··-·'"audit"·in·ansible_facts.packages' | 18956 | ··-·'"audit"·in·ansible_facts.packages' |
| 18957 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 18958 | ··-·audit_arch·==·"b64" | 18958 | ··-·audit_arch·==·"b64" |
| 18959 | ··tags: | 18959 | ··tags: |
| 18960 | ··-·CJIS-5.4.1.1 | 18960 | ··-·CJIS-5.4.1.1 |
| 18961 | ··-·DISA-STIG-OL08-00-030490 | 18961 | ··-·DISA-STIG-OL08-00-030490 |
| 18962 | ··-·NIST-800-171-3.1.7 | 18962 | ··-·NIST-800-171-3.1.7 |
| 18963 | ··-·NIST-800-53-AU-12(c) | 18963 | ··-·NIST-800-53-AU-12(c) |
| 18964 | ··-·NIST-800-53-AU-2(d) | 18964 | ··-·NIST-800-53-AU-2(d) |
| Offset 18968, 15 lines modified | Offset 18968, 15 lines modified | ||
| 18968 | ··-·low_complexity | 18968 | ··-·low_complexity |
| 18969 | ··-·low_disruption | 18969 | ··-·low_disruption |
| 18970 | ··-·medium_severity | 18970 | ··-·medium_severity |
| 18971 | ··-·reboot_required | 18971 | ··-·reboot_required |
| 18972 | ··-·restrict_strategy | 18972 | ··-·restrict_strategy |
| 18973 | Remediation_Shell_script_⇲ | 18973 | Remediation_Shell_script_⇲ |
| 18974 | #·Remediation·is·applicable·only·in·certain·platforms | 18974 | #·Remediation·is·applicable·only·in·certain·platforms |
| 18975 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 18975 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 18976 | #·First·perform·the·remediation·of·the·syscall·rule | 18976 | #·First·perform·the·remediation·of·the·syscall·rule |
| 18977 | #·Retrieve·hardware·architecture·of·the·underlying·system | 18977 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 18978 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 18978 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 18979 | for·ARCH·in·"${RULE_ARCHS[@]}" | 18979 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 18980 | do | 18980 | do |
| Offset 19337, 16 lines modified | Offset 19337, 16 lines modified | ||
| 19337 | ··-·reboot_required | 19337 | ··-·reboot_required |
| 19338 | ··-·restrict_strategy | 19338 | ··-·restrict_strategy |
| 19339 | -·name:·Set·architecture·for·audit·chown·tasks | 19339 | -·name:·Set·architecture·for·audit·chown·tasks |
| 19340 | ··set_fact: | 19340 | ··set_fact: |
| 19341 | ····audit_arch:·b64 | 19341 | ····audit_arch:·b64 |
| 19342 | ··when: | 19342 | ··when: |
| 19343 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19344 | ··-·'"audit"·in·ansible_facts.packages' | 19343 | ··-·'"audit"·in·ansible_facts.packages' |
| 19344 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19345 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 19345 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 19346 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 19346 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 19347 | ··tags: | 19347 | ··tags: |
| 19348 | ··-·CJIS-5.4.1.1 | 19348 | ··-·CJIS-5.4.1.1 |
| 19349 | ··-·DISA-STIG-OL08-00-030480 | 19349 | ··-·DISA-STIG-OL08-00-030480 |
| 19350 | ··-·NIST-800-171-3.1.7 | 19350 | ··-·NIST-800-171-3.1.7 |
| 19351 | ··-·NIST-800-53-AU-12(c) | 19351 | ··-·NIST-800-53-AU-12(c) |
| Offset 19485, 16 lines modified | Offset 19485, 16 lines modified | ||
| 19485 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 19485 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 19486 | ········-F·auid!=unset·-F·key=perm_mod | 19486 | ········-F·auid!=unset·-F·key=perm_mod |
| 19487 | ······create:·true | 19487 | ······create:·true |
| 19488 | ······mode:·o-rwx | 19488 | ······mode:·o-rwx |
| 19489 | ······state:·present | 19489 | ······state:·present |
| 19490 | ····when:·syscalls_found·|·length·==·0 | 19490 | ····when:·syscalls_found·|·length·==·0 |
| 19491 | ··when: | 19491 | ··when: |
| 19492 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19493 | ··-·'"audit"·in·ansible_facts.packages' | 19492 | ··-·'"audit"·in·ansible_facts.packages' |
| 19493 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19494 | ··tags: | 19494 | ··tags: |
| 19495 | ··-·CJIS-5.4.1.1 | 19495 | ··-·CJIS-5.4.1.1 |
| 19496 | ··-·DISA-STIG-OL08-00-030480 | 19496 | ··-·DISA-STIG-OL08-00-030480 |
| 19497 | ··-·NIST-800-171-3.1.7 | 19497 | ··-·NIST-800-171-3.1.7 |
| 19498 | ··-·NIST-800-53-AU-12(c) | 19498 | ··-·NIST-800-53-AU-12(c) |
| 19499 | ··-·NIST-800-53-AU-2(d) | 19499 | ··-·NIST-800-53-AU-2(d) |
| 19500 | ··-·NIST-800-53-CM-6(a) | 19500 | ··-·NIST-800-53-CM-6(a) |
| Offset 19631, 16 lines modified | Offset 19631, 16 lines modified | ||
| 19631 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 19631 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 19632 | ········-F·auid!=unset·-F·key=perm_mod | 19632 | ········-F·auid!=unset·-F·key=perm_mod |
| 19633 | ······create:·true | 19633 | ······create:·true |
| 19634 | ······mode:·o-rwx | 19634 | ······mode:·o-rwx |
| 19635 | ······state:·present | 19635 | ······state:·present |
| 19636 | ····when:·syscalls_found·|·length·==·0 | 19636 | ····when:·syscalls_found·|·length·==·0 |
| 19637 | ··when: | 19637 | ··when: |
| 19638 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19639 | ··-·'"audit"·in·ansible_facts.packages' | 19638 | ··-·'"audit"·in·ansible_facts.packages' |
| 19639 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 19640 | ··-·audit_arch·==·"b64" | 19640 | ··-·audit_arch·==·"b64" |
| 19641 | ··tags: | 19641 | ··tags: |
| 19642 | ··-·CJIS-5.4.1.1 | 19642 | ··-·CJIS-5.4.1.1 |
| 19643 | ··-·DISA-STIG-OL08-00-030480 | 19643 | ··-·DISA-STIG-OL08-00-030480 |
| 19644 | ··-·NIST-800-171-3.1.7 | 19644 | ··-·NIST-800-171-3.1.7 |
| 19645 | ··-·NIST-800-53-AU-12(c) | 19645 | ··-·NIST-800-53-AU-12(c) |
| 19646 | ··-·NIST-800-53-AU-2(d) | 19646 | ··-·NIST-800-53-AU-2(d) |
| Offset 19650, 15 lines modified | Offset 19650, 15 lines modified | ||
| 19650 | ··-·low_complexity | 19650 | ··-·low_complexity |
| 19651 | ··-·low_disruption | 19651 | ··-·low_disruption |
| 19652 | ··-·medium_severity | 19652 | ··-·medium_severity |
| Max diff block lines reached; 186878/191528 bytes (97.57%) of diff not shown. | |||
| Offset 320556, 23 lines modified | Offset 320556, 23 lines modified | ||
| 004e42b0:·745f·7265·7374·7269·6374·696f·6e73·5c73··t_restrictions\s | 004e42b0:·745f·7265·7374·7269·6374·696f·6e73·5c73··t_restrictions\s | ||
| 004e42c0:·2a3d·5c73·2a0a·2020·2020·2020·6c69·6e65··*=\s*.······line | 004e42c0:·2a3d·5c73·2a0a·2020·2020·2020·6c69·6e65··*=\s*.······line | ||
| 004e42d0:·3a20·736d·7470·645f·636c·6965·6e74·5f72··:·smtpd_client_r | 004e42d0:·3a20·736d·7470·645f·636c·6965·6e74·5f72··:·smtpd_client_r | ||
| 004e42e0:·6573·7472·6963·7469·6f6e·7320·3d20·7065··estrictions·=·pe | 004e42e0:·6573·7472·6963·7469·6f6e·7320·3d20·7065··estrictions·=·pe | ||
| 004e42f0:·726d·6974·5f6d·796e·6574·776f·726b·732c··rmit_mynetworks, | 004e42f0:·726d·6974·5f6d·796e·6574·776f·726b·732c··rmit_mynetworks, | ||
| 004e4300:·7265·6a65·6374·0a20·2020·2020·2073·7461··reject.······sta | 004e4300:·7265·6a65·6374·0a20·2020·2020·2073·7461··reject.······sta | ||
| 004e4310:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | 004e4310:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | ||
| 004e4320:·656e·3a0a·2020·2d20·616e·7369·626c·655f··en:.··-·ansible_ | |||
| 004e4330:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 004e4340:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 004e4350:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 004e4360:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 004e4370:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 004e4380:·2d20·2722·706f·7374·6669·7822·2069·6e20··-·'"postfix"·in· | |||
| 004e43 | 004e4320:·656e·3a0a·2020·2d20·2722·706f·7374·6669··en:.··-·'"postfi | ||
| 004e4330:·7822·2069·6e20·616e·7369·626c·655f·6661··x"·in·ansible_fa | |||
| 004e4340:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 004e4350:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | |||
| 004e4360:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 004e4370:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 004e4380:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 004e4390:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 004e43a0:·6 | 004e43a0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 004e43b0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | 004e43b0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | ||
| 004e43c0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | 004e43c0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | ||
| 004e43d0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | 004e43d0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | ||
| 004e43e0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | 004e43e0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | ||
| 004e43f0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | 004e43f0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 004e4400:·202d·2070·6f73·7466·6978·5f70·7265·7665···-·postfix_preve | 004e4400:·202d·2070·6f73·7466·6978·5f70·7265·7665···-·postfix_preve | ||
| 004e4410:·6e74·5f75·6e72·6573·7472·6963·7465·645f··nt_unrestricted_ | 004e4410:·6e74·5f75·6e72·6573·7472·6963·7465·645f··nt_unrestricted_ | ||
| Offset 320594, 21 lines modified | Offset 320594, 21 lines modified | ||
| 004e4510:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | 004e4510:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 004e4520:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | 004e4520:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 004e4530:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | 004e4530:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | ||
| 004e4540:·3930·3734·223e·3c70·7265·3e3c·636f·6465··9074"><pre><code | 004e4540:·3930·3734·223e·3c70·7265·3e3c·636f·6465··9074"><pre><code | ||
| 004e4550:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | 004e4550:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 004e4560:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | 004e4560:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 004e4570:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | 004e4570:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 004e4580:·7466·6f72·6d73·0a69·6620· | 004e4580:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | ||
| 004e4590:· | 004e4590:·7175·6965·7420·2d71·2070·6f73·7466·6978··quiet·-q·postfix | ||
| 004e45a0:·616d·703b·2661·6d70·3b20·5b20·2120· | 004e45a0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 004e45b0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 004e45c0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 004e45 | 004e45d0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 004e45e0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 004e45c0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 004e45d0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 004e45e0:·706f·7374·6669·783b·2074·6865·6e0a·0a69··postfix;·then..i | |||
| 004e45f0:·6620·2120·6772·6570·202d·7120·5e73·6d74··f·!·grep·-q·^smt | 004e45f0:·6620·2120·6772·6570·202d·7120·5e73·6d74··f·!·grep·-q·^smt | ||
| 004e4600:·7064·5f63·6c69·656e·745f·7265·7374·7269··pd_client_restri | 004e4600:·7064·5f63·6c69·656e·745f·7265·7374·7269··pd_client_restri | ||
| 004e4610:·6374·696f·6e73·202f·6574·632f·706f·7374··ctions·/etc/post | 004e4610:·6374·696f·6e73·202f·6574·632f·706f·7374··ctions·/etc/post | ||
| 004e4620:·6669·782f·6d61·696e·2e63·663b·2074·6865··fix/main.cf;·the | 004e4620:·6669·782f·6d61·696e·2e63·663b·2074·6865··fix/main.cf;·the | ||
| 004e4630:·6e0a·0965·6368·6f20·2273·6d74·7064·5f63··n..echo·"smtpd_c | 004e4630:·6e0a·0965·6368·6f20·2273·6d74·7064·5f63··n..echo·"smtpd_c | ||
| 004e4640:·6c69·656e·745f·7265·7374·7269·6374·696f··lient_restrictio | 004e4640:·6c69·656e·745f·7265·7374·7269·6374·696f··lient_restrictio | ||
| 004e4650:·6e73·203d·2070·6572·6d69·745f·6d79·6e65··ns·=·permit_myne | 004e4650:·6e73·203d·2070·6572·6d69·745f·6d79·6e65··ns·=·permit_myne |
| Offset 65440, 26 lines modified | Offset 65440, 26 lines modified | ||
| 65440 | ····lineinfile: | 65440 | ····lineinfile: |
| 65441 | ······path:·/etc/postfix/main.cf | 65441 | ······path:·/etc/postfix/main.cf |
| 65442 | ······create:·true | 65442 | ······create:·true |
| 65443 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 65443 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 65444 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 65444 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 65445 | ······state:·present | 65445 | ······state:·present |
| 65446 | ··when: | 65446 | ··when: |
| 65447 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 65448 | ··-·'"postfix"·in·ansible_facts.packages' | 65447 | ··-·'"postfix"·in·ansible_facts.packages' |
| 65448 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 65449 | ··tags: | 65449 | ··tags: |
| 65450 | ··-·low_complexity | 65450 | ··-·low_complexity |
| 65451 | ··-·low_disruption | 65451 | ··-·low_disruption |
| 65452 | ··-·medium_severity | 65452 | ··-·medium_severity |
| 65453 | ··-·no_reboot_needed | 65453 | ··-·no_reboot_needed |
| 65454 | ··-·postfix_prevent_unrestricted_relay | 65454 | ··-·postfix_prevent_unrestricted_relay |
| 65455 | ··-·restrict_strategy | 65455 | ··-·restrict_strategy |
| 65456 | Remediation_Shell_script_⇲ | 65456 | Remediation_Shell_script_⇲ |
| 65457 | #·Remediation·is·applicable·only·in·certain·platforms | 65457 | #·Remediation·is·applicable·only·in·certain·platforms |
| 65458 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 65458 | if·rpm·--quiet·-q·postfix·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 65459 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 65459 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 65460 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 65460 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 65461 | else | 65461 | else |
| 65462 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 65462 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 65463 | fi | 65463 | fi |
| Offset 320574, 23 lines modified | Offset 320574, 23 lines modified | ||
| 004e43d0:·7374·7269·6374·696f·6e73·5c73·2a3d·5c73··strictions\s*=\s | 004e43d0:·7374·7269·6374·696f·6e73·5c73·2a3d·5c73··strictions\s*=\s | ||
| 004e43e0:·2a0a·2020·2020·2020·6c69·6e65·3a20·736d··*.······line:·sm | 004e43e0:·2a0a·2020·2020·2020·6c69·6e65·3a20·736d··*.······line:·sm | ||
| 004e43f0:·7470·645f·636c·6965·6e74·5f72·6573·7472··tpd_client_restr | 004e43f0:·7470·645f·636c·6965·6e74·5f72·6573·7472··tpd_client_restr | ||
| 004e4400:·6963·7469·6f6e·7320·3d20·7065·726d·6974··ictions·=·permit | 004e4400:·6963·7469·6f6e·7320·3d20·7065·726d·6974··ictions·=·permit | ||
| 004e4410:·5f6d·796e·6574·776f·726b·732c·7265·6a65··_mynetworks,reje | 004e4410:·5f6d·796e·6574·776f·726b·732c·7265·6a65··_mynetworks,reje | ||
| 004e4420:·6374·0a20·2020·2020·2073·7461·7465·3a20··ct.······state:· | 004e4420:·6374·0a20·2020·2020·2073·7461·7465·3a20··ct.······state:· | ||
| 004e4430:·7072·6573·656e·740a·2020·7768·656e·3a0a··present.··when:. | 004e4430:·7072·6573·656e·740a·2020·7768·656e·3a0a··present.··when:. | ||
| 004e4440:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 004e4450:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 004e4460:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 004e4470:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 004e4480:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 004e4490:·6e74·6169·6e65·7222·5d0a·2020·2d20·2722··ntainer"].··-·'" | |||
| 004e44a0:·706f·7374·6669·7822·2069·6e20·616e·7369··postfix"·in·ansi | |||
| 004e44 | 004e4440:·2020·2d20·2722·706f·7374·6669·7822·2069····-·'"postfix"·i | ||
| 004e4450:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 004e4460:·7061·636b·6167·6573·270a·2020·2d20·616e··packages'.··-·an | |||
| 004e4470:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 004e4480:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 004e4490:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 004e44a0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 004e44b0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 004e44c0:· | 004e44c0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 004e44d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | 004e44d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | ||
| 004e44e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | 004e44e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | ||
| 004e44f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | 004e44f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | ||
| 004e4500:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | 004e4500:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | ||
| 004e4510:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | 004e4510:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | ||
| 004e4520:·6f73·7466·6978·5f70·7265·7665·6e74·5f75··ostfix_prevent_u | 004e4520:·6f73·7466·6978·5f70·7265·7665·6e74·5f75··ostfix_prevent_u | ||
| 004e4530:·6e72·6573·7472·6963·7465·645f·7265·6c61··nrestricted_rela | 004e4530:·6e72·6573·7472·6963·7465·645f·7265·6c61··nrestricted_rela | ||
| Offset 320612, 21 lines modified | Offset 320612, 21 lines modified | ||
| 004e4630:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | 004e4630:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 004e4640:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | 004e4640:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 004e4650:·7365·2220·6964·3d22·6964·6d34·3930·3734··se"·id="idm49074 | 004e4650:·7365·2220·6964·3d22·6964·6d34·3930·3734··se"·id="idm49074 | ||
| 004e4660:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | 004e4660:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 004e4670:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | 004e4670:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 004e4680:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | 004e4680:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 004e4690:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | 004e4690:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 004e46a0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 004e46 | 004e46a0:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | ||
| 004e46b0:·7420·2d71·2070·6f73·7466·6978·2026·616d··t·-q·postfix·&am | |||
| 004e46c0:·2661·6d70·3b20·5b20·2120·2d66·202f· | 004e46c0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 004e46d0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 004e46e0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 004e46 | 004e46f0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 004e46e0:·5d20·2661·6d70·3b26·616d·703b·2072·706d··]·&&·rpm | |||
| 004e46f0:·202d·2d71·7569·6574·202d·7120·706f·7374···--quiet·-q·post | |||
| 004e4700:· | 004e4700:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | ||
| 004e4710:·6772·6570·202d·7120·5e73·6d74·7064·5f63··grep·-q·^smtpd_c | 004e4710:·6772·6570·202d·7120·5e73·6d74·7064·5f63··grep·-q·^smtpd_c | ||
| 004e4720:·6c69·656e·745f·7265·7374·7269·6374·696f··lient_restrictio | 004e4720:·6c69·656e·745f·7265·7374·7269·6374·696f··lient_restrictio | ||
| 004e4730:·6e73·202f·6574·632f·706f·7374·6669·782f··ns·/etc/postfix/ | 004e4730:·6e73·202f·6574·632f·706f·7374·6669·782f··ns·/etc/postfix/ | ||
| 004e4740:·6d61·696e·2e63·663b·2074·6865·6e0a·0965··main.cf;·then..e | 004e4740:·6d61·696e·2e63·663b·2074·6865·6e0a·0965··main.cf;·then..e | ||
| 004e4750:·6368·6f20·2273·6d74·7064·5f63·6c69·656e··cho·"smtpd_clien | 004e4750:·6368·6f20·2273·6d74·7064·5f63·6c69·656e··cho·"smtpd_clien | ||
| 004e4760:·745f·7265·7374·7269·6374·696f·6e73·203d··t_restrictions·= | 004e4760:·745f·7265·7374·7269·6374·696f·6e73·203d··t_restrictions·= | ||
| 004e4770:·2070·6572·6d69·745f·6d79·6e65·7477·6f72···permit_mynetwor | 004e4770:·2070·6572·6d69·745f·6d79·6e65·7477·6f72···permit_mynetwor |
| Offset 65444, 26 lines modified | Offset 65444, 26 lines modified | ||
| 65444 | ····lineinfile: | 65444 | ····lineinfile: |
| 65445 | ······path:·/etc/postfix/main.cf | 65445 | ······path:·/etc/postfix/main.cf |
| 65446 | ······create:·true | 65446 | ······create:·true |
| 65447 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 65447 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 65448 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 65448 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 65449 | ······state:·present | 65449 | ······state:·present |
| 65450 | ··when: | 65450 | ··when: |
| 65451 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 65452 | ··-·'"postfix"·in·ansible_facts.packages' | 65451 | ··-·'"postfix"·in·ansible_facts.packages' |
| 65452 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 65453 | ··tags: | 65453 | ··tags: |
| 65454 | ··-·low_complexity | 65454 | ··-·low_complexity |
| 65455 | ··-·low_disruption | 65455 | ··-·low_disruption |
| 65456 | ··-·medium_severity | 65456 | ··-·medium_severity |
| 65457 | ··-·no_reboot_needed | 65457 | ··-·no_reboot_needed |
| 65458 | ··-·postfix_prevent_unrestricted_relay | 65458 | ··-·postfix_prevent_unrestricted_relay |
| 65459 | ··-·restrict_strategy | 65459 | ··-·restrict_strategy |
| 65460 | Remediation_Shell_script_⇲ | 65460 | Remediation_Shell_script_⇲ |
| 65461 | #·Remediation·is·applicable·only·in·certain·platforms | 65461 | #·Remediation·is·applicable·only·in·certain·platforms |
| 65462 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·] | 65462 | if·rpm·--quiet·-q·postfix·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 65463 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 65463 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 65464 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 65464 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 65465 | else | 65465 | else |
| 65466 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 65466 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 65467 | fi | 65467 | fi |
| Offset 176706, 21 lines modified | Offset 176706, 21 lines modified | ||
| 002b2410:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | 002b2410:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | ||
| 002b2420:·742f·6772·7562·2e63·6667·0a20·2073·7461··t/grub.cfg.··sta | 002b2420:·742f·6772·7562·2e63·6667·0a20·2073·7461··t/grub.cfg.··sta | ||
| 002b2430:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 002b2430:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 002b2440:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | 002b2440:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | ||
| 002b2450:·742f·6772·7562·2e63·6667·0a20·2072·6567··t/grub.cfg.··reg | 002b2450:·742f·6772·7562·2e63·6667·0a20·2072·6567··t/grub.cfg.··reg | ||
| 002b2460:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 002b2460:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 002b2470:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 002b2470:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 002b2480:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 002b2490:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 002b24a0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 002b24b0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 002b24 | 002b2480:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 002b24 | 002b2490:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 002b24 | 002b24a0:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 002b24b0:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 002b24c0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002b24d0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002b24e0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002b24f0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 002b24f0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 002b2500:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 002b2500:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 002b2510:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 002b2510:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 002b2520:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 002b2520:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 002b2530:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 002b2530:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 002b2540:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | 002b2540:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 002b2550:·2020·2d20·4343·452d·3833·3433·302d·390a····-·CCE-83430-9. | 002b2550:·2020·2d20·4343·452d·3833·3433·302d·390a····-·CCE-83430-9. | ||
| Offset 176744, 21 lines modified | Offset 176744, 21 lines modified | ||
| 002b2670:·3020·6f6e·202f·626f·6f74·2f65·6669·2f45··0·on·/boot/efi/E | 002b2670:·3020·6f6e·202f·626f·6f74·2f65·6669·2f45··0·on·/boot/efi/E | ||
| 002b2680:·4649·2f72·6564·6861·742f·6772·7562·2e63··FI/redhat/grub.c | 002b2680:·4649·2f72·6564·6861·742f·6772·7562·2e63··FI/redhat/grub.c | ||
| 002b2690:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 002b2690:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 002b26a0:·6174·683a·202f·626f·6f74·2f65·6669·2f45··ath:·/boot/efi/E | 002b26a0:·6174·683a·202f·626f·6f74·2f65·6669·2f45··ath:·/boot/efi/E | ||
| 002b26b0:·4649·2f72·6564·6861·742f·6772·7562·2e63··FI/redhat/grub.c | 002b26b0:·4649·2f72·6564·6861·742f·6772·7562·2e63··FI/redhat/grub.c | ||
| 002b26c0:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | 002b26c0:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | ||
| 002b26d0:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 002b26d0:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 002b26e0:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 002b26f0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002b2700:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002b2710:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002b2 | 002b26e0:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | ||
| 002b2 | 002b26f0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | ||
| 002b27 | 002b2700:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | ||
| 002b2710:·626f·6f74·2f65·6669·2220·696e·2061·6e73··boot/efi"·in·ans | |||
| 002b2720:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002b2730:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002b2740:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002b2750:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 002b2750:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 002b2760:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 002b2760:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 002b2770:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 002b2770:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 002b2780:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 002b2780:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 002b2790:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 002b2790:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 002b27a0:·696e·6572·225d·0a20·202d·2066·696c·655f··iner"].··-·file_ | 002b27a0:·696e·6572·225d·0a20·202d·2066·696c·655f··iner"].··-·file_ | ||
| 002b27b0:·6578·6973·7473·2e73·7461·7420·6973·2064··exists.stat·is·d | 002b27b0:·6578·6973·7473·2e73·7461·7420·6973·2064··exists.stat·is·d | ||
| Offset 176810, 19 lines modified | Offset 176810, 19 lines modified | ||
| 002b2a90:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | 002b2a90:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 002b2aa0:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | 002b2aa0:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | ||
| 002b2ab0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | 002b2ab0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 002b2ac0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | 002b2ac0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 002b2ad0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | 002b2ad0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 002b2ae0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | 002b2ae0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 002b2af0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | 002b2af0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 002b2b00:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 002b2b00:·6d73·0a69·6620·5b20·2d66·202f·7379·732f··ms.if·[·-f·/sys/ | |||
| 002b2b10:·6669·726d·7761·7265·2f65·6669·205d·2026··firmware/efi·]·& | |||
| 002b2b20:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 002b2b | 002b2b10:·7420·2d71·2067·7275·6232·2d63·6f6d·6d6f··t·-q·grub2-commo | ||
| 002b2b20:·6e20·2661·6d70·3b26·616d·703b·205b·202d··n·&&·[·- | |||
| 002b2b30:·6620·2f73·7973·2f66·6972·6d77·6172·652f··f·/sys/firmware/ | |||
| 002b2b40:·6 | 002b2b40:·6566·6920·5d20·2661·6d70·3b26·616d·703b··efi·]·&& | ||
| 002b2b50:·207b·205b·2021·202d·6620·2f2e·646f·636b···{·[·!·-f·/.dock | 002b2b50:·207b·205b·2021·202d·6620·2f2e·646f·636b···{·[·!·-f·/.dock | ||
| 002b2b60:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | 002b2b60:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 002b2b70:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | 002b2b70:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 002b2b80:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | 002b2b80:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 002b2b90:·7d3b·2074·6865·6e0a·0a63·6867·7270·2030··};·then..chgrp·0 | 002b2b90:·7d3b·2074·6865·6e0a·0a63·6867·7270·2030··};·then..chgrp·0 | ||
| 002b2ba0:·202f·626f·6f74·2f65·6669·2f45·4649·2f72···/boot/efi/EFI/r | 002b2ba0:·202f·626f·6f74·2f65·6669·2f45·4649·2f72···/boot/efi/EFI/r | ||
| 002b2bb0:·6564·6861·742f·6772·7562·2e63·6667·0a0a··edhat/grub.cfg.. | 002b2bb0:·6564·6861·742f·6772·7562·2e63·6667·0a0a··edhat/grub.cfg.. | ||
| Offset 177252, 22 lines modified | Offset 177252, 22 lines modified | ||
| 002b4630:·6520·2f62·6f6f·742f·6566·692f·4546·492f··e·/boot/efi/EFI/ | 002b4630:·6520·2f62·6f6f·742f·6566·692f·4546·492f··e·/boot/efi/EFI/ | ||
| 002b4640:·7265·6468·6174·2f75·7365·722e·6366·670a··redhat/user.cfg. | 002b4640:·7265·6468·6174·2f75·7365·722e·6366·670a··redhat/user.cfg. | ||
| 002b4650:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 002b4650:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 002b4660:·3a20·2f62·6f6f·742f·6566·692f·4546·492f··:·/boot/efi/EFI/ | 002b4660:·3a20·2f62·6f6f·742f·6566·692f·4546·492f··:·/boot/efi/EFI/ | ||
| 002b4670:·7265·6468·6174·2f75·7365·722e·6366·670a··redhat/user.cfg. | 002b4670:·7265·6468·6174·2f75·7365·722e·6366·670a··redhat/user.cfg. | ||
| 002b4680:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 002b4680:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 002b4690:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 002b4690:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 002b46a0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 002b46b0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002b46c0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002b46d0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002b46 | 002b46a0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 002b46 | 002b46b0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 002b4 | 002b46c0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 002b46d0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002b46e0:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 002b46f0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 002b4700:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 002b4710:·7 | 002b4710:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 002b4720:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 002b4720:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 002b4730:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 002b4730:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 002b4740:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 002b4740:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 002b4750:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 002b4750:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 002b4760:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 002b4760:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 002b4770:·6167·733a·0a20·202d·2043·4345·2d38·3630··ags:.··-·CCE-860 | 002b4770:·6167·733a·0a20·202d·2043·4345·2d38·3630··ags:.··-·CCE-860 | ||
| 002b4780:·3131·2d34·0a20·202d·2043·4a49·532d·352e··11-4.··-·CJIS-5. | 002b4780:·3131·2d34·0a20·202d·2043·4a49·532d·352e··11-4.··-·CJIS-5. | ||
| Offset 177290, 21 lines modified | Offset 177290, 21 lines modified | ||
| 002b4890:·6e65·7220·3020·6f6e·202f·626f·6f74·2f65··ner·0·on·/boot/e | 002b4890:·6e65·7220·3020·6f6e·202f·626f·6f74·2f65··ner·0·on·/boot/e | ||
| 002b48a0:·6669·2f45·4649·2f72·6564·6861·742f·7573··fi/EFI/redhat/us | 002b48a0:·6669·2f45·4649·2f72·6564·6861·742f·7573··fi/EFI/redhat/us | ||
| 002b48b0:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | 002b48b0:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | ||
| 002b48c0:·2020·2070·6174·683a·202f·626f·6f74·2f65·····path:·/boot/e | 002b48c0:·2020·2070·6174·683a·202f·626f·6f74·2f65·····path:·/boot/e | ||
| 002b48d0:·6669·2f45·4649·2f72·6564·6861·742f·7573··fi/EFI/redhat/us | 002b48d0:·6669·2f45·4649·2f72·6564·6861·742f·7573··fi/EFI/redhat/us | ||
| 002b48e0:·6572·2e63·6667·0a20·2020·2067·726f·7570··er.cfg.····group | 002b48e0:·6572·2e63·6667·0a20·2020·2067·726f·7570··er.cfg.····group | ||
| 002b48f0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | 002b48f0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | ||
| 002b4900:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 002b4910:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002b4920:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002b4930:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002b49 | 002b4900:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 002b49 | 002b4910:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 002b49 | 002b4920:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | ||
| 002b4930:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 002b4940:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 002b4950:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 002b4960:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 002b4970:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 002b4970:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 002b4980:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 002b4980:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 002b4990:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 002b4990:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 002b49a0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 002b49a0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 002b49b0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 002b49b0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 002b49c0:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 002b49c0:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 002b49d0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 002b49d0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Max diff block lines reached; 24486/34176 bytes (71.65%) of diff not shown. | |||
| Offset 37082, 16 lines modified | Offset 37082, 16 lines modified | ||
| 37082 | ··-·no_reboot_needed | 37082 | ··-·no_reboot_needed |
| 37083 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 37083 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 37084 | ··stat: | 37084 | ··stat: |
| 37085 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37085 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 37086 | ··register:·file_exists | 37086 | ··register:·file_exists |
| 37087 | ··when: | 37087 | ··when: |
| 37088 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37089 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37088 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37089 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37090 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37090 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37091 | ··tags: | 37091 | ··tags: |
| 37092 | ··-·CCE-83430-9 | 37092 | ··-·CCE-83430-9 |
| 37093 | ··-·CJIS-5.5.2.2 | 37093 | ··-·CJIS-5.5.2.2 |
| 37094 | ··-·NIST-800-171-3.4.5 | 37094 | ··-·NIST-800-171-3.4.5 |
| 37095 | ··-·NIST-800-53-AC-6(1) | 37095 | ··-·NIST-800-53-AC-6(1) |
| 37096 | ··-·NIST-800-53-CM-6(a) | 37096 | ··-·NIST-800-53-CM-6(a) |
| Offset 37104, 16 lines modified | Offset 37104, 16 lines modified | ||
| 37104 | ··-·no_reboot_needed | 37104 | ··-·no_reboot_needed |
| 37105 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 37105 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 37106 | ··file: | 37106 | ··file: |
| 37107 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37107 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 37108 | ····group:·'0' | 37108 | ····group:·'0' |
| 37109 | ··when: | 37109 | ··when: |
| 37110 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37111 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37110 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37111 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37112 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37112 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37113 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 37113 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 37114 | ··tags: | 37114 | ··tags: |
| 37115 | ··-·CCE-83430-9 | 37115 | ··-·CCE-83430-9 |
| 37116 | ··-·CJIS-5.5.2.2 | 37116 | ··-·CJIS-5.5.2.2 |
| 37117 | ··-·NIST-800-171-3.4.5 | 37117 | ··-·NIST-800-171-3.4.5 |
| 37118 | ··-·NIST-800-53-AC-6(1) | 37118 | ··-·NIST-800-53-AC-6(1) |
| Offset 37126, 15 lines modified | Offset 37126, 15 lines modified | ||
| 37126 | ··-·medium_severity | 37126 | ··-·medium_severity |
| 37127 | ··-·no_reboot_needed | 37127 | ··-·no_reboot_needed |
| 37128 | Remediation_Shell_script_⇲ | 37128 | Remediation_Shell_script_⇲ |
| 37129 | Complexity:·low | 37129 | Complexity:·low |
| 37130 | Disruption:·low | 37130 | Disruption:·low |
| 37131 | Strategy:···configure | 37131 | Strategy:···configure |
| 37132 | #·Remediation·is·applicable·only·in·certain·platforms | 37132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 37133 | if· | 37133 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 37134 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 37134 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 37135 | else | 37135 | else |
| 37136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 37136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 37137 | fi | 37137 | fi |
| 37138 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** | 37138 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** |
| Offset 37167, 16 lines modified | Offset 37167, 16 lines modified | ||
| 37167 | ··-·no_reboot_needed | 37167 | ··-·no_reboot_needed |
| 37168 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 37168 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 37169 | ··stat: | 37169 | ··stat: |
| 37170 | ····path:·/boot/efi/EFI/redhat/user.cfg | 37170 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 37171 | ··register:·file_exists | 37171 | ··register:·file_exists |
| 37172 | ··when: | 37172 | ··when: |
| 37173 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37174 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37173 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37174 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37175 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37175 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37176 | ··tags: | 37176 | ··tags: |
| 37177 | ··-·CCE-86011-4 | 37177 | ··-·CCE-86011-4 |
| 37178 | ··-·CJIS-5.5.2.2 | 37178 | ··-·CJIS-5.5.2.2 |
| 37179 | ··-·NIST-800-171-3.4.5 | 37179 | ··-·NIST-800-171-3.4.5 |
| 37180 | ··-·NIST-800-53-AC-6(1) | 37180 | ··-·NIST-800-53-AC-6(1) |
| 37181 | ··-·NIST-800-53-CM-6(a) | 37181 | ··-·NIST-800-53-CM-6(a) |
| Offset 37189, 16 lines modified | Offset 37189, 16 lines modified | ||
| 37189 | ··-·no_reboot_needed | 37189 | ··-·no_reboot_needed |
| 37190 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 37190 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 37191 | ··file: | 37191 | ··file: |
| 37192 | ····path:·/boot/efi/EFI/redhat/user.cfg | 37192 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 37193 | ····group:·'0' | 37193 | ····group:·'0' |
| 37194 | ··when: | 37194 | ··when: |
| 37195 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37196 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37195 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37196 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37197 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37197 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37198 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 37198 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 37199 | ··tags: | 37199 | ··tags: |
| 37200 | ··-·CCE-86011-4 | 37200 | ··-·CCE-86011-4 |
| 37201 | ··-·CJIS-5.5.2.2 | 37201 | ··-·CJIS-5.5.2.2 |
| 37202 | ··-·NIST-800-171-3.4.5 | 37202 | ··-·NIST-800-171-3.4.5 |
| 37203 | ··-·NIST-800-53-AC-6(1) | 37203 | ··-·NIST-800-53-AC-6(1) |
| Offset 37211, 15 lines modified | Offset 37211, 15 lines modified | ||
| 37211 | ··-·medium_severity | 37211 | ··-·medium_severity |
| 37212 | ··-·no_reboot_needed | 37212 | ··-·no_reboot_needed |
| 37213 | Remediation_Shell_script_⇲ | 37213 | Remediation_Shell_script_⇲ |
| 37214 | Complexity:·low | 37214 | Complexity:·low |
| 37215 | Disruption:·low | 37215 | Disruption:·low |
| 37216 | Strategy:···configure | 37216 | Strategy:···configure |
| 37217 | #·Remediation·is·applicable·only·in·certain·platforms | 37217 | #·Remediation·is·applicable·only·in·certain·platforms |
| 37218 | if· | 37218 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 37219 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 37219 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 37220 | else | 37220 | else |
| 37221 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 37221 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 37222 | fi | 37222 | fi |
| 37223 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** | 37223 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** |
| Offset 37252, 16 lines modified | Offset 37252, 16 lines modified | ||
| 37252 | ··-·no_reboot_needed | 37252 | ··-·no_reboot_needed |
| 37253 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 37253 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 37254 | ··stat: | 37254 | ··stat: |
| 37255 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37255 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 37256 | ··register:·file_exists | 37256 | ··register:·file_exists |
| 37257 | ··when: | 37257 | ··when: |
| 37258 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37259 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37258 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37259 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37260 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37260 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37261 | ··tags: | 37261 | ··tags: |
| 37262 | ··-·CCE-83429-1 | 37262 | ··-·CCE-83429-1 |
| 37263 | ··-·CJIS-5.5.2.2 | 37263 | ··-·CJIS-5.5.2.2 |
| 37264 | ··-·NIST-800-171-3.4.5 | 37264 | ··-·NIST-800-171-3.4.5 |
| 37265 | ··-·NIST-800-53-AC-6(1) | 37265 | ··-·NIST-800-53-AC-6(1) |
| 37266 | ··-·NIST-800-53-CM-6(a) | 37266 | ··-·NIST-800-53-CM-6(a) |
| Offset 37274, 16 lines modified | Offset 37274, 16 lines modified | ||
| 37274 | ··-·no_reboot_needed | 37274 | ··-·no_reboot_needed |
| 37275 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 37275 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 37276 | ··file: | 37276 | ··file: |
| 37277 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37277 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 6761/11242 bytes (60.14%) of diff not shown. | |||
| Offset 52926, 21 lines modified | Offset 52926, 21 lines modified | ||
| 000cebd0:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | 000cebd0:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | ||
| 000cebe0:·6861·742f·6772·7562·2e63·6667·0a20·2073··hat/grub.cfg.··s | 000cebe0:·6861·742f·6772·7562·2e63·6667·0a20·2073··hat/grub.cfg.··s | ||
| 000cebf0:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 000cebf0:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 000cec00:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | 000cec00:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | ||
| 000cec10:·6861·742f·6772·7562·2e63·6667·0a20·2072··hat/grub.cfg.··r | 000cec10:·6861·742f·6772·7562·2e63·6667·0a20·2072··hat/grub.cfg.··r | ||
| 000cec20:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 000cec20:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 000cec30:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 000cec30:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 000cec40:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 000cec50:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 000cec60:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 000cec70:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 000cec | 000cec40:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | ||
| 000cec | 000cec50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 000cec | 000cec60:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | ||
| 000cec70:·2722·2f62·6f6f·742f·6566·6922·2069·6e20··'"/boot/efi"·in· | |||
| 000cec80:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 000cec90:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 000ceca0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 000cecb0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | 000cecb0:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 000cecc0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | 000cecc0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | ||
| 000cecd0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | 000cecd0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | ||
| 000cece0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | 000cece0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | ||
| 000cecf0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | 000cecf0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | ||
| 000ced00:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | 000ced00:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | ||
| 000ced10:·3a0a·2020·2d20·4343·452d·3833·3433·302d··:.··-·CCE-83430- | 000ced10:·3a0a·2020·2d20·4343·452d·3833·3433·302d··:.··-·CCE-83430- | ||
| Offset 52964, 21 lines modified | Offset 52964, 21 lines modified | ||
| 000cee30:·7220·3020·6f6e·202f·626f·6f74·2f65·6669··r·0·on·/boot/efi | 000cee30:·7220·3020·6f6e·202f·626f·6f74·2f65·6669··r·0·on·/boot/efi | ||
| 000cee40:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | 000cee40:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | ||
| 000cee50:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 000cee50:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 000cee60:·2070·6174·683a·202f·626f·6f74·2f65·6669···path:·/boot/efi | 000cee60:·2070·6174·683a·202f·626f·6f74·2f65·6669···path:·/boot/efi | ||
| 000cee70:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | 000cee70:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | ||
| 000cee80:·2e63·6667·0a20·2020·2067·726f·7570·3a20··.cfg.····group:· | 000cee80:·2e63·6667·0a20·2020·2067·726f·7570·3a20··.cfg.····group:· | ||
| 000cee90:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | 000cee90:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | ||
| 000ceea0:·2722·2f62·6f6f·742f·6566·6922·2069·6e20··'"/boot/efi"·in· | |||
| 000ceeb0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 000ceec0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 000ceed0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 000cee | 000ceea0:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | ||
| 000cee | 000ceeb0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 000ce | 000ceec0:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | ||
| 000ceed0:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 000ceee0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 000ceef0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 000cef00:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 000cef10:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 000cef10:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 000cef20:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 000cef20:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 000cef30:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | 000cef30:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 000cef40:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | 000cef40:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 000cef50:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | 000cef50:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 000cef60:·7461·696e·6572·225d·0a20·202d·2066·696c··tainer"].··-·fil | 000cef60:·7461·696e·6572·225d·0a20·202d·2066·696c··tainer"].··-·fil | ||
| 000cef70:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | 000cef70:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | ||
| Offset 53030, 19 lines modified | Offset 53030, 19 lines modified | ||
| 000cf250:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | 000cf250:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 000cf260:·3c2f·7468·3e3c·7464·3e63·6f6e·6669·6775··</th><td>configu | 000cf260:·3c2f·7468·3e3c·7464·3e63·6f6e·6669·6775··</th><td>configu | ||
| 000cf270:·7265·3c2f·7464·3e3c·2f74·723e·3c2f·7461··re</td></tr></ta | 000cf270:·7265·3c2f·7464·3e3c·2f74·723e·3c2f·7461··re</td></tr></ta | ||
| 000cf280:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | 000cf280:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 000cf290:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | 000cf290:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 000cf2a0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | 000cf2a0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 000cf2b0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | 000cf2b0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 000cf2c0:·6f72·6d73·0a69·6620· | 000cf2c0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | ||
| 000cf2d0:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 000cf2e0:·2026·616d·703b·2661·6d70·3b20·7270·6d20···&&·rpm· | |||
| 000cf2 | 000cf2d0:·6965·7420·2d71·2067·7275·6232·2d63·6f6d··iet·-q·grub2-com | ||
| 000cf | 000cf2e0:·6d6f·6e20·2661·6d70·3b26·616d·703b·205b··mon·&&·[ | ||
| 000cf2f0:·202d·6620·2f73·7973·2f66·6972·6d77·6172···-f·/sys/firmwar | |||
| 000cf300:·652f·6566·6920·5d20·2661·6d70·3b26·616d··e/efi·]·&&am | |||
| 000cf310:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | 000cf310:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | ||
| 000cf320:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | 000cf320:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | ||
| 000cf330:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | 000cf330:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | ||
| 000cf340:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | 000cf340:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | ||
| 000cf350:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | 000cf350:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | ||
| 000cf360:·2030·202f·626f·6f74·2f65·6669·2f45·4649···0·/boot/efi/EFI | 000cf360:·2030·202f·626f·6f74·2f65·6669·2f45·4649···0·/boot/efi/EFI | ||
| 000cf370:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | 000cf370:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | ||
| Offset 53472, 22 lines modified | Offset 53472, 22 lines modified | ||
| 000d0df0:·6e63·6520·2f62·6f6f·742f·6566·692f·4546··nce·/boot/efi/EF | 000d0df0:·6e63·6520·2f62·6f6f·742f·6566·692f·4546··nce·/boot/efi/EF | ||
| 000d0e00:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | 000d0e00:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | ||
| 000d0e10:·670a·2020·7374·6174·3a0a·2020·2020·7061··g.··stat:.····pa | 000d0e10:·670a·2020·7374·6174·3a0a·2020·2020·7061··g.··stat:.····pa | ||
| 000d0e20:·7468·3a20·2f62·6f6f·742f·6566·692f·4546··th:·/boot/efi/EF | 000d0e20:·7468·3a20·2f62·6f6f·742f·6566·692f·4546··th:·/boot/efi/EF | ||
| 000d0e30:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | 000d0e30:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | ||
| 000d0e40:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 000d0e40:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 000d0e50:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 000d0e50:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 000d0e60:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | |||
| 000d0e60:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000d0e70:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 000d0e80:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 000d0e90:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 000d0ea0:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 000d0e | 000d0e70:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | ||
| 000d0e | 000d0e80:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 000d0e90:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000d0ea0:·2220·696e·2061·6e73·6962·6c65·5f6d·6f75··"·in·ansible_mou | |||
| 000d0eb0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000d0ec0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000d0ed0:·6 | 000d0ed0:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 000d0ee0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 000d0ee0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 000d0ef0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 000d0ef0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 000d0f00:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 000d0f00:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 000d0f10:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 000d0f10:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 000d0f20:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 000d0f20:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 000d0f30:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 000d0f30:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 000d0f40:·3630·3131·2d34·0a20·202d·2043·4a49·532d··6011-4.··-·CJIS- | 000d0f40:·3630·3131·2d34·0a20·202d·2043·4a49·532d··6011-4.··-·CJIS- | ||
| Offset 53510, 22 lines modified | Offset 53510, 22 lines modified | ||
| 000d1050:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 000d1050:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 000d1060:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | 000d1060:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | ||
| 000d1070:·7573·6572·2e63·6667·0a20·2066·696c·653a··user.cfg.··file: | 000d1070:·7573·6572·2e63·6667·0a20·2066·696c·653a··user.cfg.··file: | ||
| 000d1080:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000d1080:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000d1090:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | 000d1090:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | ||
| 000d10a0:·7573·6572·2e63·6667·0a20·2020·2067·726f··user.cfg.····gro | 000d10a0:·7573·6572·2e63·6667·0a20·2020·2067·726f··user.cfg.····gro | ||
| 000d10b0:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | 000d10b0:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | ||
| 000d10c0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000d10d0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000d10e0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000d10f0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000d1 | 000d10c0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 000d1 | 000d10d0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 000d1 | 000d10e0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 000d10f0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000d1100:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000d1110:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000d1120:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000d1130:·7 | 000d1130:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000d1140:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000d1140:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000d1150:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000d1150:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000d1160:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000d1160:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000d1170:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000d1170:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000d1180:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | 000d1180:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | ||
| 000d1190:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | 000d1190:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | ||
| Max diff block lines reached; 24626/34416 bytes (71.55%) of diff not shown. | |||
| Offset 5376, 16 lines modified | Offset 5376, 16 lines modified | ||
| 5376 | ··-·no_reboot_needed | 5376 | ··-·no_reboot_needed |
| 5377 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 5377 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 5378 | ··stat: | 5378 | ··stat: |
| 5379 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5379 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 5380 | ··register:·file_exists | 5380 | ··register:·file_exists |
| 5381 | ··when: | 5381 | ··when: |
| 5382 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5383 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5382 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5383 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5384 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5384 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5385 | ··tags: | 5385 | ··tags: |
| 5386 | ··-·CCE-83430-9 | 5386 | ··-·CCE-83430-9 |
| 5387 | ··-·CJIS-5.5.2.2 | 5387 | ··-·CJIS-5.5.2.2 |
| 5388 | ··-·NIST-800-171-3.4.5 | 5388 | ··-·NIST-800-171-3.4.5 |
| 5389 | ··-·NIST-800-53-AC-6(1) | 5389 | ··-·NIST-800-53-AC-6(1) |
| 5390 | ··-·NIST-800-53-CM-6(a) | 5390 | ··-·NIST-800-53-CM-6(a) |
| Offset 5398, 16 lines modified | Offset 5398, 16 lines modified | ||
| 5398 | ··-·no_reboot_needed | 5398 | ··-·no_reboot_needed |
| 5399 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 5399 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 5400 | ··file: | 5400 | ··file: |
| 5401 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5401 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 5402 | ····group:·'0' | 5402 | ····group:·'0' |
| 5403 | ··when: | 5403 | ··when: |
| 5404 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5405 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5404 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5405 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5406 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5406 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5407 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5407 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5408 | ··tags: | 5408 | ··tags: |
| 5409 | ··-·CCE-83430-9 | 5409 | ··-·CCE-83430-9 |
| 5410 | ··-·CJIS-5.5.2.2 | 5410 | ··-·CJIS-5.5.2.2 |
| 5411 | ··-·NIST-800-171-3.4.5 | 5411 | ··-·NIST-800-171-3.4.5 |
| 5412 | ··-·NIST-800-53-AC-6(1) | 5412 | ··-·NIST-800-53-AC-6(1) |
| Offset 5420, 15 lines modified | Offset 5420, 15 lines modified | ||
| 5420 | ··-·medium_severity | 5420 | ··-·medium_severity |
| 5421 | ··-·no_reboot_needed | 5421 | ··-·no_reboot_needed |
| 5422 | Remediation_Shell_script_⇲ | 5422 | Remediation_Shell_script_⇲ |
| 5423 | Complexity:·low | 5423 | Complexity:·low |
| 5424 | Disruption:·low | 5424 | Disruption:·low |
| 5425 | Strategy:···configure | 5425 | Strategy:···configure |
| 5426 | #·Remediation·is·applicable·only·in·certain·platforms | 5426 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5427 | if· | 5427 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 5428 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 5428 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 5429 | else | 5429 | else |
| 5430 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5430 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5431 | fi | 5431 | fi |
| 5432 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** | 5432 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** |
| Offset 5461, 16 lines modified | Offset 5461, 16 lines modified | ||
| 5461 | ··-·no_reboot_needed | 5461 | ··-·no_reboot_needed |
| 5462 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 5462 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 5463 | ··stat: | 5463 | ··stat: |
| 5464 | ····path:·/boot/efi/EFI/redhat/user.cfg | 5464 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 5465 | ··register:·file_exists | 5465 | ··register:·file_exists |
| 5466 | ··when: | 5466 | ··when: |
| 5467 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5468 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5467 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5468 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5469 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5469 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5470 | ··tags: | 5470 | ··tags: |
| 5471 | ··-·CCE-86011-4 | 5471 | ··-·CCE-86011-4 |
| 5472 | ··-·CJIS-5.5.2.2 | 5472 | ··-·CJIS-5.5.2.2 |
| 5473 | ··-·NIST-800-171-3.4.5 | 5473 | ··-·NIST-800-171-3.4.5 |
| 5474 | ··-·NIST-800-53-AC-6(1) | 5474 | ··-·NIST-800-53-AC-6(1) |
| 5475 | ··-·NIST-800-53-CM-6(a) | 5475 | ··-·NIST-800-53-CM-6(a) |
| Offset 5483, 16 lines modified | Offset 5483, 16 lines modified | ||
| 5483 | ··-·no_reboot_needed | 5483 | ··-·no_reboot_needed |
| 5484 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 5484 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 5485 | ··file: | 5485 | ··file: |
| 5486 | ····path:·/boot/efi/EFI/redhat/user.cfg | 5486 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 5487 | ····group:·'0' | 5487 | ····group:·'0' |
| 5488 | ··when: | 5488 | ··when: |
| 5489 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5490 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5489 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5490 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5491 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5491 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5492 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5492 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5493 | ··tags: | 5493 | ··tags: |
| 5494 | ··-·CCE-86011-4 | 5494 | ··-·CCE-86011-4 |
| 5495 | ··-·CJIS-5.5.2.2 | 5495 | ··-·CJIS-5.5.2.2 |
| 5496 | ··-·NIST-800-171-3.4.5 | 5496 | ··-·NIST-800-171-3.4.5 |
| 5497 | ··-·NIST-800-53-AC-6(1) | 5497 | ··-·NIST-800-53-AC-6(1) |
| Offset 5505, 15 lines modified | Offset 5505, 15 lines modified | ||
| 5505 | ··-·medium_severity | 5505 | ··-·medium_severity |
| 5506 | ··-·no_reboot_needed | 5506 | ··-·no_reboot_needed |
| 5507 | Remediation_Shell_script_⇲ | 5507 | Remediation_Shell_script_⇲ |
| 5508 | Complexity:·low | 5508 | Complexity:·low |
| 5509 | Disruption:·low | 5509 | Disruption:·low |
| 5510 | Strategy:···configure | 5510 | Strategy:···configure |
| 5511 | #·Remediation·is·applicable·only·in·certain·platforms | 5511 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5512 | if· | 5512 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 5513 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 5513 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 5514 | else | 5514 | else |
| 5515 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5515 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5516 | fi | 5516 | fi |
| 5517 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** | 5517 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** |
| Offset 5546, 16 lines modified | Offset 5546, 16 lines modified | ||
| 5546 | ··-·no_reboot_needed | 5546 | ··-·no_reboot_needed |
| 5547 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 5547 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 5548 | ··stat: | 5548 | ··stat: |
| 5549 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5549 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 5550 | ··register:·file_exists | 5550 | ··register:·file_exists |
| 5551 | ··when: | 5551 | ··when: |
| 5552 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5553 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5552 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5553 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5554 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5554 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5555 | ··tags: | 5555 | ··tags: |
| 5556 | ··-·CCE-83429-1 | 5556 | ··-·CCE-83429-1 |
| 5557 | ··-·CJIS-5.5.2.2 | 5557 | ··-·CJIS-5.5.2.2 |
| 5558 | ··-·NIST-800-171-3.4.5 | 5558 | ··-·NIST-800-171-3.4.5 |
| 5559 | ··-·NIST-800-53-AC-6(1) | 5559 | ··-·NIST-800-53-AC-6(1) |
| 5560 | ··-·NIST-800-53-CM-6(a) | 5560 | ··-·NIST-800-53-CM-6(a) |
| Offset 5568, 16 lines modified | Offset 5568, 16 lines modified | ||
| 5568 | ··-·no_reboot_needed | 5568 | ··-·no_reboot_needed |
| 5569 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 5569 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 5570 | ··file: | 5570 | ··file: |
| 5571 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5571 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 6741/11206 bytes (60.16%) of diff not shown. | |||
| Offset 52917, 22 lines modified | Offset 52917, 22 lines modified | ||
| 000ceb40:·6365·202f·626f·6f74·2f65·6669·2f45·4649··ce·/boot/efi/EFI | 000ceb40:·6365·202f·626f·6f74·2f65·6669·2f45·4649··ce·/boot/efi/EFI | ||
| 000ceb50:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | 000ceb50:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | ||
| 000ceb60:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | 000ceb60:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | ||
| 000ceb70:·683a·202f·626f·6f74·2f65·6669·2f45·4649··h:·/boot/efi/EFI | 000ceb70:·683a·202f·626f·6f74·2f65·6669·2f45·4649··h:·/boot/efi/EFI | ||
| 000ceb80:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | 000ceb80:·2f72·6564·6861·742f·6772·7562·2e63·6667··/redhat/grub.cfg | ||
| 000ceb90:·0a20·2072·6567·6973·7465·723a·2066·696c··.··register:·fil | 000ceb90:·0a20·2072·6567·6973·7465·723a·2066·696c··.··register:·fil | ||
| 000ceba0:·655f·6578·6973·7473·0a20·2077·6865·6e3a··e_exists.··when: | 000ceba0:·655f·6578·6973·7473·0a20·2077·6865·6e3a··e_exists.··when: | ||
| 000cebb0:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000cebc0:·2220·696e·2061·6e73·6962·6c65·5f6d·6f75··"·in·ansible_mou | |||
| 000cebd0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000cebe0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000ceb | 000cebb0:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | ||
| 000ce | 000cebc0:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | ||
| 000ce | 000cebd0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | ||
| 000cebe0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000cebf0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000cec00:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000cec10:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000cec20:· | 000cec20:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 000cec30:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 000cec30:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 000cec40:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 000cec40:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 000cec50:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 000cec50:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 000cec60:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 000cec60:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 000cec70:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 000cec70:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 000cec80:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | 000cec80:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | ||
| 000cec90:·3433·302d·390a·2020·2d20·434a·4953·2d35··430-9.··-·CJIS-5 | 000cec90:·3433·302d·390a·2020·2d20·434a·4953·2d35··430-9.··-·CJIS-5 | ||
| Offset 52955, 22 lines modified | Offset 52955, 22 lines modified | ||
| 000ceda0:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 000ceda0:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 000cedb0:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | 000cedb0:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | ||
| 000cedc0:·6772·7562·2e63·6667·0a20·2066·696c·653a··grub.cfg.··file: | 000cedc0:·6772·7562·2e63·6667·0a20·2066·696c·653a··grub.cfg.··file: | ||
| 000cedd0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000cedd0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000cede0:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | 000cede0:·2f65·6669·2f45·4649·2f72·6564·6861·742f··/efi/EFI/redhat/ | ||
| 000cedf0:·6772·7562·2e63·6667·0a20·2020·2067·726f··grub.cfg.····gro | 000cedf0:·6772·7562·2e63·6667·0a20·2020·2067·726f··grub.cfg.····gro | ||
| 000cee00:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | 000cee00:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | ||
| 000cee10:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000cee20:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000cee30:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000cee40:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000cee | 000cee10:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 000cee | 000cee20:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 000cee | 000cee30:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 000cee40:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000cee50:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000cee60:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000cee70:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000cee80:·7 | 000cee80:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000cee90:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000cee90:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000ceea0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000ceea0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000ceeb0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000ceeb0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000ceec0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000ceec0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000ceed0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | 000ceed0:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | ||
| 000ceee0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | 000ceee0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | ||
| 000ceef0:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | 000ceef0:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | ||
| Offset 53021, 19 lines modified | Offset 53021, 19 lines modified | ||
| 000cf1c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | 000cf1c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 000cf1d0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | 000cf1d0:·6567·793a·3c2f·7468·3e3c·7464·3e63·6f6e··egy:</th><td>con | ||
| 000cf1e0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | 000cf1e0:·6669·6775·7265·3c2f·7464·3e3c·2f74·723e··figure</td></tr> | ||
| 000cf1f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | 000cf1f0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 000cf200:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | 000cf200:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 000cf210:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | 000cf210:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 000cf220:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | 000cf220:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 000cf230:·6c61·7466·6f72·6d73·0a69·6620· | 000cf230:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | ||
| 000cf240:·202f·7379·732f·6669·726d·7761·7265·2f65···/sys/firmware/e | |||
| 000cf250:·6669·205d·2026·616d·703b·2661·6d70·3b20··fi·]·&&· | |||
| 000cf2 | 000cf240:·2d2d·7175·6965·7420·2d71·2067·7275·6232··--quiet·-q·grub2 | ||
| 000cf2 | 000cf250:·2d63·6f6d·6d6f·6e20·2661·6d70·3b26·616d··-common·&&am | ||
| 000cf260:·703b·205b·202d·6620·2f73·7973·2f66·6972··p;·[·-f·/sys/fir | |||
| 000cf270:·6d77·6172·652f·6566·6920·5d20·2661·6d70··mware/efi·]·& | |||
| 000cf280:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | 000cf280:·3b26·616d·703b·207b·205b·2021·202d·6620··;&·{·[·!·-f· | ||
| 000cf290:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | 000cf290:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | ||
| 000cf2a0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | 000cf2a0:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | ||
| 000cf2b0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | 000cf2b0:·2f72·756e·2f2e·636f·6e74·6169·6e65·7265··/run/.containere | ||
| 000cf2c0:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a63··nv·];·};·then..c | 000cf2c0:·6e76·205d·3b20·7d3b·2074·6865·6e0a·0a63··nv·];·};·then..c | ||
| 000cf2d0:·6867·7270·2030·202f·626f·6f74·2f65·6669··hgrp·0·/boot/efi | 000cf2d0:·6867·7270·2030·202f·626f·6f74·2f65·6669··hgrp·0·/boot/efi | ||
| 000cf2e0:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | 000cf2e0:·2f45·4649·2f72·6564·6861·742f·6772·7562··/EFI/redhat/grub | ||
| Offset 53463, 22 lines modified | Offset 53463, 22 lines modified | ||
| 000d0d60:·6973·7465·6e63·6520·2f62·6f6f·742f·6566··istence·/boot/ef | 000d0d60:·6973·7465·6e63·6520·2f62·6f6f·742f·6566··istence·/boot/ef | ||
| 000d0d70:·692f·4546·492f·7265·6468·6174·2f75·7365··i/EFI/redhat/use | 000d0d70:·692f·4546·492f·7265·6468·6174·2f75·7365··i/EFI/redhat/use | ||
| 000d0d80:·722e·6366·670a·2020·7374·6174·3a0a·2020··r.cfg.··stat:.·· | 000d0d80:·722e·6366·670a·2020·7374·6174·3a0a·2020··r.cfg.··stat:.·· | ||
| 000d0d90:·2020·7061·7468·3a20·2f62·6f6f·742f·6566····path:·/boot/ef | 000d0d90:·2020·7061·7468·3a20·2f62·6f6f·742f·6566····path:·/boot/ef | ||
| 000d0da0:·692f·4546·492f·7265·6468·6174·2f75·7365··i/EFI/redhat/use | 000d0da0:·692f·4546·492f·7265·6468·6174·2f75·7365··i/EFI/redhat/use | ||
| 000d0db0:·722e·6366·670a·2020·7265·6769·7374·6572··r.cfg.··register | 000d0db0:·722e·6366·670a·2020·7265·6769·7374·6572··r.cfg.··register | ||
| 000d0dc0:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 000d0dc0:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 000d0dd0:·7768·656e·3a0a·2020·2d20·2722· | 000d0dd0:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 000d0de0:·742f·6566·6922·2069·6e20·616e·7369·626c··t/efi"·in·ansibl | |||
| 000d0df0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000d0e00:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000d0e10:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 000d0 | 000d0de0:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 000d0 | 000d0df0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 000d0e | 000d0e00:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | ||
| 000d0e10:·2f65·6669·2220·696e·2061·6e73·6962·6c65··/efi"·in·ansible | |||
| 000d0e20:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000d0e30:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000d0e40:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 000d0e50:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 000d0e50:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 000d0e60:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 000d0e60:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 000d0e70:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 000d0e70:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 000d0e80:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 000d0e80:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 000d0e90:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 000d0e90:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 000d0ea0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | 000d0ea0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 000d0eb0:·4345·2d38·3630·3131·2d34·0a20·202d·2043··CE-86011-4.··-·C | 000d0eb0:·4345·2d38·3630·3131·2d34·0a20·202d·2043··CE-86011-4.··-·C | ||
| Offset 53501, 22 lines modified | Offset 53501, 22 lines modified | ||
| 000d0fc0:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 000d0fc0:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 000d0fd0:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | 000d0fd0:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | ||
| 000d0fe0:·6861·742f·7573·6572·2e63·6667·0a20·2066··hat/user.cfg.··f | 000d0fe0:·6861·742f·7573·6572·2e63·6667·0a20·2066··hat/user.cfg.··f | ||
| 000d0ff0:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | 000d0ff0:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | ||
| 000d1000:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | 000d1000:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | ||
| 000d1010:·6861·742f·7573·6572·2e63·6667·0a20·2020··hat/user.cfg.··· | 000d1010:·6861·742f·7573·6572·2e63·6667·0a20·2020··hat/user.cfg.··· | ||
| 000d1020:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | 000d1020:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | ||
| 000d1030:·656e·3a0a·2020·2d20·2722· | 000d1030:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 000d1040:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 000d1050:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000d1060:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000d1070:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 000d10 | 000d1040:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 000d10 | 000d1050:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 000d1060:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 000d1070:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 000d1080:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 000d1090:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 000d10a0:· | 000d10a0:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 000d10b0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 000d10b0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 000d10c0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 000d10c0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 000d10d0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 000d10d0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 000d10e0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 000d10e0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 000d10f0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 000d10f0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| Max diff block lines reached; 24833/34830 bytes (71.30%) of diff not shown. | |||
| Offset 5375, 16 lines modified | Offset 5375, 16 lines modified | ||
| 5375 | ··-·no_reboot_needed | 5375 | ··-·no_reboot_needed |
| 5376 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 5376 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 5377 | ··stat: | 5377 | ··stat: |
| 5378 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5378 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 5379 | ··register:·file_exists | 5379 | ··register:·file_exists |
| 5380 | ··when: | 5380 | ··when: |
| 5381 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5382 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5381 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5382 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5383 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5383 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5384 | ··tags: | 5384 | ··tags: |
| 5385 | ··-·CCE-83430-9 | 5385 | ··-·CCE-83430-9 |
| 5386 | ··-·CJIS-5.5.2.2 | 5386 | ··-·CJIS-5.5.2.2 |
| 5387 | ··-·NIST-800-171-3.4.5 | 5387 | ··-·NIST-800-171-3.4.5 |
| 5388 | ··-·NIST-800-53-AC-6(1) | 5388 | ··-·NIST-800-53-AC-6(1) |
| 5389 | ··-·NIST-800-53-CM-6(a) | 5389 | ··-·NIST-800-53-CM-6(a) |
| Offset 5397, 16 lines modified | Offset 5397, 16 lines modified | ||
| 5397 | ··-·no_reboot_needed | 5397 | ··-·no_reboot_needed |
| 5398 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 5398 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 5399 | ··file: | 5399 | ··file: |
| 5400 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5400 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 5401 | ····group:·'0' | 5401 | ····group:·'0' |
| 5402 | ··when: | 5402 | ··when: |
| 5403 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5404 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5403 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5404 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5405 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5405 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5406 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5406 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5407 | ··tags: | 5407 | ··tags: |
| 5408 | ··-·CCE-83430-9 | 5408 | ··-·CCE-83430-9 |
| 5409 | ··-·CJIS-5.5.2.2 | 5409 | ··-·CJIS-5.5.2.2 |
| 5410 | ··-·NIST-800-171-3.4.5 | 5410 | ··-·NIST-800-171-3.4.5 |
| 5411 | ··-·NIST-800-53-AC-6(1) | 5411 | ··-·NIST-800-53-AC-6(1) |
| Offset 5419, 15 lines modified | Offset 5419, 15 lines modified | ||
| 5419 | ··-·medium_severity | 5419 | ··-·medium_severity |
| 5420 | ··-·no_reboot_needed | 5420 | ··-·no_reboot_needed |
| 5421 | Remediation_Shell_script_⇲ | 5421 | Remediation_Shell_script_⇲ |
| 5422 | Complexity:·low | 5422 | Complexity:·low |
| 5423 | Disruption:·low | 5423 | Disruption:·low |
| 5424 | Strategy:···configure | 5424 | Strategy:···configure |
| 5425 | #·Remediation·is·applicable·only·in·certain·platforms | 5425 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5426 | if· | 5426 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 5427 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 5427 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 5428 | else | 5428 | else |
| 5429 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5429 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5430 | fi | 5430 | fi |
| 5431 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** | 5431 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** |
| Offset 5460, 16 lines modified | Offset 5460, 16 lines modified | ||
| 5460 | ··-·no_reboot_needed | 5460 | ··-·no_reboot_needed |
| 5461 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 5461 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 5462 | ··stat: | 5462 | ··stat: |
| 5463 | ····path:·/boot/efi/EFI/redhat/user.cfg | 5463 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 5464 | ··register:·file_exists | 5464 | ··register:·file_exists |
| 5465 | ··when: | 5465 | ··when: |
| 5466 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5467 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5466 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5467 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5468 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5468 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5469 | ··tags: | 5469 | ··tags: |
| 5470 | ··-·CCE-86011-4 | 5470 | ··-·CCE-86011-4 |
| 5471 | ··-·CJIS-5.5.2.2 | 5471 | ··-·CJIS-5.5.2.2 |
| 5472 | ··-·NIST-800-171-3.4.5 | 5472 | ··-·NIST-800-171-3.4.5 |
| 5473 | ··-·NIST-800-53-AC-6(1) | 5473 | ··-·NIST-800-53-AC-6(1) |
| 5474 | ··-·NIST-800-53-CM-6(a) | 5474 | ··-·NIST-800-53-CM-6(a) |
| Offset 5482, 16 lines modified | Offset 5482, 16 lines modified | ||
| 5482 | ··-·no_reboot_needed | 5482 | ··-·no_reboot_needed |
| 5483 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 5483 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 5484 | ··file: | 5484 | ··file: |
| 5485 | ····path:·/boot/efi/EFI/redhat/user.cfg | 5485 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 5486 | ····group:·'0' | 5486 | ····group:·'0' |
| 5487 | ··when: | 5487 | ··when: |
| 5488 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5489 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5488 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5489 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5490 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5490 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5491 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5491 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5492 | ··tags: | 5492 | ··tags: |
| 5493 | ··-·CCE-86011-4 | 5493 | ··-·CCE-86011-4 |
| 5494 | ··-·CJIS-5.5.2.2 | 5494 | ··-·CJIS-5.5.2.2 |
| 5495 | ··-·NIST-800-171-3.4.5 | 5495 | ··-·NIST-800-171-3.4.5 |
| 5496 | ··-·NIST-800-53-AC-6(1) | 5496 | ··-·NIST-800-53-AC-6(1) |
| Offset 5504, 15 lines modified | Offset 5504, 15 lines modified | ||
| 5504 | ··-·medium_severity | 5504 | ··-·medium_severity |
| 5505 | ··-·no_reboot_needed | 5505 | ··-·no_reboot_needed |
| 5506 | Remediation_Shell_script_⇲ | 5506 | Remediation_Shell_script_⇲ |
| 5507 | Complexity:·low | 5507 | Complexity:·low |
| 5508 | Disruption:·low | 5508 | Disruption:·low |
| 5509 | Strategy:···configure | 5509 | Strategy:···configure |
| 5510 | #·Remediation·is·applicable·only·in·certain·platforms | 5510 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5511 | if· | 5511 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 5512 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 5512 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 5513 | else | 5513 | else |
| 5514 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5514 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5515 | fi | 5515 | fi |
| 5516 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** | 5516 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** |
| Offset 5545, 16 lines modified | Offset 5545, 16 lines modified | ||
| 5545 | ··-·no_reboot_needed | 5545 | ··-·no_reboot_needed |
| 5546 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 5546 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 5547 | ··stat: | 5547 | ··stat: |
| 5548 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5548 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 5549 | ··register:·file_exists | 5549 | ··register:·file_exists |
| 5550 | ··when: | 5550 | ··when: |
| 5551 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5552 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5551 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5552 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5554 | ··tags: | 5554 | ··tags: |
| 5555 | ··-·CCE-83429-1 | 5555 | ··-·CCE-83429-1 |
| 5556 | ··-·CJIS-5.5.2.2 | 5556 | ··-·CJIS-5.5.2.2 |
| 5557 | ··-·NIST-800-171-3.4.5 | 5557 | ··-·NIST-800-171-3.4.5 |
| 5558 | ··-·NIST-800-53-AC-6(1) | 5558 | ··-·NIST-800-53-AC-6(1) |
| 5559 | ··-·NIST-800-53-CM-6(a) | 5559 | ··-·NIST-800-53-CM-6(a) |
| Offset 5567, 16 lines modified | Offset 5567, 16 lines modified | ||
| 5567 | ··-·no_reboot_needed | 5567 | ··-·no_reboot_needed |
| 5568 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 5568 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 5569 | ··file: | 5569 | ··file: |
| 5570 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 5570 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 6741/11206 bytes (60.16%) of diff not shown. | |||
| Offset 176702, 22 lines modified | Offset 176702, 22 lines modified | ||
| 002b23d0:·6973·7465·6e63·6520·2f62·6f6f·742f·6566··istence·/boot/ef | 002b23d0:·6973·7465·6e63·6520·2f62·6f6f·742f·6566··istence·/boot/ef | ||
| 002b23e0:·692f·4546·492f·7265·6468·6174·2f67·7275··i/EFI/redhat/gru | 002b23e0:·692f·4546·492f·7265·6468·6174·2f67·7275··i/EFI/redhat/gru | ||
| 002b23f0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 002b23f0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 002b2400:·2020·7061·7468·3a20·2f62·6f6f·742f·6566····path:·/boot/ef | 002b2400:·2020·7061·7468·3a20·2f62·6f6f·742f·6566····path:·/boot/ef | ||
| 002b2410:·692f·4546·492f·7265·6468·6174·2f67·7275··i/EFI/redhat/gru | 002b2410:·692f·4546·492f·7265·6468·6174·2f67·7275··i/EFI/redhat/gru | ||
| 002b2420:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 002b2420:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 002b2430:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 002b2430:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 002b2440:·7768·656e·3a0a·2020·2d20·2722· | 002b2440:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 002b2450:·742f·6566·6922·2069·6e20·616e·7369·626c··t/efi"·in·ansibl | |||
| 002b2460:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002b2470:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002b2480:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 002b24 | 002b2450:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 002b24 | 002b2460:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | ||
| 002b24 | 002b2470:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | ||
| 002b2480:·2f65·6669·2220·696e·2061·6e73·6962·6c65··/efi"·in·ansible | |||
| 002b2490:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 002b24a0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 002b24b0:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 002b24c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 002b24c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 002b24d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 002b24d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 002b24e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 002b24e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 002b24f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 002b24f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 002b2500:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 002b2500:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 002b2510:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | 002b2510:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 002b2520:·4345·2d38·3334·3330·2d39·0a20·202d·2043··CE-83430-9.··-·C | 002b2520:·4345·2d38·3334·3330·2d39·0a20·202d·2043··CE-83430-9.··-·C | ||
| Offset 176740, 22 lines modified | Offset 176740, 22 lines modified | ||
| 002b2630:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | 002b2630:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | ||
| 002b2640:·2f62·6f6f·742f·6566·692f·4546·492f·7265··/boot/efi/EFI/re | 002b2640:·2f62·6f6f·742f·6566·692f·4546·492f·7265··/boot/efi/EFI/re | ||
| 002b2650:·6468·6174·2f67·7275·622e·6366·670a·2020··dhat/grub.cfg.·· | 002b2650:·6468·6174·2f67·7275·622e·6366·670a·2020··dhat/grub.cfg.·· | ||
| 002b2660:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | 002b2660:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | ||
| 002b2670:·2f62·6f6f·742f·6566·692f·4546·492f·7265··/boot/efi/EFI/re | 002b2670:·2f62·6f6f·742f·6566·692f·4546·492f·7265··/boot/efi/EFI/re | ||
| 002b2680:·6468·6174·2f67·7275·622e·6366·670a·2020··dhat/grub.cfg.·· | 002b2680:·6468·6174·2f67·7275·622e·6366·670a·2020··dhat/grub.cfg.·· | ||
| 002b2690:·2020·6772·6f75·703a·2027·3027·0a20·2077····group:·'0'.··w | 002b2690:·2020·6772·6f75·703a·2027·3027·0a20·2077····group:·'0'.··w | ||
| 002b26a0:·6865·6e3a·0a20·202d·2027·22 | 002b26a0:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 002b26b0:·2f65·6669·2220·696e·2061·6e73·6962·6c65··/efi"·in·ansible | |||
| 002b26c0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 002b26d0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 002b26e0:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 002b26 | 002b26b0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 002b2 | 002b26c0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 002b26d0:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 002b26e0:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 002b26f0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002b2700:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002b2710:· | 002b2710:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 002b2720:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 002b2720:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 002b2730:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 002b2730:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 002b2740:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 002b2740:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 002b2750:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 002b2750:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 002b2760:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 002b2760:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 002b2770:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | 002b2770:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | ||
| 002b2780:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | 002b2780:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | ||
| Offset 176807, 18 lines modified | Offset 176807, 18 lines modified | ||
| 002b2a60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | 002b2a60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 002b2a70:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | 002b2a70:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | ||
| 002b2a80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | 002b2a80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 002b2a90:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 002b2a90:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 002b2aa0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 002b2aa0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 002b2ab0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 002b2ab0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 002b2ac0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 002b2ac0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 002b2ad0:·205b·202d·6620·2f73·7973·2f66·6972·6d77···[·-f·/sys/firmw | |||
| 002b2ae0:·6172·652f·6566·6920·5d20·2661·6d70·3b26··are/efi·]·&& | |||
| 002b2a | 002b2ad0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 002b2 | 002b2ae0:·6772·7562·322d·636f·6d6d·6f6e·2026·616d··grub2-common·&am | ||
| 002b2af0:·703b·2661·6d70·3b20·5b20·2d66·202f·7379··p;&·[·-f·/sy | |||
| 002b2b00:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 002b2b10:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | 002b2b10:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 002b2b20:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | 002b2b20:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 002b2b30:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | 002b2b30:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 002b2b40:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | 002b2b40:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 002b2b50:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | 002b2b50:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 002b2b60:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | 002b2b60:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | ||
| 002b2b70:·742f·6566·692f·4546·492f·7265·6468·6174··t/efi/EFI/redhat | 002b2b70:·742f·6566·692f·4546·492f·7265·6468·6174··t/efi/EFI/redhat | ||
| Offset 177249, 21 lines modified | Offset 177249, 21 lines modified | ||
| 002b4600:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | 002b4600:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | ||
| 002b4610:·742f·7573·6572·2e63·6667·0a20·2073·7461··t/user.cfg.··sta | 002b4610:·742f·7573·6572·2e63·6667·0a20·2073·7461··t/user.cfg.··sta | ||
| 002b4620:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 002b4620:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 002b4630:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | 002b4630:·6f74·2f65·6669·2f45·4649·2f72·6564·6861··ot/efi/EFI/redha | ||
| 002b4640:·742f·7573·6572·2e63·6667·0a20·2072·6567··t/user.cfg.··reg | 002b4640:·742f·7573·6572·2e63·6667·0a20·2072·6567··t/user.cfg.··reg | ||
| 002b4650:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 002b4650:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 002b4660:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 002b4660:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 002b4670:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 002b4680:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 002b4690:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 002b46a0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 002b46 | 002b4670:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 002b46 | 002b4680:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | ||
| 002b46 | 002b4690:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | ||
| 002b46a0:·2f62·6f6f·742f·6566·6922·2069·6e20·616e··/boot/efi"·in·an | |||
| 002b46b0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002b46c0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002b46d0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002b46e0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 002b46e0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 002b46f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 002b46f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 002b4700:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 002b4700:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 002b4710:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 002b4710:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 002b4720:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 002b4720:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 002b4730:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | 002b4730:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 002b4740:·2020·2d20·4343·452d·3836·3031·312d·340a····-·CCE-86011-4. | 002b4740:·2020·2d20·4343·452d·3836·3031·312d·340a····-·CCE-86011-4. | ||
| Offset 177286, 22 lines modified | Offset 177286, 22 lines modified | ||
| 002b4850:·7265·2067·726f·7570·206f·776e·6572·2030··re·group·owner·0 | 002b4850:·7265·2067·726f·7570·206f·776e·6572·2030··re·group·owner·0 | ||
| 002b4860:·206f·6e20·2f62·6f6f·742f·6566·692f·4546···on·/boot/efi/EF | 002b4860:·206f·6e20·2f62·6f6f·742f·6566·692f·4546···on·/boot/efi/EF | ||
| 002b4870:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | 002b4870:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | ||
| 002b4880:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | 002b4880:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | ||
| 002b4890:·7468·3a20·2f62·6f6f·742f·6566·692f·4546··th:·/boot/efi/EF | 002b4890:·7468·3a20·2f62·6f6f·742f·6566·692f·4546··th:·/boot/efi/EF | ||
| 002b48a0:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | 002b48a0:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | ||
| 002b48b0:·670a·2020·2020·6772·6f75·703a·2027·3027··g.····group:·'0' | 002b48b0:·670a·2020·2020·6772·6f75·703a·2027·3027··g.····group:·'0' | ||
| 002b48c0:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 002b48c0:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 002b48d0:·626f·6f74·2f65·6669·2220·696e·2061·6e73··boot/efi"·in·ans | |||
| 002b48e0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002b48f0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002b4900:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002b4 | 002b48d0:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 002b4 | 002b48e0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | ||
| 002b4 | 002b48f0:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | ||
| 002b4900:·6f6f·742f·6566·6922·2069·6e20·616e·7369··oot/efi"·in·ansi | |||
| 002b4910:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 002b4920:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 002b4930:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 002b4940:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 002b4940:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 002b4950:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 002b4950:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 002b4960:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 002b4960:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 002b4970:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 002b4970:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 002b4980:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 002b4980:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 002b4990:·6e65·7222·5d0a·2020·2d20·6669·6c65·5f65··ner"].··-·file_e | 002b4990:·6e65·7222·5d0a·2020·2d20·6669·6c65·5f65··ner"].··-·file_e | ||
| 002b49a0:·7869·7374·732e·7374·6174·2069·7320·6465··xists.stat·is·de | 002b49a0:·7869·7374·732e·7374·6174·2069·7320·6465··xists.stat·is·de | ||
| Max diff block lines reached; 24900/34728 bytes (71.70%) of diff not shown. | |||
| Offset 37082, 16 lines modified | Offset 37082, 16 lines modified | ||
| 37082 | ··-·no_reboot_needed | 37082 | ··-·no_reboot_needed |
| 37083 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 37083 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 37084 | ··stat: | 37084 | ··stat: |
| 37085 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37085 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 37086 | ··register:·file_exists | 37086 | ··register:·file_exists |
| 37087 | ··when: | 37087 | ··when: |
| 37088 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37089 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37088 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37089 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37090 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37090 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37091 | ··tags: | 37091 | ··tags: |
| 37092 | ··-·CCE-83430-9 | 37092 | ··-·CCE-83430-9 |
| 37093 | ··-·CJIS-5.5.2.2 | 37093 | ··-·CJIS-5.5.2.2 |
| 37094 | ··-·NIST-800-171-3.4.5 | 37094 | ··-·NIST-800-171-3.4.5 |
| 37095 | ··-·NIST-800-53-AC-6(1) | 37095 | ··-·NIST-800-53-AC-6(1) |
| 37096 | ··-·NIST-800-53-CM-6(a) | 37096 | ··-·NIST-800-53-CM-6(a) |
| Offset 37104, 16 lines modified | Offset 37104, 16 lines modified | ||
| 37104 | ··-·no_reboot_needed | 37104 | ··-·no_reboot_needed |
| 37105 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 37105 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 37106 | ··file: | 37106 | ··file: |
| 37107 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37107 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 37108 | ····group:·'0' | 37108 | ····group:·'0' |
| 37109 | ··when: | 37109 | ··when: |
| 37110 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37111 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37110 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37111 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37112 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37112 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37113 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 37113 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 37114 | ··tags: | 37114 | ··tags: |
| 37115 | ··-·CCE-83430-9 | 37115 | ··-·CCE-83430-9 |
| 37116 | ··-·CJIS-5.5.2.2 | 37116 | ··-·CJIS-5.5.2.2 |
| 37117 | ··-·NIST-800-171-3.4.5 | 37117 | ··-·NIST-800-171-3.4.5 |
| 37118 | ··-·NIST-800-53-AC-6(1) | 37118 | ··-·NIST-800-53-AC-6(1) |
| Offset 37126, 15 lines modified | Offset 37126, 15 lines modified | ||
| 37126 | ··-·medium_severity | 37126 | ··-·medium_severity |
| 37127 | ··-·no_reboot_needed | 37127 | ··-·no_reboot_needed |
| 37128 | Remediation_Shell_script_⇲ | 37128 | Remediation_Shell_script_⇲ |
| 37129 | Complexity:·low | 37129 | Complexity:·low |
| 37130 | Disruption:·low | 37130 | Disruption:·low |
| 37131 | Strategy:···configure | 37131 | Strategy:···configure |
| 37132 | #·Remediation·is·applicable·only·in·certain·platforms | 37132 | #·Remediation·is·applicable·only·in·certain·platforms |
| 37133 | if· | 37133 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 37134 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 37134 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 37135 | else | 37135 | else |
| 37136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 37136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 37137 | fi | 37137 | fi |
| 37138 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** | 37138 | ***·Rule ·Verify·/boot/efi/EFI/redhat/user.cfg·Group·Ownership· [ref]·*** |
| Offset 37167, 16 lines modified | Offset 37167, 16 lines modified | ||
| 37167 | ··-·no_reboot_needed | 37167 | ··-·no_reboot_needed |
| 37168 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 37168 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 37169 | ··stat: | 37169 | ··stat: |
| 37170 | ····path:·/boot/efi/EFI/redhat/user.cfg | 37170 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 37171 | ··register:·file_exists | 37171 | ··register:·file_exists |
| 37172 | ··when: | 37172 | ··when: |
| 37173 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37174 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37173 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37174 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37175 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37175 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37176 | ··tags: | 37176 | ··tags: |
| 37177 | ··-·CCE-86011-4 | 37177 | ··-·CCE-86011-4 |
| 37178 | ··-·CJIS-5.5.2.2 | 37178 | ··-·CJIS-5.5.2.2 |
| 37179 | ··-·NIST-800-171-3.4.5 | 37179 | ··-·NIST-800-171-3.4.5 |
| 37180 | ··-·NIST-800-53-AC-6(1) | 37180 | ··-·NIST-800-53-AC-6(1) |
| 37181 | ··-·NIST-800-53-CM-6(a) | 37181 | ··-·NIST-800-53-CM-6(a) |
| Offset 37189, 16 lines modified | Offset 37189, 16 lines modified | ||
| 37189 | ··-·no_reboot_needed | 37189 | ··-·no_reboot_needed |
| 37190 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 37190 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 37191 | ··file: | 37191 | ··file: |
| 37192 | ····path:·/boot/efi/EFI/redhat/user.cfg | 37192 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 37193 | ····group:·'0' | 37193 | ····group:·'0' |
| 37194 | ··when: | 37194 | ··when: |
| 37195 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37196 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37195 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37196 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37197 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37197 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37198 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 37198 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 37199 | ··tags: | 37199 | ··tags: |
| 37200 | ··-·CCE-86011-4 | 37200 | ··-·CCE-86011-4 |
| 37201 | ··-·CJIS-5.5.2.2 | 37201 | ··-·CJIS-5.5.2.2 |
| 37202 | ··-·NIST-800-171-3.4.5 | 37202 | ··-·NIST-800-171-3.4.5 |
| 37203 | ··-·NIST-800-53-AC-6(1) | 37203 | ··-·NIST-800-53-AC-6(1) |
| Offset 37211, 15 lines modified | Offset 37211, 15 lines modified | ||
| 37211 | ··-·medium_severity | 37211 | ··-·medium_severity |
| 37212 | ··-·no_reboot_needed | 37212 | ··-·no_reboot_needed |
| 37213 | Remediation_Shell_script_⇲ | 37213 | Remediation_Shell_script_⇲ |
| 37214 | Complexity:·low | 37214 | Complexity:·low |
| 37215 | Disruption:·low | 37215 | Disruption:·low |
| 37216 | Strategy:···configure | 37216 | Strategy:···configure |
| 37217 | #·Remediation·is·applicable·only·in·certain·platforms | 37217 | #·Remediation·is·applicable·only·in·certain·platforms |
| 37218 | if· | 37218 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 37219 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 37219 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 37220 | else | 37220 | else |
| 37221 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 37221 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 37222 | fi | 37222 | fi |
| 37223 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** | 37223 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·User·Ownership· [ref]·*** |
| Offset 37252, 16 lines modified | Offset 37252, 16 lines modified | ||
| 37252 | ··-·no_reboot_needed | 37252 | ··-·no_reboot_needed |
| 37253 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 37253 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 37254 | ··stat: | 37254 | ··stat: |
| 37255 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37255 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 37256 | ··register:·file_exists | 37256 | ··register:·file_exists |
| 37257 | ··when: | 37257 | ··when: |
| 37258 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37259 | ··-·'"grub2-common"·in·ansible_facts.packages' | 37258 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 37259 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 37260 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37260 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37261 | ··tags: | 37261 | ··tags: |
| 37262 | ··-·CCE-83429-1 | 37262 | ··-·CCE-83429-1 |
| 37263 | ··-·CJIS-5.5.2.2 | 37263 | ··-·CJIS-5.5.2.2 |
| 37264 | ··-·NIST-800-171-3.4.5 | 37264 | ··-·NIST-800-171-3.4.5 |
| 37265 | ··-·NIST-800-53-AC-6(1) | 37265 | ··-·NIST-800-53-AC-6(1) |
| 37266 | ··-·NIST-800-53-CM-6(a) | 37266 | ··-·NIST-800-53-CM-6(a) |
| Offset 37274, 16 lines modified | Offset 37274, 16 lines modified | ||
| 37274 | ··-·no_reboot_needed | 37274 | ··-·no_reboot_needed |
| 37275 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 37275 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 37276 | ··file: | 37276 | ··file: |
| 37277 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 37277 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 6761/11242 bytes (60.14%) of diff not shown. | |||
| Offset 287661, 23 lines modified | Offset 287661, 23 lines modified | ||
| 00463ac0:·6573·7472·6963·7469·6f6e·735c·732a·3d5c··estrictions\s*=\ | 00463ac0:·6573·7472·6963·7469·6f6e·735c·732a·3d5c··estrictions\s*=\ | ||
| 00463ad0:·732a·0a20·2020·2020·206c·696e·653a·2073··s*.······line:·s | 00463ad0:·732a·0a20·2020·2020·206c·696e·653a·2073··s*.······line:·s | ||
| 00463ae0:·6d74·7064·5f63·6c69·656e·745f·7265·7374··mtpd_client_rest | 00463ae0:·6d74·7064·5f63·6c69·656e·745f·7265·7374··mtpd_client_rest | ||
| 00463af0:·7269·6374·696f·6e73·203d·2070·6572·6d69··rictions·=·permi | 00463af0:·7269·6374·696f·6e73·203d·2070·6572·6d69··rictions·=·permi | ||
| 00463b00:·745f·6d79·6e65·7477·6f72·6b73·2c72·656a··t_mynetworks,rej | 00463b00:·745f·6d79·6e65·7477·6f72·6b73·2c72·656a··t_mynetworks,rej | ||
| 00463b10:·6563·740a·2020·2020·2020·7374·6174·653a··ect.······state: | 00463b10:·6563·740a·2020·2020·2020·7374·6174·653a··ect.······state: | ||
| 00463b20:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | 00463b20:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | ||
| 00463b30:·0a20·202d·2027·2270·6f73·7466·6978·2220··.··-·'"postfix"· | |||
| 00463b40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 00463b50:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a | |||
| 00463b60:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 00463b70:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 00463b80:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 00463b90:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 00463b | 00463b30:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 00463b40:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00463b50:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00463b60:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00463b70:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00463b80:·6f6e·7461·696e·6572·225d·0a20·202d·2027··ontainer"].··-·' | |||
| 00463b90:·2270·6f73·7466·6978·2220·696e·2061·6e73··"postfix"·in·ans | |||
| 00463ba0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00463bb0:·6 | 00463bb0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | ||
| 00463bc0:·2043·4345·2d38·3035·3132·2d37·0a20·202d···CCE-80512-7.··- | 00463bc0:·2043·4345·2d38·3035·3132·2d37·0a20·202d···CCE-80512-7.··- | ||
| 00463bd0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | 00463bd0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | ||
| 00463be0:·3037·2d30·3430·3638·300a·2020·2d20·6c6f··07-040680.··-·lo | 00463be0:·3037·2d30·3430·3638·300a·2020·2d20·6c6f··07-040680.··-·lo | ||
| 00463bf0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | 00463bf0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 00463c00:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | 00463c00:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | ||
| 00463c10:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | 00463c10:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 00463c20:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | 00463c20:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| Offset 287702, 21 lines modified | Offset 287702, 21 lines modified | ||
| 00463d50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | 00463d50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00463d60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | 00463d60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00463d70:·2220·6964·3d22·6964·6d37·3237·3733·223e··"·id="idm72773"> | 00463d70:·2220·6964·3d22·6964·6d37·3237·3733·223e··"·id="idm72773"> | ||
| 00463d80:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 00463d80:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 00463d90:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 00463d90:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 00463da0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 00463da0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 00463db0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 00463db0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 00463dc0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 00463dd0:·2d71·2070·6f73·7466·6978·2026·616d·703b··-q·postfix·& | |||
| 00463d | 00463dc0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | ||
| 00463d | 00463dd0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 00463 | 00463de0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 00463 | 00463df0:·2e63·6f6e·7461·696e·6572·656e·7620·5d20··.containerenv·]· | ||
| 00463e00:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 00463e10:·2d71·7569·6574·202d·7120·706f·7374·6669··-quiet·-q·postfi | |||
| 00463e20:· | 00463e20:·783b·2074·6865·6e0a·0a69·6620·2120·6772··x;·then..if·!·gr | ||
| 00463e30:·6570·202d·7120·5e73·6d74·7064·5f63·6c69··ep·-q·^smtpd_cli | 00463e30:·6570·202d·7120·5e73·6d74·7064·5f63·6c69··ep·-q·^smtpd_cli | ||
| 00463e40:·656e·745f·7265·7374·7269·6374·696f·6e73··ent_restrictions | 00463e40:·656e·745f·7265·7374·7269·6374·696f·6e73··ent_restrictions | ||
| 00463e50:·202f·6574·632f·706f·7374·6669·782f·6d61···/etc/postfix/ma | 00463e50:·202f·6574·632f·706f·7374·6669·782f·6d61···/etc/postfix/ma | ||
| 00463e60:·696e·2e63·663b·2074·6865·6e0a·0965·6368··in.cf;·then..ech | 00463e60:·696e·2e63·663b·2074·6865·6e0a·0965·6368··in.cf;·then..ech | ||
| 00463e70:·6f20·2273·6d74·7064·5f63·6c69·656e·745f··o·"smtpd_client_ | 00463e70:·6f20·2273·6d74·7064·5f63·6c69·656e·745f··o·"smtpd_client_ | ||
| 00463e80:·7265·7374·7269·6374·696f·6e73·203d·2070··restrictions·=·p | 00463e80:·7265·7374·7269·6374·696f·6e73·203d·2070··restrictions·=·p | ||
| 00463e90:·6572·6d69·745f·6d79·6e65·7477·6f72·6b73··ermit_mynetworks | 00463e90:·6572·6d69·745f·6d79·6e65·7477·6f72·6b73··ermit_mynetworks |
| Offset 58184, 28 lines modified | Offset 58184, 28 lines modified | ||
| 58184 | ····lineinfile: | 58184 | ····lineinfile: |
| 58185 | ······path:·/etc/postfix/main.cf | 58185 | ······path:·/etc/postfix/main.cf |
| 58186 | ······create:·true | 58186 | ······create:·true |
| 58187 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 58187 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 58188 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 58188 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 58189 | ······state:·present | 58189 | ······state:·present |
| 58190 | ··when: | 58190 | ··when: |
| 58191 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 58192 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 58191 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 58192 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 58193 | ··tags: | 58193 | ··tags: |
| 58194 | ··-·CCE-80512-7 | 58194 | ··-·CCE-80512-7 |
| 58195 | ··-·DISA-STIG-RHEL-07-040680 | 58195 | ··-·DISA-STIG-RHEL-07-040680 |
| 58196 | ··-·low_complexity | 58196 | ··-·low_complexity |
| 58197 | ··-·low_disruption | 58197 | ··-·low_disruption |
| 58198 | ··-·medium_severity | 58198 | ··-·medium_severity |
| 58199 | ··-·no_reboot_needed | 58199 | ··-·no_reboot_needed |
| 58200 | ··-·postfix_prevent_unrestricted_relay | 58200 | ··-·postfix_prevent_unrestricted_relay |
| 58201 | ··-·restrict_strategy | 58201 | ··-·restrict_strategy |
| 58202 | Remediation_Shell_script_⇲ | 58202 | Remediation_Shell_script_⇲ |
| 58203 | #·Remediation·is·applicable·only·in·certain·platforms | 58203 | #·Remediation·is·applicable·only·in·certain·platforms |
| 58204 | if· | 58204 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 58205 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 58205 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 58206 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 58206 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 58207 | else | 58207 | else |
| 58208 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 58208 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 58209 | fi | 58209 | fi |
| Offset 287680, 23 lines modified | Offset 287680, 23 lines modified | ||
| 00463bf0:·7265·7374·7269·6374·696f·6e73·5c73·2a3d··restrictions\s*= | 00463bf0:·7265·7374·7269·6374·696f·6e73·5c73·2a3d··restrictions\s*= | ||
| 00463c00:·5c73·2a0a·2020·2020·2020·6c69·6e65·3a20··\s*.······line:· | 00463c00:·5c73·2a0a·2020·2020·2020·6c69·6e65·3a20··\s*.······line:· | ||
| 00463c10:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | 00463c10:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | ||
| 00463c20:·7472·6963·7469·6f6e·7320·3d20·7065·726d··trictions·=·perm | 00463c20:·7472·6963·7469·6f6e·7320·3d20·7065·726d··trictions·=·perm | ||
| 00463c30:·6974·5f6d·796e·6574·776f·726b·732c·7265··it_mynetworks,re | 00463c30:·6974·5f6d·796e·6574·776f·726b·732c·7265··it_mynetworks,re | ||
| 00463c40:·6a65·6374·0a20·2020·2020·2073·7461·7465··ject.······state | 00463c40:·6a65·6374·0a20·2020·2020·2073·7461·7465··ject.······state | ||
| 00463c50:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | 00463c50:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 00463c60:·3a0a·2020·2d20·2722·706f·7374·6669·7822··:.··-·'"postfix" | |||
| 00463c70:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00463c80:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 00463c90:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00463ca0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00463cb0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00463cc0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00463c | 00463c60:·3a0a·2020·2d20·616e·7369·626c·655f·7669··:.··-·ansible_vi | ||
| 00463c70:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00463c80:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00463c90:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00463ca0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00463cb0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | |||
| 00463cc0:·2722·706f·7374·6669·7822·2069·6e20·616e··'"postfix"·in·an | |||
| 00463cd0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 00463ce0:·6 | 00463ce0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | ||
| 00463cf0:·2d20·4343·452d·3830·3531·322d·370a·2020··-·CCE-80512-7.·· | 00463cf0:·2d20·4343·452d·3830·3531·322d·370a·2020··-·CCE-80512-7.·· | ||
| 00463d00:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | 00463d00:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | ||
| 00463d10:·2d30·372d·3034·3036·3830·0a20·202d·206c··-07-040680.··-·l | 00463d10:·2d30·372d·3034·3036·3830·0a20·202d·206c··-07-040680.··-·l | ||
| 00463d20:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | 00463d20:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | ||
| 00463d30:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | 00463d30:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | ||
| 00463d40:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | 00463d40:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | ||
| 00463d50:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | 00463d50:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | ||
| Offset 287721, 21 lines modified | Offset 287721, 21 lines modified | ||
| 00463e80:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 00463e80:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00463e90:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 00463e90:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00463ea0:·6522·2069·643d·2269·646d·3732·3737·3322··e"·id="idm72773" | 00463ea0:·6522·2069·643d·2269·646d·3732·3737·3322··e"·id="idm72773" | ||
| 00463eb0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | 00463eb0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 00463ec0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | 00463ec0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 00463ed0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | 00463ed0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 00463ee0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | 00463ee0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 00463ef0:·730a·6966·205b·2021·202d·6620·2f2e·646f··s.if·[·!·-f·/.do | |||
| 00463ef0:·730a·6966·2072·706d·202d·2d71·7569·6574··s.if·rpm·--quiet | |||
| 00463f00:·202d·7120·706f·7374·6669·7820·2661·6d70···-q·postfix·& | |||
| 00463f10:·3b26·616d·703b·205b·2021·202d·6620·2f2e··;&·[·!·-f·/. | |||
| 00463f | 00463f00:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | ||
| 00463f | 00463f10:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | ||
| 00463f | 00463f20:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | ||
| 00463f30:·2026·616d·703b·2661·6d70·3b20·7270·6d20···&&·rpm· | |||
| 00463f40:·2d2d·7175·6965·7420·2d71·2070·6f73·7466··--quiet·-q·postf | |||
| 00463f50:· | 00463f50:·6978·3b20·7468·656e·0a0a·6966·2021·2067··ix;·then..if·!·g | ||
| 00463f60:·7265·7020·2d71·205e·736d·7470·645f·636c··rep·-q·^smtpd_cl | 00463f60:·7265·7020·2d71·205e·736d·7470·645f·636c··rep·-q·^smtpd_cl | ||
| 00463f70:·6965·6e74·5f72·6573·7472·6963·7469·6f6e··ient_restriction | 00463f70:·6965·6e74·5f72·6573·7472·6963·7469·6f6e··ient_restriction | ||
| 00463f80:·7320·2f65·7463·2f70·6f73·7466·6978·2f6d··s·/etc/postfix/m | 00463f80:·7320·2f65·7463·2f70·6f73·7466·6978·2f6d··s·/etc/postfix/m | ||
| 00463f90:·6169·6e2e·6366·3b20·7468·656e·0a09·6563··ain.cf;·then..ec | 00463f90:·6169·6e2e·6366·3b20·7468·656e·0a09·6563··ain.cf;·then..ec | ||
| 00463fa0:·686f·2022·736d·7470·645f·636c·6965·6e74··ho·"smtpd_client | 00463fa0:·686f·2022·736d·7470·645f·636c·6965·6e74··ho·"smtpd_client | ||
| 00463fb0:·5f72·6573·7472·6963·7469·6f6e·7320·3d20··_restrictions·=· | 00463fb0:·5f72·6573·7472·6963·7469·6f6e·7320·3d20··_restrictions·=· | ||
| 00463fc0:·7065·726d·6974·5f6d·796e·6574·776f·726b··permit_mynetwork | 00463fc0:·7065·726d·6974·5f6d·796e·6574·776f·726b··permit_mynetwork |
| Offset 58189, 28 lines modified | Offset 58189, 28 lines modified | ||
| 58189 | ····lineinfile: | 58189 | ····lineinfile: |
| 58190 | ······path:·/etc/postfix/main.cf | 58190 | ······path:·/etc/postfix/main.cf |
| 58191 | ······create:·true | 58191 | ······create:·true |
| 58192 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 58192 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 58193 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 58193 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 58194 | ······state:·present | 58194 | ······state:·present |
| 58195 | ··when: | 58195 | ··when: |
| 58196 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 58197 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 58196 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 58197 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 58198 | ··tags: | 58198 | ··tags: |
| 58199 | ··-·CCE-80512-7 | 58199 | ··-·CCE-80512-7 |
| 58200 | ··-·DISA-STIG-RHEL-07-040680 | 58200 | ··-·DISA-STIG-RHEL-07-040680 |
| 58201 | ··-·low_complexity | 58201 | ··-·low_complexity |
| 58202 | ··-·low_disruption | 58202 | ··-·low_disruption |
| 58203 | ··-·medium_severity | 58203 | ··-·medium_severity |
| 58204 | ··-·no_reboot_needed | 58204 | ··-·no_reboot_needed |
| 58205 | ··-·postfix_prevent_unrestricted_relay | 58205 | ··-·postfix_prevent_unrestricted_relay |
| 58206 | ··-·restrict_strategy | 58206 | ··-·restrict_strategy |
| 58207 | Remediation_Shell_script_⇲ | 58207 | Remediation_Shell_script_⇲ |
| 58208 | #·Remediation·is·applicable·only·in·certain·platforms | 58208 | #·Remediation·is·applicable·only·in·certain·platforms |
| 58209 | if· | 58209 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 58210 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 58210 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 58211 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 58211 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 58212 | else | 58212 | else |
| 58213 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 58213 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 58214 | fi | 58214 | fi |
| Offset 190428, 22 lines modified | Offset 190428, 22 lines modified | ||
| 002e7db0:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | 002e7db0:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | ||
| 002e7dc0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002e7dc0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002e7dd0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 002e7dd0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 002e7de0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 002e7de0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 002e7df0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | 002e7df0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | ||
| 002e7e00:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 002e7e00:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 002e7e10:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 002e7e10:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 002e7e20:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002e7e30:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002e7e40:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002e7e50:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002e7e60:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002e7e70:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002e7e | 002e7e20:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | ||
| 002e7e30:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002e7e40:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002e7e50:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002e7e60:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002e7e70:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002e7e80:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 002e7e90:· | 002e7e90:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 002e7ea0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002e7ea0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002e7eb0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002e7eb0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002e7ec0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002e7ec0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002e7ed0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002e7ed0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002e7ee0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002e7ee0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002e7ef0:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | 002e7ef0:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | ||
| 002e7f00:·3830·302d·360a·2020·2d20·434a·4953·2d35··800-6.··-·CJIS-5 | 002e7f00:·3830·302d·360a·2020·2d20·434a·4953·2d35··800-6.··-·CJIS-5 | ||
| Offset 190465, 21 lines modified | Offset 190465, 21 lines modified | ||
| 002e8000:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | 002e8000:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | ||
| 002e8010:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | 002e8010:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | ||
| 002e8020:·6232·2f67·7275·622e·6366·670a·2020·6669··b2/grub.cfg.··fi | 002e8020:·6232·2f67·7275·622e·6366·670a·2020·6669··b2/grub.cfg.··fi | ||
| 002e8030:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | 002e8030:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | ||
| 002e8040:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 002e8040:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 002e8050:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | 002e8050:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | ||
| 002e8060:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 002e8060:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 002e8070:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 002e8080:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002e8090:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002e80a0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002e80b0:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | |||
| 002e80c0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 002e80 | 002e8070:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | ||
| 002e8080:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 002e8090:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 002e80a0:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 002e80b0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 002e80c0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 002e80d0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 002e80e0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 002e80e0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 002e80f0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 002e80f0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 002e8100:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 002e8100:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 002e8110:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 002e8110:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 002e8120:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 002e8120:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 002e8130:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 002e8130:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 002e8140:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 002e8140:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Offset 190531, 19 lines modified | Offset 190531, 19 lines modified | ||
| 002e8420:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | 002e8420:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 002e8430:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | 002e8430:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | ||
| 002e8440:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | 002e8440:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 002e8450:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | 002e8450:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 002e8460:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | 002e8460:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 002e8470:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | 002e8470:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 002e8480:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | 002e8480:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 002e8490:·6d73·0a69·6620·5b20·2120·2d66·202f·7379··ms.if·[·!·-f·/sy | |||
| 002e84a0:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 002e84b0:·2026·616d·703b·2661·6d70·3b20·7270·6d20···&&·rpm· | |||
| 002e84c0:·2d2d·7175·6965·7420·2d71·2067·7275·6232··--quiet·-q·grub2 | |||
| 002e84 | 002e8490:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | ||
| 002e84a0:·7420·2d71·2067·7275·6232·2d63·6f6d·6d6f··t·-q·grub2-commo | |||
| 002e84b0:·6e20·2661·6d70·3b26·616d·703b·205b·2021··n·&&·[·! | |||
| 002e84c0:·202d·6620·2f73·7973·2f66·6972·6d77·6172···-f·/sys/firmwar | |||
| 002e84d0:·652f·6566·6920·5d20·2661·6d70·3b26·616d··e/efi·]·&&am | |||
| 002e84e0:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | 002e84e0:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | ||
| 002e84f0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | 002e84f0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | ||
| 002e8500:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | 002e8500:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | ||
| 002e8510:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | 002e8510:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | ||
| 002e8520:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | 002e8520:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | ||
| 002e8530:·2030·202f·626f·6f74·2f67·7275·6232·2f67···0·/boot/grub2/g | 002e8530:·2030·202f·626f·6f74·2f67·7275·6232·2f67···0·/boot/grub2/g | ||
| 002e8540:·7275·622e·6366·670a·0a65·6c73·650a·2020··rub.cfg..else.·· | 002e8540:·7275·622e·6366·670a·0a65·6c73·650a·2020··rub.cfg..else.·· | ||
| Offset 191065, 22 lines modified | Offset 191065, 22 lines modified | ||
| 002ea580:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 002ea580:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 002ea590:·6520·2f62·6f6f·742f·6772·7562·322f·7573··e·/boot/grub2/us | 002ea590:·6520·2f62·6f6f·742f·6772·7562·322f·7573··e·/boot/grub2/us | ||
| 002ea5a0:·6572·2e63·6667·0a20·2073·7461·743a·0a20··er.cfg.··stat:.· | 002ea5a0:·6572·2e63·6667·0a20·2073·7461·743a·0a20··er.cfg.··stat:.· | ||
| 002ea5b0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 002ea5b0:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 002ea5c0:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 002ea5c0:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 002ea5d0:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 002ea5d0:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 002ea5e0:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 002ea5e0:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 002ea5f0:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 002ea600:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 002ea610:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002ea620:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002ea630:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 002ea640:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | |||
| 002ea | 002ea5f0:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 002ea600:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 002ea610:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 002ea620:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002ea630:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002ea640:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002ea650:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002ea660:·6 | 002ea660:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 002ea670:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 002ea670:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 002ea680:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 002ea680:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 002ea690:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 002ea690:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 002ea6a0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 002ea6a0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 002ea6b0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 002ea6b0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 002ea6c0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 002ea6c0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 002ea6d0:·3630·3039·2d38·0a20·202d·2043·4a49·532d··6009-8.··-·CJIS- | 002ea6d0:·3630·3039·2d38·0a20·202d·2043·4a49·532d··6009-8.··-·CJIS- | ||
| Offset 191102, 21 lines modified | Offset 191102, 21 lines modified | ||
| 002ea7d0:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | 002ea7d0:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | ||
| 002ea7e0:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | 002ea7e0:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | ||
| 002ea7f0:·6232·2f75·7365·722e·6366·670a·2020·6669··b2/user.cfg.··fi | 002ea7f0:·6232·2f75·7365·722e·6366·670a·2020·6669··b2/user.cfg.··fi | ||
| 002ea800:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | 002ea800:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | ||
| 002ea810:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | 002ea810:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | ||
| 002ea820:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | 002ea820:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | ||
| 002ea830:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 002ea830:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 002ea840:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 002ea850:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002ea860:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002ea870:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002ea880:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | |||
| 002ea890:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 002ea8 | 002ea840:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | ||
| 002ea850:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 002ea860:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 002ea870:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| Max diff block lines reached; 59794/69180 bytes (86.43%) of diff not shown. | |||
| Offset 42340, 16 lines modified | Offset 42340, 16 lines modified | ||
| 42340 | ··-·no_reboot_needed | 42340 | ··-·no_reboot_needed |
| 42341 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 42341 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 42342 | ··stat: | 42342 | ··stat: |
| 42343 | ····path:·/boot/grub2/grub.cfg | 42343 | ····path:·/boot/grub2/grub.cfg |
| 42344 | ··register:·file_exists | 42344 | ··register:·file_exists |
| 42345 | ··when: | 42345 | ··when: |
| 42346 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42347 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42346 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42347 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42348 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42348 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42349 | ··tags: | 42349 | ··tags: |
| 42350 | ··-·CCE-80800-6 | 42350 | ··-·CCE-80800-6 |
| 42351 | ··-·CJIS-5.5.2.2 | 42351 | ··-·CJIS-5.5.2.2 |
| 42352 | ··-·NIST-800-171-3.4.5 | 42352 | ··-·NIST-800-171-3.4.5 |
| 42353 | ··-·NIST-800-53-AC-6(1) | 42353 | ··-·NIST-800-53-AC-6(1) |
| 42354 | ··-·NIST-800-53-CM-6(a) | 42354 | ··-·NIST-800-53-CM-6(a) |
| Offset 42362, 16 lines modified | Offset 42362, 16 lines modified | ||
| 42362 | ··-·no_reboot_needed | 42362 | ··-·no_reboot_needed |
| 42363 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 42363 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 42364 | ··file: | 42364 | ··file: |
| 42365 | ····path:·/boot/grub2/grub.cfg | 42365 | ····path:·/boot/grub2/grub.cfg |
| 42366 | ····group:·'0' | 42366 | ····group:·'0' |
| 42367 | ··when: | 42367 | ··when: |
| 42368 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42369 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42368 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42369 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42371 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42371 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42372 | ··tags: | 42372 | ··tags: |
| 42373 | ··-·CCE-80800-6 | 42373 | ··-·CCE-80800-6 |
| 42374 | ··-·CJIS-5.5.2.2 | 42374 | ··-·CJIS-5.5.2.2 |
| 42375 | ··-·NIST-800-171-3.4.5 | 42375 | ··-·NIST-800-171-3.4.5 |
| 42376 | ··-·NIST-800-53-AC-6(1) | 42376 | ··-·NIST-800-53-AC-6(1) |
| Offset 42384, 15 lines modified | Offset 42384, 15 lines modified | ||
| 42384 | ··-·medium_severity | 42384 | ··-·medium_severity |
| 42385 | ··-·no_reboot_needed | 42385 | ··-·no_reboot_needed |
| 42386 | Remediation_Shell_script_⇲ | 42386 | Remediation_Shell_script_⇲ |
| 42387 | Complexity:·low | 42387 | Complexity:·low |
| 42388 | Disruption:·low | 42388 | Disruption:·low |
| 42389 | Strategy:···configure | 42389 | Strategy:···configure |
| 42390 | #·Remediation·is·applicable·only·in·certain·platforms | 42390 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42391 | if· | 42391 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42392 | chgrp·0·/boot/grub2/grub.cfg | 42392 | chgrp·0·/boot/grub2/grub.cfg |
| 42393 | else | 42393 | else |
| 42394 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42394 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42395 | fi | 42395 | fi |
| 42396 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 42396 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 42425, 16 lines modified | Offset 42425, 16 lines modified | ||
| 42425 | ··-·no_reboot_needed | 42425 | ··-·no_reboot_needed |
| 42426 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 42426 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 42427 | ··stat: | 42427 | ··stat: |
| 42428 | ····path:·/boot/grub2/user.cfg | 42428 | ····path:·/boot/grub2/user.cfg |
| 42429 | ··register:·file_exists | 42429 | ··register:·file_exists |
| 42430 | ··when: | 42430 | ··when: |
| 42431 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42432 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42431 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42432 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42433 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42433 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42434 | ··tags: | 42434 | ··tags: |
| 42435 | ··-·CCE-86009-8 | 42435 | ··-·CCE-86009-8 |
| 42436 | ··-·CJIS-5.5.2.2 | 42436 | ··-·CJIS-5.5.2.2 |
| 42437 | ··-·NIST-800-171-3.4.5 | 42437 | ··-·NIST-800-171-3.4.5 |
| 42438 | ··-·NIST-800-53-AC-6(1) | 42438 | ··-·NIST-800-53-AC-6(1) |
| 42439 | ··-·NIST-800-53-CM-6(a) | 42439 | ··-·NIST-800-53-CM-6(a) |
| Offset 42447, 16 lines modified | Offset 42447, 16 lines modified | ||
| 42447 | ··-·no_reboot_needed | 42447 | ··-·no_reboot_needed |
| 42448 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 42448 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 42449 | ··file: | 42449 | ··file: |
| 42450 | ····path:·/boot/grub2/user.cfg | 42450 | ····path:·/boot/grub2/user.cfg |
| 42451 | ····group:·'0' | 42451 | ····group:·'0' |
| 42452 | ··when: | 42452 | ··when: |
| 42453 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42454 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42453 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42454 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42455 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42455 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42456 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42456 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42457 | ··tags: | 42457 | ··tags: |
| 42458 | ··-·CCE-86009-8 | 42458 | ··-·CCE-86009-8 |
| 42459 | ··-·CJIS-5.5.2.2 | 42459 | ··-·CJIS-5.5.2.2 |
| 42460 | ··-·NIST-800-171-3.4.5 | 42460 | ··-·NIST-800-171-3.4.5 |
| 42461 | ··-·NIST-800-53-AC-6(1) | 42461 | ··-·NIST-800-53-AC-6(1) |
| Offset 42469, 15 lines modified | Offset 42469, 15 lines modified | ||
| 42469 | ··-·medium_severity | 42469 | ··-·medium_severity |
| 42470 | ··-·no_reboot_needed | 42470 | ··-·no_reboot_needed |
| 42471 | Remediation_Shell_script_⇲ | 42471 | Remediation_Shell_script_⇲ |
| 42472 | Complexity:·low | 42472 | Complexity:·low |
| 42473 | Disruption:·low | 42473 | Disruption:·low |
| 42474 | Strategy:···configure | 42474 | Strategy:···configure |
| 42475 | #·Remediation·is·applicable·only·in·certain·platforms | 42475 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42476 | if· | 42476 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42477 | chgrp·0·/boot/grub2/user.cfg | 42477 | chgrp·0·/boot/grub2/user.cfg |
| 42478 | else | 42478 | else |
| 42479 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42479 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42480 | fi | 42480 | fi |
| 42481 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 42481 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 42510, 16 lines modified | Offset 42510, 16 lines modified | ||
| 42510 | ··-·no_reboot_needed | 42510 | ··-·no_reboot_needed |
| 42511 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 42511 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 42512 | ··stat: | 42512 | ··stat: |
| 42513 | ····path:·/boot/grub2/grub.cfg | 42513 | ····path:·/boot/grub2/grub.cfg |
| 42514 | ··register:·file_exists | 42514 | ··register:·file_exists |
| 42515 | ··when: | 42515 | ··when: |
| 42516 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42517 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42516 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42517 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42518 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42518 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42519 | ··tags: | 42519 | ··tags: |
| 42520 | ··-·CCE-80805-5 | 42520 | ··-·CCE-80805-5 |
| 42521 | ··-·CJIS-5.5.2.2 | 42521 | ··-·CJIS-5.5.2.2 |
| 42522 | ··-·NIST-800-171-3.4.5 | 42522 | ··-·NIST-800-171-3.4.5 |
| 42523 | ··-·NIST-800-53-AC-6(1) | 42523 | ··-·NIST-800-53-AC-6(1) |
| 42524 | ··-·NIST-800-53-CM-6(a) | 42524 | ··-·NIST-800-53-CM-6(a) |
| Offset 42532, 16 lines modified | Offset 42532, 16 lines modified | ||
| 42532 | ··-·no_reboot_needed | 42532 | ··-·no_reboot_needed |
| 42533 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 42533 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 42534 | ··file: | 42534 | ··file: |
| 42535 | ····path:·/boot/grub2/grub.cfg | 42535 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 17907/22292 bytes (80.33%) of diff not shown. | |||
| Offset 62058, 22 lines modified | Offset 62058, 22 lines modified | ||
| 000f2690:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 000f2690:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 000f26a0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 000f26a0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 000f26b0:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | 000f26b0:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | ||
| 000f26c0:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 000f26c0:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 000f26d0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 000f26d0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 000f26e0:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 000f26e0:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 000f26f0:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 000f26f0:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 000f2700:·656e·3a0a·2020·2d20·2722· | 000f2700:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 000f2710:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000f2720:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000f2730:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000f2740:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000f2750:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 000f2760:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 000f27 | 000f2710:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 000f2720:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 000f2730:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 000f2740:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 000f2750:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 000f2760:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 000f2770:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 000f2780:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 000f2780:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 000f2790:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 000f2790:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 000f27a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 000f27a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 000f27b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 000f27b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 000f27c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 000f27c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 000f27d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | 000f27d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 000f27e0:·2043·4345·2d38·3038·3030·2d36·0a20·202d···CCE-80800-6.··- | 000f27e0:·2043·4345·2d38·3038·3030·2d36·0a20·202d···CCE-80800-6.··- | ||
| Offset 62095, 22 lines modified | Offset 62095, 22 lines modified | ||
| 000f28e0:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | 000f28e0:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | ||
| 000f28f0:·7570·206f·776e·6572·2030·206f·6e20·2f62··up·owner·0·on·/b | 000f28f0:·7570·206f·776e·6572·2030·206f·6e20·2f62··up·owner·0·on·/b | ||
| 000f2900:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 000f2900:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 000f2910:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 000f2910:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 000f2920:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 000f2920:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 000f2930:·2f67·7275·622e·6366·670a·2020·2020·6772··/grub.cfg.····gr | 000f2930:·2f67·7275·622e·6366·670a·2020·2020·6772··/grub.cfg.····gr | ||
| 000f2940:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | 000f2940:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | ||
| 000f2950:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000f2960:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 000f2970:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000f2980:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000f2990:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 000f29a0:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | |||
| 000f29 | 000f2950:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | ||
| 000f2960:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 000f2970:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000f2980:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000f2990:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 000f29a0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000f29b0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000f29c0:· | 000f29c0:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 000f29d0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 000f29d0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 000f29e0:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 000f29e0:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 000f29f0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 000f29f0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 000f2a00:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 000f2a00:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 000f2a10:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 000f2a10:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 000f2a20:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | 000f2a20:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | ||
| 000f2a30:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | 000f2a30:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | ||
| Offset 62161, 19 lines modified | Offset 62161, 19 lines modified | ||
| 000f2d00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | 000f2d00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 000f2d10:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | 000f2d10:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | ||
| 000f2d20:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | 000f2d20:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | ||
| 000f2d30:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | 000f2d30:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 000f2d40:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 000f2d40:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 000f2d50:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 000f2d50:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 000f2d60:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 000f2d60:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 000f2d70:·706c·6174·666f·726d·730a·6966·20 | 000f2d70:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | ||
| 000f2d80:·202d·6620·2f73·7973·2f66·6972·6d77·6172···-f·/sys/firmwar | |||
| 000f2d90:·652f·6566·6920·5d20·2661·6d70·3b26·616d··e/efi·]·&&am | |||
| 000f2da0:·703b·2072·706d·202d·2d71·7569·6574·202d··p;·rpm·--quiet·- | |||
| 000f2d | 000f2d80:·202d·2d71·7569·6574·202d·7120·6772·7562···--quiet·-q·grub | ||
| 000f2d90:·322d·636f·6d6d·6f6e·2026·616d·703b·2661··2-common·&&a | |||
| 000f2da0:·6d70·3b20·5b20·2120·2d66·202f·7379·732f··mp;·[·!·-f·/sys/ | |||
| 000f2db0:·6669·726d·7761·7265·2f65·6669·205d·2026··firmware/efi·]·& | |||
| 000f2dc0:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | 000f2dc0:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | ||
| 000f2dd0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | 000f2dd0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | ||
| 000f2de0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 000f2de0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 000f2df0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | 000f2df0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 000f2e00:·6572·656e·7620·5d3b·207d·3b20·7468·656e··erenv·];·};·then | 000f2e00:·6572·656e·7620·5d3b·207d·3b20·7468·656e··erenv·];·};·then | ||
| 000f2e10:·0a0a·6368·6772·7020·3020·2f62·6f6f·742f··..chgrp·0·/boot/ | 000f2e10:·0a0a·6368·6772·7020·3020·2f62·6f6f·742f··..chgrp·0·/boot/ | ||
| 000f2e20:·6772·7562·322f·6772·7562·2e63·6667·0a0a··grub2/grub.cfg.. | 000f2e20:·6772·7562·322f·6772·7562·2e63·6667·0a0a··grub2/grub.cfg.. | ||
| Offset 62695, 22 lines modified | Offset 62695, 22 lines modified | ||
| 000f4e60:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 000f4e60:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 000f4e70:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 000f4e70:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 000f4e80:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 000f4e80:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 000f4e90:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 000f4e90:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 000f4ea0:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 000f4ea0:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 000f4eb0:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 000f4eb0:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 000f4ec0:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 000f4ec0:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 000f4ed0:·6865·6e3a·0a20·202d·2027·22 | 000f4ed0:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 000f4ee0:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 000f4ef0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 000f4f00:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 000f4f10:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 000f4f20:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 000f4f30:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000f4 | 000f4ee0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 000f4ef0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 000f4f00:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000f4f10:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000f4f20:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000f4f30:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000f4f40:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000f4f50:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 000f4f50:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 000f4f60:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 000f4f60:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 000f4f70:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 000f4f70:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 000f4f80:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 000f4f80:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 000f4f90:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 000f4f90:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 000f4fa0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 000f4fa0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 000f4fb0:·2d20·4343·452d·3836·3030·392d·380a·2020··-·CCE-86009-8.·· | 000f4fb0:·2d20·4343·452d·3836·3030·392d·380a·2020··-·CCE-86009-8.·· | ||
| Offset 62732, 22 lines modified | Offset 62732, 22 lines modified | ||
| 000f50b0:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | 000f50b0:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | ||
| 000f50c0:·7570·206f·776e·6572·2030·206f·6e20·2f62··up·owner·0·on·/b | 000f50c0:·7570·206f·776e·6572·2030·206f·6e20·2f62··up·owner·0·on·/b | ||
| 000f50d0:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | 000f50d0:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | ||
| 000f50e0:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 000f50e0:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 000f50f0:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 000f50f0:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 000f5100:·2f75·7365·722e·6366·670a·2020·2020·6772··/user.cfg.····gr | 000f5100:·2f75·7365·722e·6366·670a·2020·2020·6772··/user.cfg.····gr | ||
| 000f5110:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | 000f5110:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | ||
| 000f5120:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000f5130:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 000f5140:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000f5150:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000f5160:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 000f5170:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | |||
| 000f51 | 000f5120:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | ||
| 000f5130:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 000f5140:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000f5150:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| Max diff block lines reached; 60284/69936 bytes (86.20%) of diff not shown. | |||
| Offset 8333, 16 lines modified | Offset 8333, 16 lines modified | ||
| 8333 | ··-·no_reboot_needed | 8333 | ··-·no_reboot_needed |
| 8334 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8334 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8335 | ··stat: | 8335 | ··stat: |
| 8336 | ····path:·/boot/grub2/grub.cfg | 8336 | ····path:·/boot/grub2/grub.cfg |
| 8337 | ··register:·file_exists | 8337 | ··register:·file_exists |
| 8338 | ··when: | 8338 | ··when: |
| 8339 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8340 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8339 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8340 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8341 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8341 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8342 | ··tags: | 8342 | ··tags: |
| 8343 | ··-·CCE-80800-6 | 8343 | ··-·CCE-80800-6 |
| 8344 | ··-·CJIS-5.5.2.2 | 8344 | ··-·CJIS-5.5.2.2 |
| 8345 | ··-·NIST-800-171-3.4.5 | 8345 | ··-·NIST-800-171-3.4.5 |
| 8346 | ··-·NIST-800-53-AC-6(1) | 8346 | ··-·NIST-800-53-AC-6(1) |
| 8347 | ··-·NIST-800-53-CM-6(a) | 8347 | ··-·NIST-800-53-CM-6(a) |
| Offset 8355, 16 lines modified | Offset 8355, 16 lines modified | ||
| 8355 | ··-·no_reboot_needed | 8355 | ··-·no_reboot_needed |
| 8356 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 8356 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 8357 | ··file: | 8357 | ··file: |
| 8358 | ····path:·/boot/grub2/grub.cfg | 8358 | ····path:·/boot/grub2/grub.cfg |
| 8359 | ····group:·'0' | 8359 | ····group:·'0' |
| 8360 | ··when: | 8360 | ··when: |
| 8361 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8362 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8361 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8362 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8363 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8363 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8364 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8364 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8365 | ··tags: | 8365 | ··tags: |
| 8366 | ··-·CCE-80800-6 | 8366 | ··-·CCE-80800-6 |
| 8367 | ··-·CJIS-5.5.2.2 | 8367 | ··-·CJIS-5.5.2.2 |
| 8368 | ··-·NIST-800-171-3.4.5 | 8368 | ··-·NIST-800-171-3.4.5 |
| 8369 | ··-·NIST-800-53-AC-6(1) | 8369 | ··-·NIST-800-53-AC-6(1) |
| Offset 8377, 15 lines modified | Offset 8377, 15 lines modified | ||
| 8377 | ··-·medium_severity | 8377 | ··-·medium_severity |
| 8378 | ··-·no_reboot_needed | 8378 | ··-·no_reboot_needed |
| 8379 | Remediation_Shell_script_⇲ | 8379 | Remediation_Shell_script_⇲ |
| 8380 | Complexity:·low | 8380 | Complexity:·low |
| 8381 | Disruption:·low | 8381 | Disruption:·low |
| 8382 | Strategy:···configure | 8382 | Strategy:···configure |
| 8383 | #·Remediation·is·applicable·only·in·certain·platforms | 8383 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8384 | if· | 8384 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8385 | chgrp·0·/boot/grub2/grub.cfg | 8385 | chgrp·0·/boot/grub2/grub.cfg |
| 8386 | else | 8386 | else |
| 8387 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8387 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8388 | fi | 8388 | fi |
| 8389 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 8389 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 8418, 16 lines modified | Offset 8418, 16 lines modified | ||
| 8418 | ··-·no_reboot_needed | 8418 | ··-·no_reboot_needed |
| 8419 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8419 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8420 | ··stat: | 8420 | ··stat: |
| 8421 | ····path:·/boot/grub2/user.cfg | 8421 | ····path:·/boot/grub2/user.cfg |
| 8422 | ··register:·file_exists | 8422 | ··register:·file_exists |
| 8423 | ··when: | 8423 | ··when: |
| 8424 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8425 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8424 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8425 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8426 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8426 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8427 | ··tags: | 8427 | ··tags: |
| 8428 | ··-·CCE-86009-8 | 8428 | ··-·CCE-86009-8 |
| 8429 | ··-·CJIS-5.5.2.2 | 8429 | ··-·CJIS-5.5.2.2 |
| 8430 | ··-·NIST-800-171-3.4.5 | 8430 | ··-·NIST-800-171-3.4.5 |
| 8431 | ··-·NIST-800-53-AC-6(1) | 8431 | ··-·NIST-800-53-AC-6(1) |
| 8432 | ··-·NIST-800-53-CM-6(a) | 8432 | ··-·NIST-800-53-CM-6(a) |
| Offset 8440, 16 lines modified | Offset 8440, 16 lines modified | ||
| 8440 | ··-·no_reboot_needed | 8440 | ··-·no_reboot_needed |
| 8441 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8441 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8442 | ··file: | 8442 | ··file: |
| 8443 | ····path:·/boot/grub2/user.cfg | 8443 | ····path:·/boot/grub2/user.cfg |
| 8444 | ····group:·'0' | 8444 | ····group:·'0' |
| 8445 | ··when: | 8445 | ··when: |
| 8446 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8447 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8446 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8447 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8448 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8448 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8449 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8449 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8450 | ··tags: | 8450 | ··tags: |
| 8451 | ··-·CCE-86009-8 | 8451 | ··-·CCE-86009-8 |
| 8452 | ··-·CJIS-5.5.2.2 | 8452 | ··-·CJIS-5.5.2.2 |
| 8453 | ··-·NIST-800-171-3.4.5 | 8453 | ··-·NIST-800-171-3.4.5 |
| 8454 | ··-·NIST-800-53-AC-6(1) | 8454 | ··-·NIST-800-53-AC-6(1) |
| Offset 8462, 15 lines modified | Offset 8462, 15 lines modified | ||
| 8462 | ··-·medium_severity | 8462 | ··-·medium_severity |
| 8463 | ··-·no_reboot_needed | 8463 | ··-·no_reboot_needed |
| 8464 | Remediation_Shell_script_⇲ | 8464 | Remediation_Shell_script_⇲ |
| 8465 | Complexity:·low | 8465 | Complexity:·low |
| 8466 | Disruption:·low | 8466 | Disruption:·low |
| 8467 | Strategy:···configure | 8467 | Strategy:···configure |
| 8468 | #·Remediation·is·applicable·only·in·certain·platforms | 8468 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8469 | if· | 8469 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8470 | chgrp·0·/boot/grub2/user.cfg | 8470 | chgrp·0·/boot/grub2/user.cfg |
| 8471 | else | 8471 | else |
| 8472 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8472 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8473 | fi | 8473 | fi |
| 8474 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 8474 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 8503, 16 lines modified | Offset 8503, 16 lines modified | ||
| 8503 | ··-·no_reboot_needed | 8503 | ··-·no_reboot_needed |
| 8504 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8504 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8505 | ··stat: | 8505 | ··stat: |
| 8506 | ····path:·/boot/grub2/grub.cfg | 8506 | ····path:·/boot/grub2/grub.cfg |
| 8507 | ··register:·file_exists | 8507 | ··register:·file_exists |
| 8508 | ··when: | 8508 | ··when: |
| 8509 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8510 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8509 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8510 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8511 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8511 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8512 | ··tags: | 8512 | ··tags: |
| 8513 | ··-·CCE-80805-5 | 8513 | ··-·CCE-80805-5 |
| 8514 | ··-·CJIS-5.5.2.2 | 8514 | ··-·CJIS-5.5.2.2 |
| 8515 | ··-·NIST-800-171-3.4.5 | 8515 | ··-·NIST-800-171-3.4.5 |
| 8516 | ··-·NIST-800-53-AC-6(1) | 8516 | ··-·NIST-800-53-AC-6(1) |
| 8517 | ··-·NIST-800-53-CM-6(a) | 8517 | ··-·NIST-800-53-CM-6(a) |
| Offset 8525, 16 lines modified | Offset 8525, 16 lines modified | ||
| 8525 | ··-·no_reboot_needed | 8525 | ··-·no_reboot_needed |
| 8526 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 8526 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 8527 | ··file: | 8527 | ··file: |
| 8528 | ····path:·/boot/grub2/grub.cfg | 8528 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 17851/22220 bytes (80.34%) of diff not shown. | |||
| Offset 62054, 22 lines modified | Offset 62054, 22 lines modified | ||
| 000f2650:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 000f2650:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 000f2660:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 000f2660:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 000f2670:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 000f2670:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 000f2680:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 000f2680:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 000f2690:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 000f2690:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 000f26a0:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 000f26a0:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 000f26b0:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 000f26b0:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 000f26c0:·6865·6e3a·0a20·202d·2027·22 | 000f26c0:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 000f26d0:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 000f26e0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 000f26f0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 000f2700:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 000f2710:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 000f2720:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000f2 | 000f26d0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 000f26e0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 000f26f0:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000f2700:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000f2710:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000f2720:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000f2730:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000f2740:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 000f2740:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 000f2750:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 000f2750:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 000f2760:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 000f2760:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 000f2770:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 000f2770:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 000f2780:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 000f2780:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 000f2790:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 000f2790:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 000f27a0:·2d20·4343·452d·3830·3830·302d·360a·2020··-·CCE-80800-6.·· | 000f27a0:·2d20·4343·452d·3830·3830·302d·360a·2020··-·CCE-80800-6.·· | ||
| Offset 62091, 22 lines modified | Offset 62091, 22 lines modified | ||
| 000f28a0:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 000f28a0:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 000f28b0:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 000f28b0:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 000f28c0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 000f28c0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 000f28d0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 000f28d0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 000f28e0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 000f28e0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 000f28f0:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | 000f28f0:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | ||
| 000f2900:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 000f2900:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 000f2910:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000f2920:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 000f2930:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000f2940:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000f2950:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 000f2960:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 000f2970:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000f29 | 000f2910:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 000f2920:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 000f2930:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 000f2940:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000f2950:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 000f2960:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000f2970:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000f2980:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 000f2990:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 000f2990:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 000f29a0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 000f29a0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 000f29b0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 000f29b0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 000f29c0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 000f29c0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 000f29d0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 000f29d0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 000f29e0:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | 000f29e0:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | ||
| 000f29f0:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | 000f29f0:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | ||
| Offset 62157, 19 lines modified | Offset 62157, 19 lines modified | ||
| 000f2cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | 000f2cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 000f2cd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | 000f2cd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | ||
| 000f2ce0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | 000f2ce0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | ||
| 000f2cf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | 000f2cf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 000f2d00:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 000f2d00:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 000f2d10:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 000f2d10:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 000f2d20:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 000f2d20:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 000f2d30:·2070·6c61·7466·6f72·6d73·0a69·6620· | 000f2d30:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 000f2d40:·2120·2d66·202f·7379·732f·6669·726d·7761··!·-f·/sys/firmwa | |||
| 000f2d50:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 000f2d60:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 000f2d | 000f2d40:·6d20·2d2d·7175·6965·7420·2d71·2067·7275··m·--quiet·-q·gru | ||
| 000f2d50:·6232·2d63·6f6d·6d6f·6e20·2661·6d70·3b26··b2-common·&& | |||
| 000f2d60:·616d·703b·205b·2021·202d·6620·2f73·7973··amp;·[·!·-f·/sys | |||
| 000f2d70:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 000f2d80:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | 000f2d80:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | ||
| 000f2d90:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | 000f2d90:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 000f2da0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | 000f2da0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 000f2db0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | 000f2db0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 000f2dc0:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | 000f2dc0:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | ||
| 000f2dd0:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | 000f2dd0:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | ||
| 000f2de0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 000f2de0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| Offset 62691, 22 lines modified | Offset 62691, 22 lines modified | ||
| 000f4e20:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 000f4e20:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 000f4e30:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 000f4e30:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 000f4e40:·6772·7562·322f·7573·6572·2e63·6667·0a20··grub2/user.cfg.· | 000f4e40:·6772·7562·322f·7573·6572·2e63·6667·0a20··grub2/user.cfg.· | ||
| 000f4e50:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 000f4e50:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 000f4e60:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | 000f4e60:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | ||
| 000f4e70:·722e·6366·670a·2020·7265·6769·7374·6572··r.cfg.··register | 000f4e70:·722e·6366·670a·2020·7265·6769·7374·6572··r.cfg.··register | ||
| 000f4e80:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 000f4e80:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 000f4e90:·7768·656e·3a0a·2020·2d20·2722· | 000f4e90:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 000f4ea0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 000f4eb0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 000f4ec0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 000f4ed0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 000f4ee0:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 000f4ef0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 000f4 | 000f4ea0:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 000f4eb0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 000f4ec0:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 000f4ed0:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 000f4ee0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 000f4ef0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 000f4f00:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 000f4f10:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 000f4f10:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 000f4f20:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 000f4f20:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 000f4f30:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 000f4f30:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 000f4f40:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 000f4f40:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 000f4f50:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 000f4f50:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 000f4f60:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 000f4f60:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 000f4f70:·202d·2043·4345·2d38·3630·3039·2d38·0a20···-·CCE-86009-8.· | 000f4f70:·202d·2043·4345·2d38·3630·3039·2d38·0a20···-·CCE-86009-8.· | ||
| Offset 62728, 22 lines modified | Offset 62728, 22 lines modified | ||
| 000f5070:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 000f5070:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 000f5080:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 000f5080:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 000f5090:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000f5090:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000f50a0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 000f50a0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 000f50b0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 000f50b0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 000f50c0:·322f·7573·6572·2e63·6667·0a20·2020·2067··2/user.cfg.····g | 000f50c0:·322f·7573·6572·2e63·6667·0a20·2020·2067··2/user.cfg.····g | ||
| 000f50d0:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 000f50d0:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 000f50e0:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000f50f0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 000f5100:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000f5110:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000f5120:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 000f5130:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 000f5140:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000f5 | 000f50e0:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 000f50f0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| Max diff block lines reached; 60146/69798 bytes (86.17%) of diff not shown. | |||
| Offset 8333, 16 lines modified | Offset 8333, 16 lines modified | ||
| 8333 | ··-·no_reboot_needed | 8333 | ··-·no_reboot_needed |
| 8334 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8334 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8335 | ··stat: | 8335 | ··stat: |
| 8336 | ····path:·/boot/grub2/grub.cfg | 8336 | ····path:·/boot/grub2/grub.cfg |
| 8337 | ··register:·file_exists | 8337 | ··register:·file_exists |
| 8338 | ··when: | 8338 | ··when: |
| 8339 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8340 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8339 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8340 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8341 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8341 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8342 | ··tags: | 8342 | ··tags: |
| 8343 | ··-·CCE-80800-6 | 8343 | ··-·CCE-80800-6 |
| 8344 | ··-·CJIS-5.5.2.2 | 8344 | ··-·CJIS-5.5.2.2 |
| 8345 | ··-·NIST-800-171-3.4.5 | 8345 | ··-·NIST-800-171-3.4.5 |
| 8346 | ··-·NIST-800-53-AC-6(1) | 8346 | ··-·NIST-800-53-AC-6(1) |
| 8347 | ··-·NIST-800-53-CM-6(a) | 8347 | ··-·NIST-800-53-CM-6(a) |
| Offset 8355, 16 lines modified | Offset 8355, 16 lines modified | ||
| 8355 | ··-·no_reboot_needed | 8355 | ··-·no_reboot_needed |
| 8356 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 8356 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 8357 | ··file: | 8357 | ··file: |
| 8358 | ····path:·/boot/grub2/grub.cfg | 8358 | ····path:·/boot/grub2/grub.cfg |
| 8359 | ····group:·'0' | 8359 | ····group:·'0' |
| 8360 | ··when: | 8360 | ··when: |
| 8361 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8362 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8361 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8362 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8363 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8363 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8364 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8364 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8365 | ··tags: | 8365 | ··tags: |
| 8366 | ··-·CCE-80800-6 | 8366 | ··-·CCE-80800-6 |
| 8367 | ··-·CJIS-5.5.2.2 | 8367 | ··-·CJIS-5.5.2.2 |
| 8368 | ··-·NIST-800-171-3.4.5 | 8368 | ··-·NIST-800-171-3.4.5 |
| 8369 | ··-·NIST-800-53-AC-6(1) | 8369 | ··-·NIST-800-53-AC-6(1) |
| Offset 8377, 15 lines modified | Offset 8377, 15 lines modified | ||
| 8377 | ··-·medium_severity | 8377 | ··-·medium_severity |
| 8378 | ··-·no_reboot_needed | 8378 | ··-·no_reboot_needed |
| 8379 | Remediation_Shell_script_⇲ | 8379 | Remediation_Shell_script_⇲ |
| 8380 | Complexity:·low | 8380 | Complexity:·low |
| 8381 | Disruption:·low | 8381 | Disruption:·low |
| 8382 | Strategy:···configure | 8382 | Strategy:···configure |
| 8383 | #·Remediation·is·applicable·only·in·certain·platforms | 8383 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8384 | if· | 8384 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8385 | chgrp·0·/boot/grub2/grub.cfg | 8385 | chgrp·0·/boot/grub2/grub.cfg |
| 8386 | else | 8386 | else |
| 8387 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8387 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8388 | fi | 8388 | fi |
| 8389 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 8389 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 8418, 16 lines modified | Offset 8418, 16 lines modified | ||
| 8418 | ··-·no_reboot_needed | 8418 | ··-·no_reboot_needed |
| 8419 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8419 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8420 | ··stat: | 8420 | ··stat: |
| 8421 | ····path:·/boot/grub2/user.cfg | 8421 | ····path:·/boot/grub2/user.cfg |
| 8422 | ··register:·file_exists | 8422 | ··register:·file_exists |
| 8423 | ··when: | 8423 | ··when: |
| 8424 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8425 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8424 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8425 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8426 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8426 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8427 | ··tags: | 8427 | ··tags: |
| 8428 | ··-·CCE-86009-8 | 8428 | ··-·CCE-86009-8 |
| 8429 | ··-·CJIS-5.5.2.2 | 8429 | ··-·CJIS-5.5.2.2 |
| 8430 | ··-·NIST-800-171-3.4.5 | 8430 | ··-·NIST-800-171-3.4.5 |
| 8431 | ··-·NIST-800-53-AC-6(1) | 8431 | ··-·NIST-800-53-AC-6(1) |
| 8432 | ··-·NIST-800-53-CM-6(a) | 8432 | ··-·NIST-800-53-CM-6(a) |
| Offset 8440, 16 lines modified | Offset 8440, 16 lines modified | ||
| 8440 | ··-·no_reboot_needed | 8440 | ··-·no_reboot_needed |
| 8441 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8441 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8442 | ··file: | 8442 | ··file: |
| 8443 | ····path:·/boot/grub2/user.cfg | 8443 | ····path:·/boot/grub2/user.cfg |
| 8444 | ····group:·'0' | 8444 | ····group:·'0' |
| 8445 | ··when: | 8445 | ··when: |
| 8446 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8447 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8446 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8447 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8448 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8448 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8449 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8449 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8450 | ··tags: | 8450 | ··tags: |
| 8451 | ··-·CCE-86009-8 | 8451 | ··-·CCE-86009-8 |
| 8452 | ··-·CJIS-5.5.2.2 | 8452 | ··-·CJIS-5.5.2.2 |
| 8453 | ··-·NIST-800-171-3.4.5 | 8453 | ··-·NIST-800-171-3.4.5 |
| 8454 | ··-·NIST-800-53-AC-6(1) | 8454 | ··-·NIST-800-53-AC-6(1) |
| Offset 8462, 15 lines modified | Offset 8462, 15 lines modified | ||
| 8462 | ··-·medium_severity | 8462 | ··-·medium_severity |
| 8463 | ··-·no_reboot_needed | 8463 | ··-·no_reboot_needed |
| 8464 | Remediation_Shell_script_⇲ | 8464 | Remediation_Shell_script_⇲ |
| 8465 | Complexity:·low | 8465 | Complexity:·low |
| 8466 | Disruption:·low | 8466 | Disruption:·low |
| 8467 | Strategy:···configure | 8467 | Strategy:···configure |
| 8468 | #·Remediation·is·applicable·only·in·certain·platforms | 8468 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8469 | if· | 8469 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8470 | chgrp·0·/boot/grub2/user.cfg | 8470 | chgrp·0·/boot/grub2/user.cfg |
| 8471 | else | 8471 | else |
| 8472 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8472 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8473 | fi | 8473 | fi |
| 8474 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 8474 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 8503, 16 lines modified | Offset 8503, 16 lines modified | ||
| 8503 | ··-·no_reboot_needed | 8503 | ··-·no_reboot_needed |
| 8504 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8504 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8505 | ··stat: | 8505 | ··stat: |
| 8506 | ····path:·/boot/grub2/grub.cfg | 8506 | ····path:·/boot/grub2/grub.cfg |
| 8507 | ··register:·file_exists | 8507 | ··register:·file_exists |
| 8508 | ··when: | 8508 | ··when: |
| 8509 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8510 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8509 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8510 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8511 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8511 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8512 | ··tags: | 8512 | ··tags: |
| 8513 | ··-·CCE-80805-5 | 8513 | ··-·CCE-80805-5 |
| 8514 | ··-·CJIS-5.5.2.2 | 8514 | ··-·CJIS-5.5.2.2 |
| 8515 | ··-·NIST-800-171-3.4.5 | 8515 | ··-·NIST-800-171-3.4.5 |
| 8516 | ··-·NIST-800-53-AC-6(1) | 8516 | ··-·NIST-800-53-AC-6(1) |
| 8517 | ··-·NIST-800-53-CM-6(a) | 8517 | ··-·NIST-800-53-CM-6(a) |
| Offset 8525, 16 lines modified | Offset 8525, 16 lines modified | ||
| 8525 | ··-·no_reboot_needed | 8525 | ··-·no_reboot_needed |
| 8526 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 8526 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 8527 | ··file: | 8527 | ··file: |
| 8528 | ····path:·/boot/grub2/grub.cfg | 8528 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 17851/22220 bytes (80.34%) of diff not shown. | |||
| Offset 190424, 22 lines modified | Offset 190424, 22 lines modified | ||
| 002e7d70:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | 002e7d70:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | ||
| 002e7d80:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | 002e7d80:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | ||
| 002e7d90:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 002e7d90:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 002e7da0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 002e7da0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 002e7db0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 002e7db0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 002e7dc0:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | 002e7dc0:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | ||
| 002e7dd0:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | 002e7dd0:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | ||
| 002e7de0:·2077·6865·6e3a·0a20·202d·2027·22 | 002e7de0:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 002e7df0:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 002e7e00:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 002e7e10:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 002e7e20:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 002e7e30:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | |||
| 002e7e40:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 002e7 | 002e7df0:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 002e7e00:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 002e7e10:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | |||
| 002e7e20:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 002e7e30:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002e7e40:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002e7e50:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002e7e60:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 002e7e60:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 002e7e70:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 002e7e70:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 002e7e80:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 002e7e80:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 002e7e90:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 002e7e90:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 002e7ea0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 002e7ea0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 002e7eb0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | 002e7eb0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 002e7ec0:·2020·2d20·4343·452d·3830·3830·302d·360a····-·CCE-80800-6. | 002e7ec0:·2020·2d20·4343·452d·3830·3830·302d·360a····-·CCE-80800-6. | ||
| Offset 190461, 22 lines modified | Offset 190461, 22 lines modified | ||
| 002e7fc0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | 002e7fc0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 002e7fd0:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | 002e7fd0:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | ||
| 002e7fe0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002e7fe0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002e7ff0:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.·· | 002e7ff0:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.·· | ||
| 002e8000:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 002e8000:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 002e8010:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.··· | 002e8010:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.··· | ||
| 002e8020:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | 002e8020:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | ||
| 002e8030:·656e·3a0a·2020·2d20·2722· | 002e8030:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 002e8040:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 002e8050:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 002e8060:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 002e8070:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 002e8080:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 002e8090:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 002e80 | 002e8040:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 002e8050:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 002e8060:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 002e8070:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 002e8080:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 002e8090:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002e80a0:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 002e80b0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 002e80b0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 002e80c0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 002e80c0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 002e80d0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 002e80d0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 002e80e0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 002e80e0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 002e80f0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 002e80f0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 002e8100:·6572·225d·0a20·202d·2066·696c·655f·6578··er"].··-·file_ex | 002e8100:·6572·225d·0a20·202d·2066·696c·655f·6578··er"].··-·file_ex | ||
| 002e8110:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def | 002e8110:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def | ||
| Offset 190528, 19 lines modified | Offset 190528, 19 lines modified | ||
| 002e83f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | 002e83f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 002e8400:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | 002e8400:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | ||
| 002e8410:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | 002e8410:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 002e8420:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 002e8420:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 002e8430:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 002e8430:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 002e8440:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 002e8440:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 002e8450:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 002e8450:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 002e8460:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm | |||
| 002e8470:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 002e8480:·2661·6d70·3b20·7270·6d20·2d2d·7175·6965··&·rpm·--quie | |||
| 002e84 | 002e8460:·7270·6d20·2d2d·7175·6965·7420·2d71·2067··rpm·--quiet·-q·g | ||
| 002e8470:·7275·6232·2d63·6f6d·6d6f·6e20·2661·6d70··rub2-common·& | |||
| 002e8480:·3b26·616d·703b·205b·2021·202d·6620·2f73··;&·[·!·-f·/s | |||
| 002e8490:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | |||
| 002e84a0:· | 002e84a0:·5d20·2661·6d70·3b26·616d·703b·207b·205b··]·&&·{·[ | ||
| 002e84b0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | 002e84b0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 002e84c0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | 002e84c0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 002e84d0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | 002e84d0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 002e84e0:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | 002e84e0:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 002e84f0:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | 002e84f0:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | ||
| 002e8500:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 002e8500:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 002e8510:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | 002e8510:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | ||
| Offset 191061, 22 lines modified | Offset 191061, 22 lines modified | ||
| 002ea540:·0a2d·206e·616d·653a·2054·6573·7420·666f··.-·name:·Test·fo | 002ea540:·0a2d·206e·616d·653a·2054·6573·7420·666f··.-·name:·Test·fo | ||
| 002ea550:·7220·6578·6973·7465·6e63·6520·2f62·6f6f··r·existence·/boo | 002ea550:·7220·6578·6973·7465·6e63·6520·2f62·6f6f··r·existence·/boo | ||
| 002ea560:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | 002ea560:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | ||
| 002ea570:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | 002ea570:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | ||
| 002ea580:·683a·202f·626f·6f74·2f67·7275·6232·2f75··h:·/boot/grub2/u | 002ea580:·683a·202f·626f·6f74·2f67·7275·6232·2f75··h:·/boot/grub2/u | ||
| 002ea590:·7365·722e·6366·670a·2020·7265·6769·7374··ser.cfg.··regist | 002ea590:·7365·722e·6366·670a·2020·7265·6769·7374··ser.cfg.··regist | ||
| 002ea5a0:·6572·3a20·6669·6c65·5f65·7869·7374·730a··er:·file_exists. | 002ea5a0:·6572·3a20·6669·6c65·5f65·7869·7374·730a··er:·file_exists. | ||
| 002ea5b0:·2020·7768·656e·3a0a·2020·2d20·2722· | 002ea5b0:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 002ea5c0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 002ea5d0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 002ea5e0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 002ea5f0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 002ea600:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 002ea610:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002ea | 002ea5c0:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 002ea5d0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 002ea5e0:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | |||
| 002ea5f0:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 002ea600:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 002ea610:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 002ea620:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 002ea630:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 002ea630:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 002ea640:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 002ea640:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 002ea650:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | 002ea650:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 002ea660:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | 002ea660:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 002ea670:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | 002ea670:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 002ea680:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | 002ea680:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 002ea690:·0a20·202d·2043·4345·2d38·3630·3039·2d38··.··-·CCE-86009-8 | 002ea690:·0a20·202d·2043·4345·2d38·3630·3039·2d38··.··-·CCE-86009-8 | ||
| Offset 191098, 22 lines modified | Offset 191098, 22 lines modified | ||
| 002ea790:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | 002ea790:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | ||
| 002ea7a0:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | 002ea7a0:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | ||
| 002ea7b0:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | 002ea7b0:·202f·626f·6f74·2f67·7275·6232·2f75·7365···/boot/grub2/use | ||
| 002ea7c0:·722e·6366·670a·2020·6669·6c65·3a0a·2020··r.cfg.··file:.·· | 002ea7c0:·722e·6366·670a·2020·6669·6c65·3a0a·2020··r.cfg.··file:.·· | ||
| 002ea7d0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 002ea7d0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 002ea7e0:·7562·322f·7573·6572·2e63·6667·0a20·2020··ub2/user.cfg.··· | 002ea7e0:·7562·322f·7573·6572·2e63·6667·0a20·2020··ub2/user.cfg.··· | ||
| 002ea7f0:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | 002ea7f0:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh | ||
| 002ea800:·656e·3a0a·2020·2d20·2722· | 002ea800:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 002ea810:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 002ea820:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 002ea830:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 002ea840:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 002ea850:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 002ea860:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 002ea8 | 002ea810:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 002ea820:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 002ea830:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| Max diff block lines reached; 59932/69594 bytes (86.12%) of diff not shown. | |||
| Offset 42340, 16 lines modified | Offset 42340, 16 lines modified | ||
| 42340 | ··-·no_reboot_needed | 42340 | ··-·no_reboot_needed |
| 42341 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 42341 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 42342 | ··stat: | 42342 | ··stat: |
| 42343 | ····path:·/boot/grub2/grub.cfg | 42343 | ····path:·/boot/grub2/grub.cfg |
| 42344 | ··register:·file_exists | 42344 | ··register:·file_exists |
| 42345 | ··when: | 42345 | ··when: |
| 42346 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42347 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42346 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42347 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42348 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42348 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42349 | ··tags: | 42349 | ··tags: |
| 42350 | ··-·CCE-80800-6 | 42350 | ··-·CCE-80800-6 |
| 42351 | ··-·CJIS-5.5.2.2 | 42351 | ··-·CJIS-5.5.2.2 |
| 42352 | ··-·NIST-800-171-3.4.5 | 42352 | ··-·NIST-800-171-3.4.5 |
| 42353 | ··-·NIST-800-53-AC-6(1) | 42353 | ··-·NIST-800-53-AC-6(1) |
| 42354 | ··-·NIST-800-53-CM-6(a) | 42354 | ··-·NIST-800-53-CM-6(a) |
| Offset 42362, 16 lines modified | Offset 42362, 16 lines modified | ||
| 42362 | ··-·no_reboot_needed | 42362 | ··-·no_reboot_needed |
| 42363 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 42363 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 42364 | ··file: | 42364 | ··file: |
| 42365 | ····path:·/boot/grub2/grub.cfg | 42365 | ····path:·/boot/grub2/grub.cfg |
| 42366 | ····group:·'0' | 42366 | ····group:·'0' |
| 42367 | ··when: | 42367 | ··when: |
| 42368 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42369 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42368 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42369 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42371 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42371 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42372 | ··tags: | 42372 | ··tags: |
| 42373 | ··-·CCE-80800-6 | 42373 | ··-·CCE-80800-6 |
| 42374 | ··-·CJIS-5.5.2.2 | 42374 | ··-·CJIS-5.5.2.2 |
| 42375 | ··-·NIST-800-171-3.4.5 | 42375 | ··-·NIST-800-171-3.4.5 |
| 42376 | ··-·NIST-800-53-AC-6(1) | 42376 | ··-·NIST-800-53-AC-6(1) |
| Offset 42384, 15 lines modified | Offset 42384, 15 lines modified | ||
| 42384 | ··-·medium_severity | 42384 | ··-·medium_severity |
| 42385 | ··-·no_reboot_needed | 42385 | ··-·no_reboot_needed |
| 42386 | Remediation_Shell_script_⇲ | 42386 | Remediation_Shell_script_⇲ |
| 42387 | Complexity:·low | 42387 | Complexity:·low |
| 42388 | Disruption:·low | 42388 | Disruption:·low |
| 42389 | Strategy:···configure | 42389 | Strategy:···configure |
| 42390 | #·Remediation·is·applicable·only·in·certain·platforms | 42390 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42391 | if· | 42391 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42392 | chgrp·0·/boot/grub2/grub.cfg | 42392 | chgrp·0·/boot/grub2/grub.cfg |
| 42393 | else | 42393 | else |
| 42394 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42394 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42395 | fi | 42395 | fi |
| 42396 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** | 42396 | ***·Rule ·Verify·/boot/grub2/user.cfg·Group·Ownership· [ref]·*** |
| Offset 42425, 16 lines modified | Offset 42425, 16 lines modified | ||
| 42425 | ··-·no_reboot_needed | 42425 | ··-·no_reboot_needed |
| 42426 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 42426 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 42427 | ··stat: | 42427 | ··stat: |
| 42428 | ····path:·/boot/grub2/user.cfg | 42428 | ····path:·/boot/grub2/user.cfg |
| 42429 | ··register:·file_exists | 42429 | ··register:·file_exists |
| 42430 | ··when: | 42430 | ··when: |
| 42431 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42432 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42431 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42432 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42433 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42433 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42434 | ··tags: | 42434 | ··tags: |
| 42435 | ··-·CCE-86009-8 | 42435 | ··-·CCE-86009-8 |
| 42436 | ··-·CJIS-5.5.2.2 | 42436 | ··-·CJIS-5.5.2.2 |
| 42437 | ··-·NIST-800-171-3.4.5 | 42437 | ··-·NIST-800-171-3.4.5 |
| 42438 | ··-·NIST-800-53-AC-6(1) | 42438 | ··-·NIST-800-53-AC-6(1) |
| 42439 | ··-·NIST-800-53-CM-6(a) | 42439 | ··-·NIST-800-53-CM-6(a) |
| Offset 42447, 16 lines modified | Offset 42447, 16 lines modified | ||
| 42447 | ··-·no_reboot_needed | 42447 | ··-·no_reboot_needed |
| 42448 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 42448 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 42449 | ··file: | 42449 | ··file: |
| 42450 | ····path:·/boot/grub2/user.cfg | 42450 | ····path:·/boot/grub2/user.cfg |
| 42451 | ····group:·'0' | 42451 | ····group:·'0' |
| 42452 | ··when: | 42452 | ··when: |
| 42453 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42454 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42453 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42454 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42455 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42455 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42456 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42456 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42457 | ··tags: | 42457 | ··tags: |
| 42458 | ··-·CCE-86009-8 | 42458 | ··-·CCE-86009-8 |
| 42459 | ··-·CJIS-5.5.2.2 | 42459 | ··-·CJIS-5.5.2.2 |
| 42460 | ··-·NIST-800-171-3.4.5 | 42460 | ··-·NIST-800-171-3.4.5 |
| 42461 | ··-·NIST-800-53-AC-6(1) | 42461 | ··-·NIST-800-53-AC-6(1) |
| Offset 42469, 15 lines modified | Offset 42469, 15 lines modified | ||
| 42469 | ··-·medium_severity | 42469 | ··-·medium_severity |
| 42470 | ··-·no_reboot_needed | 42470 | ··-·no_reboot_needed |
| 42471 | Remediation_Shell_script_⇲ | 42471 | Remediation_Shell_script_⇲ |
| 42472 | Complexity:·low | 42472 | Complexity:·low |
| 42473 | Disruption:·low | 42473 | Disruption:·low |
| 42474 | Strategy:···configure | 42474 | Strategy:···configure |
| 42475 | #·Remediation·is·applicable·only·in·certain·platforms | 42475 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42476 | if· | 42476 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42477 | chgrp·0·/boot/grub2/user.cfg | 42477 | chgrp·0·/boot/grub2/user.cfg |
| 42478 | else | 42478 | else |
| 42479 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42479 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42480 | fi | 42480 | fi |
| 42481 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 42481 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 42510, 16 lines modified | Offset 42510, 16 lines modified | ||
| 42510 | ··-·no_reboot_needed | 42510 | ··-·no_reboot_needed |
| 42511 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 42511 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 42512 | ··stat: | 42512 | ··stat: |
| 42513 | ····path:·/boot/grub2/grub.cfg | 42513 | ····path:·/boot/grub2/grub.cfg |
| 42514 | ··register:·file_exists | 42514 | ··register:·file_exists |
| 42515 | ··when: | 42515 | ··when: |
| 42516 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42517 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42516 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42517 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42518 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42518 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42519 | ··tags: | 42519 | ··tags: |
| 42520 | ··-·CCE-80805-5 | 42520 | ··-·CCE-80805-5 |
| 42521 | ··-·CJIS-5.5.2.2 | 42521 | ··-·CJIS-5.5.2.2 |
| 42522 | ··-·NIST-800-171-3.4.5 | 42522 | ··-·NIST-800-171-3.4.5 |
| 42523 | ··-·NIST-800-53-AC-6(1) | 42523 | ··-·NIST-800-53-AC-6(1) |
| 42524 | ··-·NIST-800-53-CM-6(a) | 42524 | ··-·NIST-800-53-CM-6(a) |
| Offset 42532, 16 lines modified | Offset 42532, 16 lines modified | ||
| 42532 | ··-·no_reboot_needed | 42532 | ··-·no_reboot_needed |
| 42533 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 42533 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 42534 | ··file: | 42534 | ··file: |
| 42535 | ····path:·/boot/grub2/grub.cfg | 42535 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 17907/22292 bytes (80.33%) of diff not shown. | |||
| Offset 137275, 22 lines modified | Offset 137275, 22 lines modified | ||
| 002183a0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 002183a0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 002183b0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 002183b0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 002183c0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002183c0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002183d0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 002183d0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 002183e0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002183e0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002183f0:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 002183f0:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 00218400:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 00218400:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 00218410:·7768·656e·3a0a·2020·2d20·2722· | 00218410:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 00218420:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 00218430:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 00218440:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 00218450:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 00218460:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 00218470:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 002184 | 00218420:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 00218430:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00218440:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 00218450:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00218460:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00218470:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 00218480:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 00218490:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 00218490:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 002184a0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 002184a0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 002184b0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 002184b0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 002184c0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 002184c0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 002184d0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 002184d0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 002184e0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 002184e0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 002184f0:·202d·2043·4345·2d38·3038·3030·2d36·0a20···-·CCE-80800-6.· | 002184f0:·202d·2043·4345·2d38·3038·3030·2d36·0a20···-·CCE-80800-6.· | ||
| Offset 137312, 22 lines modified | Offset 137312, 22 lines modified | ||
| 002185f0:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | 002185f0:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | ||
| 00218600:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | 00218600:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | ||
| 00218610:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 00218610:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 00218620:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 00218620:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 00218630:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 00218630:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 00218640:·6232·2f67·7275·622e·6366·670a·2020·2020··b2/grub.cfg.···· | 00218640:·6232·2f67·7275·622e·6366·670a·2020·2020··b2/grub.cfg.···· | ||
| 00218650:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | 00218650:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | ||
| 00218660:·6e3a·0a20·202d·2027·22 | 00218660:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 00218670:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 00218680:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 00218690:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002186a0:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 002186b0:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | |||
| 002186c0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 002186 | 00218670:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 00218680:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00218690:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 002186a0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 002186b0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002186c0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002186d0:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 002186e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 002186e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 002186f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 002186f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 00218700:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 00218700:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 00218710:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 00218710:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 00218720:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 00218720:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 00218730:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | 00218730:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | ||
| 00218740:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | 00218740:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | ||
| Offset 137378, 19 lines modified | Offset 137378, 19 lines modified | ||
| 00218a10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | 00218a10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 00218a20:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | 00218a20:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 00218a30:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | 00218a30:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | ||
| 00218a40:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | 00218a40:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 00218a50:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | 00218a50:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 00218a60:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | 00218a60:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 00218a70:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | 00218a70:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 00218a80:·6e20·706c·6174·666f·726d·730a·6966·20 | 00218a80:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | ||
| 00218a90:·2021·202d·6620·2f73·7973·2f66·6972·6d77···!·-f·/sys/firmw | |||
| 00218aa0:·6172·652f·6566·6920·5d20·2661·6d70·3b26··are/efi·]·&& | |||
| 00218ab0:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 00218a | 00218a90:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | ||
| 00218aa0:·7562·322d·636f·6d6d·6f6e·2026·616d·703b··ub2-common·& | |||
| 00218ab0:·2661·6d70·3b20·5b20·2120·2d66·202f·7379··&·[·!·-f·/sy | |||
| 00218ac0:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 00218ad0:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | 00218ad0:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 00218ae0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | 00218ae0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 00218af0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | 00218af0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 00218b00:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | 00218b00:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 00218b10:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | 00218b10:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 00218b20:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | 00218b20:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | ||
| 00218b30:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00218b30:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| Offset 137888, 22 lines modified | Offset 137888, 22 lines modified | ||
| 0021a9f0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | 0021a9f0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | ||
| 0021aa00:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | 0021aa00:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | ||
| 0021aa10:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 0021aa10:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 0021aa20:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 0021aa20:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 0021aa30:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 0021aa30:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 0021aa40:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | 0021aa40:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe | ||
| 0021aa50:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | 0021aa50:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | ||
| 0021aa60:·2077·6865·6e3a·0a20·202d·2027·22 | 0021aa60:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 0021aa70:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 0021aa80:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 0021aa90:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 0021aaa0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 0021aab0:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | |||
| 0021aac0:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 0021aa | 0021aa70:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 0021aa80:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0021aa90:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | |||
| 0021aaa0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 0021aab0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 0021aac0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 0021aad0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 0021aae0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 0021aae0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 0021aaf0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 0021aaf0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 0021ab00:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 0021ab00:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 0021ab10:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 0021ab10:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 0021ab20:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 0021ab20:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 0021ab30:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | 0021ab30:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 0021ab40:·2020·2d20·4343·452d·3830·3830·352d·350a····-·CCE-80805-5. | 0021ab40:·2020·2d20·4343·452d·3830·3830·352d·350a····-·CCE-80805-5. | ||
| Offset 137924, 22 lines modified | Offset 137924, 22 lines modified | ||
| 0021ac30:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | 0021ac30:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | ||
| 0021ac40:·6d65·3a20·456e·7375·7265·206f·776e·6572··me:·Ensure·owner | 0021ac40:·6d65·3a20·456e·7375·7265·206f·776e·6572··me:·Ensure·owner | ||
| 0021ac50:·2030·206f·6e20·2f62·6f6f·742f·6772·7562···0·on·/boot/grub | 0021ac50:·2030·206f·6e20·2f62·6f6f·742f·6772·7562···0·on·/boot/grub | ||
| 0021ac60:·322f·6772·7562·2e63·6667·0a20·2066·696c··2/grub.cfg.··fil | 0021ac60:·322f·6772·7562·2e63·6667·0a20·2066·696c··2/grub.cfg.··fil | ||
| 0021ac70:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | 0021ac70:·653a·0a20·2020·2070·6174·683a·202f·626f··e:.····path:·/bo | ||
| 0021ac80:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 0021ac80:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 0021ac90:·670a·2020·2020·6f77·6e65·723a·2027·3027··g.····owner:·'0' | 0021ac90:·670a·2020·2020·6f77·6e65·723a·2027·3027··g.····owner:·'0' | ||
| 0021aca0:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 0021aca0:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 0021acb0:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 0021acc0:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 0021acd0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 0021ace0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 0021acf0:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | |||
| 0021ad00:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 0021a | 0021acb0:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | ||
| 0021acc0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0021acd0:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | |||
| Max diff block lines reached; 2098/11760 bytes (17.84%) of diff not shown. | |||
| Offset 29197, 16 lines modified | Offset 29197, 16 lines modified | ||
| 29197 | ··-·no_reboot_needed | 29197 | ··-·no_reboot_needed |
| 29198 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 29198 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 29199 | ··stat: | 29199 | ··stat: |
| 29200 | ····path:·/boot/grub2/grub.cfg | 29200 | ····path:·/boot/grub2/grub.cfg |
| 29201 | ··register:·file_exists | 29201 | ··register:·file_exists |
| 29202 | ··when: | 29202 | ··when: |
| 29203 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29204 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29203 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29204 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29205 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29205 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29206 | ··tags: | 29206 | ··tags: |
| 29207 | ··-·CCE-80800-6 | 29207 | ··-·CCE-80800-6 |
| 29208 | ··-·CJIS-5.5.2.2 | 29208 | ··-·CJIS-5.5.2.2 |
| 29209 | ··-·NIST-800-171-3.4.5 | 29209 | ··-·NIST-800-171-3.4.5 |
| 29210 | ··-·NIST-800-53-AC-6(1) | 29210 | ··-·NIST-800-53-AC-6(1) |
| 29211 | ··-·NIST-800-53-CM-6(a) | 29211 | ··-·NIST-800-53-CM-6(a) |
| Offset 29219, 16 lines modified | Offset 29219, 16 lines modified | ||
| 29219 | ··-·no_reboot_needed | 29219 | ··-·no_reboot_needed |
| 29220 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 29220 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 29221 | ··file: | 29221 | ··file: |
| 29222 | ····path:·/boot/grub2/grub.cfg | 29222 | ····path:·/boot/grub2/grub.cfg |
| 29223 | ····group:·'0' | 29223 | ····group:·'0' |
| 29224 | ··when: | 29224 | ··when: |
| 29225 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29226 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29225 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29226 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29227 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29227 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29228 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 29228 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 29229 | ··tags: | 29229 | ··tags: |
| 29230 | ··-·CCE-80800-6 | 29230 | ··-·CCE-80800-6 |
| 29231 | ··-·CJIS-5.5.2.2 | 29231 | ··-·CJIS-5.5.2.2 |
| 29232 | ··-·NIST-800-171-3.4.5 | 29232 | ··-·NIST-800-171-3.4.5 |
| 29233 | ··-·NIST-800-53-AC-6(1) | 29233 | ··-·NIST-800-53-AC-6(1) |
| Offset 29241, 15 lines modified | Offset 29241, 15 lines modified | ||
| 29241 | ··-·medium_severity | 29241 | ··-·medium_severity |
| 29242 | ··-·no_reboot_needed | 29242 | ··-·no_reboot_needed |
| 29243 | Remediation_Shell_script_⇲ | 29243 | Remediation_Shell_script_⇲ |
| 29244 | Complexity:·low | 29244 | Complexity:·low |
| 29245 | Disruption:·low | 29245 | Disruption:·low |
| 29246 | Strategy:···configure | 29246 | Strategy:···configure |
| 29247 | #·Remediation·is·applicable·only·in·certain·platforms | 29247 | #·Remediation·is·applicable·only·in·certain·platforms |
| 29248 | if· | 29248 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 29249 | chgrp·0·/boot/grub2/grub.cfg | 29249 | chgrp·0·/boot/grub2/grub.cfg |
| 29250 | else | 29250 | else |
| 29251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 29251 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 29252 | fi | 29252 | fi |
| 29253 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 29253 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 29282, 16 lines modified | Offset 29282, 16 lines modified | ||
| 29282 | ··-·no_reboot_needed | 29282 | ··-·no_reboot_needed |
| 29283 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 29283 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 29284 | ··stat: | 29284 | ··stat: |
| 29285 | ····path:·/boot/grub2/grub.cfg | 29285 | ····path:·/boot/grub2/grub.cfg |
| 29286 | ··register:·file_exists | 29286 | ··register:·file_exists |
| 29287 | ··when: | 29287 | ··when: |
| 29288 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29289 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29288 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29289 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29290 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29290 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29291 | ··tags: | 29291 | ··tags: |
| 29292 | ··-·CCE-80805-5 | 29292 | ··-·CCE-80805-5 |
| 29293 | ··-·CJIS-5.5.2.2 | 29293 | ··-·CJIS-5.5.2.2 |
| 29294 | ··-·NIST-800-171-3.4.5 | 29294 | ··-·NIST-800-171-3.4.5 |
| 29295 | ··-·NIST-800-53-AC-6(1) | 29295 | ··-·NIST-800-53-AC-6(1) |
| 29296 | ··-·NIST-800-53-CM-6(a) | 29296 | ··-·NIST-800-53-CM-6(a) |
| Offset 29304, 16 lines modified | Offset 29304, 16 lines modified | ||
| 29304 | ··-·no_reboot_needed | 29304 | ··-·no_reboot_needed |
| 29305 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 29305 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 29306 | ··file: | 29306 | ··file: |
| 29307 | ····path:·/boot/grub2/grub.cfg | 29307 | ····path:·/boot/grub2/grub.cfg |
| 29308 | ····owner:·'0' | 29308 | ····owner:·'0' |
| 29309 | ··when: | 29309 | ··when: |
| 29310 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29311 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29310 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29311 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29312 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29312 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29313 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 29313 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 29314 | ··tags: | 29314 | ··tags: |
| 29315 | ··-·CCE-80805-5 | 29315 | ··-·CCE-80805-5 |
| 29316 | ··-·CJIS-5.5.2.2 | 29316 | ··-·CJIS-5.5.2.2 |
| 29317 | ··-·NIST-800-171-3.4.5 | 29317 | ··-·NIST-800-171-3.4.5 |
| 29318 | ··-·NIST-800-53-AC-6(1) | 29318 | ··-·NIST-800-53-AC-6(1) |
| Offset 29326, 15 lines modified | Offset 29326, 15 lines modified | ||
| 29326 | ··-·medium_severity | 29326 | ··-·medium_severity |
| 29327 | ··-·no_reboot_needed | 29327 | ··-·no_reboot_needed |
| 29328 | Remediation_Shell_script_⇲ | 29328 | Remediation_Shell_script_⇲ |
| 29329 | Complexity:·low | 29329 | Complexity:·low |
| 29330 | Disruption:·low | 29330 | Disruption:·low |
| 29331 | Strategy:···configure | 29331 | Strategy:···configure |
| 29332 | #·Remediation·is·applicable·only·in·certain·platforms | 29332 | #·Remediation·is·applicable·only·in·certain·platforms |
| 29333 | if· | 29333 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 29334 | chown·0·/boot/grub2/grub.cfg | 29334 | chown·0·/boot/grub2/grub.cfg |
| 29335 | else | 29335 | else |
| 29336 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 29336 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 29337 | fi | 29337 | fi |
| 29338 | Group ·Network·Configuration·and·Firewalls· Group·contains·9·groups·and·12·rules | 29338 | Group ·Network·Configuration·and·Firewalls· Group·contains·9·groups·and·12·rules |
| Offset 204248, 22 lines modified | Offset 204248, 22 lines modified | ||
| 0031dd70:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 0031dd70:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 0031dd80:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 0031dd80:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 0031dd90:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 0031dd90:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 0031dda0:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 0031dda0:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 0031ddb0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 0031ddb0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 0031ddc0:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 0031ddc0:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 0031ddd0:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 0031ddd0:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 0031dde0:·6865·6e3a·0a20·202d·2027·22 | 0031dde0:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 0031ddf0:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 0031de00:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 0031de10:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 0031de20:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 0031de30:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 0031de40:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0031d | 0031ddf0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 0031de00:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0031de10:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 0031de20:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 0031de30:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 0031de40:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 0031de50:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 0031de60:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 0031de60:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 0031de70:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 0031de70:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 0031de80:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 0031de80:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 0031de90:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 0031de90:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 0031dea0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 0031dea0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 0031deb0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 0031deb0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 0031dec0:·2d20·4343·452d·3830·3830·302d·360a·2020··-·CCE-80800-6.·· | 0031dec0:·2d20·4343·452d·3830·3830·302d·360a·2020··-·CCE-80800-6.·· | ||
| Offset 204285, 22 lines modified | Offset 204285, 22 lines modified | ||
| 0031dfc0:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 0031dfc0:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 0031dfd0:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 0031dfd0:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 0031dfe0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 0031dfe0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 0031dff0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 0031dff0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 0031e000:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 0031e000:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 0031e010:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | 0031e010:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | ||
| 0031e020:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 0031e020:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 0031e030:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 0031e040:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 0031e050:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 0031e060:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 0031e070:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 0031e080:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 0031e090:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0031e0 | 0031e030:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 0031e040:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 0031e050:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0031e060:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 0031e070:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 0031e080:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 0031e090:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 0031e0a0:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 0031e0b0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 0031e0b0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 0031e0c0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 0031e0c0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 0031e0d0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 0031e0d0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 0031e0e0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 0031e0e0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 0031e0f0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 0031e0f0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 0031e100:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | 0031e100:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | ||
| 0031e110:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | 0031e110:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | ||
| Offset 204351, 19 lines modified | Offset 204351, 19 lines modified | ||
| 0031e3e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | 0031e3e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0031e3f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | 0031e3f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | ||
| 0031e400:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | 0031e400:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | ||
| 0031e410:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | 0031e410:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0031e420:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 0031e420:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0031e430:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 0031e430:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0031e440:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 0031e440:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0031e450:·2070·6c61·7466·6f72·6d73·0a69·6620· | 0031e450:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 0031e460:·2120·2d66·202f·7379·732f·6669·726d·7761··!·-f·/sys/firmwa | |||
| 0031e470:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 0031e480:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 0031e4 | 0031e460:·6d20·2d2d·7175·6965·7420·2d71·2067·7275··m·--quiet·-q·gru | ||
| 0031e470:·6232·2d63·6f6d·6d6f·6e20·2661·6d70·3b26··b2-common·&& | |||
| 0031e480:·616d·703b·205b·2021·202d·6620·2f73·7973··amp;·[·!·-f·/sys | |||
| 0031e490:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 0031e4a0:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | 0031e4a0:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | ||
| 0031e4b0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | 0031e4b0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 0031e4c0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | 0031e4c0:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 0031e4d0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | 0031e4d0:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 0031e4e0:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | 0031e4e0:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | ||
| 0031e4f0:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | 0031e4f0:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | ||
| 0031e500:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 0031e500:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| Offset 204861, 22 lines modified | Offset 204861, 22 lines modified | ||
| 003203c0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 003203c0:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 003203d0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 003203d0:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 003203e0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 003203e0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 003203f0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 003203f0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 00320400:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 00320400:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 00320410:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 00320410:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 00320420:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 00320420:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 00320430:·7768·656e·3a0a·2020·2d20·2722· | 00320430:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 00320440:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 00320450:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 00320460:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 00320470:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 00320480:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 00320490:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 003204 | 00320440:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 00320450:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00320460:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 00320470:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00320480:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00320490:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 003204a0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 003204b0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 003204b0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 003204c0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 003204c0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 003204d0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 003204d0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 003204e0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 003204e0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 003204f0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 003204f0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 00320500:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 00320500:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 00320510:·202d·2043·4345·2d38·3038·3035·2d35·0a20···-·CCE-80805-5.· | 00320510:·202d·2043·4345·2d38·3038·3035·2d35·0a20···-·CCE-80805-5.· | ||
| Offset 204897, 22 lines modified | Offset 204897, 22 lines modified | ||
| 00320600:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | 00320600:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | ||
| 00320610:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | 00320610:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | ||
| 00320620:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 00320620:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 00320630:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | 00320630:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | ||
| 00320640:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 00320640:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 00320650:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00320650:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 00320660:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | 00320660:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | ||
| 00320670:·2020·7768·656e·3a0a·2020·2d20·2722· | 00320670:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 00320680:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 00320690:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 003206a0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 003206b0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 003206c0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 003206d0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 003206 | 00320680:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 00320690:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| Max diff block lines reached; 2098/11760 bytes (17.84%) of diff not shown. | |||
| Offset 48707, 16 lines modified | Offset 48707, 16 lines modified | ||
| 48707 | ··-·no_reboot_needed | 48707 | ··-·no_reboot_needed |
| 48708 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 48708 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 48709 | ··stat: | 48709 | ··stat: |
| 48710 | ····path:·/boot/grub2/grub.cfg | 48710 | ····path:·/boot/grub2/grub.cfg |
| 48711 | ··register:·file_exists | 48711 | ··register:·file_exists |
| 48712 | ··when: | 48712 | ··when: |
| 48713 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48714 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48713 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48714 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48715 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48715 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48716 | ··tags: | 48716 | ··tags: |
| 48717 | ··-·CCE-80800-6 | 48717 | ··-·CCE-80800-6 |
| 48718 | ··-·CJIS-5.5.2.2 | 48718 | ··-·CJIS-5.5.2.2 |
| 48719 | ··-·NIST-800-171-3.4.5 | 48719 | ··-·NIST-800-171-3.4.5 |
| 48720 | ··-·NIST-800-53-AC-6(1) | 48720 | ··-·NIST-800-53-AC-6(1) |
| 48721 | ··-·NIST-800-53-CM-6(a) | 48721 | ··-·NIST-800-53-CM-6(a) |
| Offset 48729, 16 lines modified | Offset 48729, 16 lines modified | ||
| 48729 | ··-·no_reboot_needed | 48729 | ··-·no_reboot_needed |
| 48730 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 48730 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 48731 | ··file: | 48731 | ··file: |
| 48732 | ····path:·/boot/grub2/grub.cfg | 48732 | ····path:·/boot/grub2/grub.cfg |
| 48733 | ····group:·'0' | 48733 | ····group:·'0' |
| 48734 | ··when: | 48734 | ··when: |
| 48735 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48736 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48735 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48736 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48737 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48737 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48738 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 48738 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 48739 | ··tags: | 48739 | ··tags: |
| 48740 | ··-·CCE-80800-6 | 48740 | ··-·CCE-80800-6 |
| 48741 | ··-·CJIS-5.5.2.2 | 48741 | ··-·CJIS-5.5.2.2 |
| 48742 | ··-·NIST-800-171-3.4.5 | 48742 | ··-·NIST-800-171-3.4.5 |
| 48743 | ··-·NIST-800-53-AC-6(1) | 48743 | ··-·NIST-800-53-AC-6(1) |
| Offset 48751, 15 lines modified | Offset 48751, 15 lines modified | ||
| 48751 | ··-·medium_severity | 48751 | ··-·medium_severity |
| 48752 | ··-·no_reboot_needed | 48752 | ··-·no_reboot_needed |
| 48753 | Remediation_Shell_script_⇲ | 48753 | Remediation_Shell_script_⇲ |
| 48754 | Complexity:·low | 48754 | Complexity:·low |
| 48755 | Disruption:·low | 48755 | Disruption:·low |
| 48756 | Strategy:···configure | 48756 | Strategy:···configure |
| 48757 | #·Remediation·is·applicable·only·in·certain·platforms | 48757 | #·Remediation·is·applicable·only·in·certain·platforms |
| 48758 | if· | 48758 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 48759 | chgrp·0·/boot/grub2/grub.cfg | 48759 | chgrp·0·/boot/grub2/grub.cfg |
| 48760 | else | 48760 | else |
| 48761 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 48761 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 48762 | fi | 48762 | fi |
| 48763 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 48763 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 48792, 16 lines modified | Offset 48792, 16 lines modified | ||
| 48792 | ··-·no_reboot_needed | 48792 | ··-·no_reboot_needed |
| 48793 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 48793 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 48794 | ··stat: | 48794 | ··stat: |
| 48795 | ····path:·/boot/grub2/grub.cfg | 48795 | ····path:·/boot/grub2/grub.cfg |
| 48796 | ··register:·file_exists | 48796 | ··register:·file_exists |
| 48797 | ··when: | 48797 | ··when: |
| 48798 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48799 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48798 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48799 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48800 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48800 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48801 | ··tags: | 48801 | ··tags: |
| 48802 | ··-·CCE-80805-5 | 48802 | ··-·CCE-80805-5 |
| 48803 | ··-·CJIS-5.5.2.2 | 48803 | ··-·CJIS-5.5.2.2 |
| 48804 | ··-·NIST-800-171-3.4.5 | 48804 | ··-·NIST-800-171-3.4.5 |
| 48805 | ··-·NIST-800-53-AC-6(1) | 48805 | ··-·NIST-800-53-AC-6(1) |
| 48806 | ··-·NIST-800-53-CM-6(a) | 48806 | ··-·NIST-800-53-CM-6(a) |
| Offset 48814, 16 lines modified | Offset 48814, 16 lines modified | ||
| 48814 | ··-·no_reboot_needed | 48814 | ··-·no_reboot_needed |
| 48815 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 48815 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 48816 | ··file: | 48816 | ··file: |
| 48817 | ····path:·/boot/grub2/grub.cfg | 48817 | ····path:·/boot/grub2/grub.cfg |
| 48818 | ····owner:·'0' | 48818 | ····owner:·'0' |
| 48819 | ··when: | 48819 | ··when: |
| 48820 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48821 | ··-·'"grub2-common"·in·ansible_facts.packages' | 48820 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 48821 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 48822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 48822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 48823 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 48823 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 48824 | ··tags: | 48824 | ··tags: |
| 48825 | ··-·CCE-80805-5 | 48825 | ··-·CCE-80805-5 |
| 48826 | ··-·CJIS-5.5.2.2 | 48826 | ··-·CJIS-5.5.2.2 |
| 48827 | ··-·NIST-800-171-3.4.5 | 48827 | ··-·NIST-800-171-3.4.5 |
| 48828 | ··-·NIST-800-53-AC-6(1) | 48828 | ··-·NIST-800-53-AC-6(1) |
| Offset 48836, 15 lines modified | Offset 48836, 15 lines modified | ||
| 48836 | ··-·medium_severity | 48836 | ··-·medium_severity |
| 48837 | ··-·no_reboot_needed | 48837 | ··-·no_reboot_needed |
| 48838 | Remediation_Shell_script_⇲ | 48838 | Remediation_Shell_script_⇲ |
| 48839 | Complexity:·low | 48839 | Complexity:·low |
| 48840 | Disruption:·low | 48840 | Disruption:·low |
| 48841 | Strategy:···configure | 48841 | Strategy:···configure |
| 48842 | #·Remediation·is·applicable·only·in·certain·platforms | 48842 | #·Remediation·is·applicable·only·in·certain·platforms |
| 48843 | if· | 48843 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 48844 | chown·0·/boot/grub2/grub.cfg | 48844 | chown·0·/boot/grub2/grub.cfg |
| 48845 | else | 48845 | else |
| 48846 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 48846 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 48847 | fi | 48847 | fi |
| 48848 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** | 48848 | ***·Rule ·Set·Boot·Loader·Password·in·grub2· [ref]·*** |
| Offset 196419, 22 lines modified | Offset 196419, 22 lines modified | ||
| 002ff420:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 002ff420:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 002ff430:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 002ff430:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 002ff440:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 002ff440:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 002ff450:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 002ff450:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 002ff460:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 002ff460:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 002ff470:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 002ff470:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 002ff480:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 002ff480:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 002ff490:·6865·6e3a·0a20·202d·2027·22 | 002ff490:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 002ff4a0:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 002ff4b0:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 002ff4c0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 002ff4d0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002ff4e0:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 002ff4f0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002ff | 002ff4a0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 002ff4b0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 002ff4c0:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 002ff4d0:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 002ff4e0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 002ff4f0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 002ff500:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 002ff510:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 002ff510:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 002ff520:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 002ff520:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 002ff530:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 002ff530:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 002ff540:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 002ff540:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 002ff550:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 002ff550:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 002ff560:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 002ff560:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 002ff570:·2d20·4343·452d·3830·3830·302d·360a·2020··-·CCE-80800-6.·· | 002ff570:·2d20·4343·452d·3830·3830·302d·360a·2020··-·CCE-80800-6.·· | ||
| Offset 196456, 22 lines modified | Offset 196456, 22 lines modified | ||
| 002ff670:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 002ff670:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 002ff680:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 002ff680:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 002ff690:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 002ff690:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 002ff6a0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 002ff6a0:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 002ff6b0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 002ff6b0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 002ff6c0:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | 002ff6c0:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | ||
| 002ff6d0:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 002ff6d0:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 002ff6e0:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 002ff6f0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 002ff700:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002ff710:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002ff720:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 002ff730:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 002ff740:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 002ff | 002ff6e0:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | ||
| 002ff6f0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 002ff700:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 002ff710:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 002ff720:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 002ff730:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 002ff740:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 002ff750:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 002ff760:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 002ff760:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 002ff770:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 002ff770:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 002ff780:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 002ff780:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 002ff790:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 002ff790:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 002ff7a0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 002ff7a0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 002ff7b0:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | 002ff7b0:·225d·0a20·202d·2066·696c·655f·6578·6973··"].··-·file_exis | ||
| 002ff7c0:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | 002ff7c0:·7473·2e73·7461·7420·6973·2064·6566·696e··ts.stat·is·defin | ||
| Offset 196522, 19 lines modified | Offset 196522, 19 lines modified | ||
| 002ffa90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | 002ffa90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 002ffaa0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | 002ffaa0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | ||
| 002ffab0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | 002ffab0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | ||
| 002ffac0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | 002ffac0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 002ffad0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 002ffad0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 002ffae0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 002ffae0:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 002ffaf0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 002ffaf0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 002ffb00:·2070·6c61·7466·6f72·6d73·0a69·6620· | 002ffb00:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 002ffb10:·2120·2d66·202f·7379·732f·6669·726d·7761··!·-f·/sys/firmwa | |||
| 002ffb20:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 002ffb30:·6d70·3b20·7270·6d20·2d2d·7175·6965·7420··mp;·rpm·--quiet· | |||
| 002ffb | 002ffb10:·6d20·2d2d·7175·6965·7420·2d71·2067·7275··m·--quiet·-q·gru | ||
| 002ffb20:·6232·2d63·6f6d·6d6f·6e20·2661·6d70·3b26··b2-common·&& | |||
| 002ffb30:·616d·703b·205b·2021·202d·6620·2f73·7973··amp;·[·!·-f·/sys | |||
| 002ffb40:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 002ffb50:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | 002ffb50:·2661·6d70·3b26·616d·703b·207b·205b·2021··&&·{·[·! | ||
| 002ffb60:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | 002ffb60:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | ||
| 002ffb70:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | 002ffb70:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | ||
| 002ffb80:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | 002ffb80:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | ||
| 002ffb90:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | 002ffb90:·6e65·7265·6e76·205d·3b20·7d3b·2074·6865··nerenv·];·};·the | ||
| 002ffba0:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | 002ffba0:·6e0a·0a63·6867·7270·2030·202f·626f·6f74··n..chgrp·0·/boot | ||
| 002ffbb0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 002ffbb0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| Offset 197032, 22 lines modified | Offset 197032, 22 lines modified | ||
| 00301a70:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | 00301a70:·206e·616d·653a·2054·6573·7420·666f·7220···name:·Test·for· | ||
| 00301a80:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | 00301a80:·6578·6973·7465·6e63·6520·2f62·6f6f·742f··existence·/boot/ | ||
| 00301a90:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 00301a90:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 00301aa0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | 00301aa0:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | ||
| 00301ab0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 00301ab0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 00301ac0:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | 00301ac0:·622e·6366·670a·2020·7265·6769·7374·6572··b.cfg.··register | ||
| 00301ad0:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | 00301ad0:·3a20·6669·6c65·5f65·7869·7374·730a·2020··:·file_exists.·· | ||
| 00301ae0:·7768·656e·3a0a·2020·2d20·2722· | 00301ae0:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 00301af0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 00301b00:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 00301b10:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 00301b20:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 00301b30:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | |||
| 00301b40:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00301 | 00301af0:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | ||
| 00301b00:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00301b10:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 00301b20:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00301b30:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00301b40:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 00301b50:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 00301b60:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 00301b60:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 00301b70:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 00301b70:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 00301b80:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 00301b80:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 00301b90:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 00301b90:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 00301ba0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 00301ba0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 00301bb0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 00301bb0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 00301bc0:·202d·2043·4345·2d38·3038·3035·2d35·0a20···-·CCE-80805-5.· | 00301bc0:·202d·2043·4345·2d38·3038·3035·2d35·0a20···-·CCE-80805-5.· | ||
| Offset 197068, 22 lines modified | Offset 197068, 22 lines modified | ||
| 00301cb0:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | 00301cb0:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | ||
| 00301cc0:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | 00301cc0:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | ||
| 00301cd0:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 00301cd0:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 00301ce0:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | 00301ce0:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | ||
| 00301cf0:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 00301cf0:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 00301d00:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00301d00:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 00301d10:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | 00301d10:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | ||
| 00301d20:·2020·7768·656e·3a0a·2020·2d20·2722· | 00301d20:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 00301d30:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 00301d40:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 00301d50:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 00301d60:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 00301d70:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 00301d80:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 00301d | 00301d30:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 00301d40:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| Max diff block lines reached; 2098/11760 bytes (17.84%) of diff not shown. | |||
| Offset 45124, 16 lines modified | Offset 45124, 16 lines modified | ||
| 45124 | ··-·no_reboot_needed | 45124 | ··-·no_reboot_needed |
| 45125 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 45125 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 45126 | ··stat: | 45126 | ··stat: |
| 45127 | ····path:·/boot/grub2/grub.cfg | 45127 | ····path:·/boot/grub2/grub.cfg |
| 45128 | ··register:·file_exists | 45128 | ··register:·file_exists |
| 45129 | ··when: | 45129 | ··when: |
| 45130 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45131 | ··-·'"grub2-common"·in·ansible_facts.packages' | 45130 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 45131 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45132 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 45132 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 45133 | ··tags: | 45133 | ··tags: |
| 45134 | ··-·CCE-80800-6 | 45134 | ··-·CCE-80800-6 |
| 45135 | ··-·CJIS-5.5.2.2 | 45135 | ··-·CJIS-5.5.2.2 |
| 45136 | ··-·NIST-800-171-3.4.5 | 45136 | ··-·NIST-800-171-3.4.5 |
| 45137 | ··-·NIST-800-53-AC-6(1) | 45137 | ··-·NIST-800-53-AC-6(1) |
| 45138 | ··-·NIST-800-53-CM-6(a) | 45138 | ··-·NIST-800-53-CM-6(a) |
| Offset 45146, 16 lines modified | Offset 45146, 16 lines modified | ||
| 45146 | ··-·no_reboot_needed | 45146 | ··-·no_reboot_needed |
| 45147 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 45147 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 45148 | ··file: | 45148 | ··file: |
| 45149 | ····path:·/boot/grub2/grub.cfg | 45149 | ····path:·/boot/grub2/grub.cfg |
| 45150 | ····group:·'0' | 45150 | ····group:·'0' |
| 45151 | ··when: | 45151 | ··when: |
| 45152 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45153 | ··-·'"grub2-common"·in·ansible_facts.packages' | 45152 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 45153 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45154 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 45154 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 45155 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 45155 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 45156 | ··tags: | 45156 | ··tags: |
| 45157 | ··-·CCE-80800-6 | 45157 | ··-·CCE-80800-6 |
| 45158 | ··-·CJIS-5.5.2.2 | 45158 | ··-·CJIS-5.5.2.2 |
| 45159 | ··-·NIST-800-171-3.4.5 | 45159 | ··-·NIST-800-171-3.4.5 |
| 45160 | ··-·NIST-800-53-AC-6(1) | 45160 | ··-·NIST-800-53-AC-6(1) |
| Offset 45168, 15 lines modified | Offset 45168, 15 lines modified | ||
| 45168 | ··-·medium_severity | 45168 | ··-·medium_severity |
| 45169 | ··-·no_reboot_needed | 45169 | ··-·no_reboot_needed |
| 45170 | Remediation_Shell_script_⇲ | 45170 | Remediation_Shell_script_⇲ |
| 45171 | Complexity:·low | 45171 | Complexity:·low |
| 45172 | Disruption:·low | 45172 | Disruption:·low |
| 45173 | Strategy:···configure | 45173 | Strategy:···configure |
| 45174 | #·Remediation·is·applicable·only·in·certain·platforms | 45174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 45175 | if· | 45175 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 45176 | chgrp·0·/boot/grub2/grub.cfg | 45176 | chgrp·0·/boot/grub2/grub.cfg |
| 45177 | else | 45177 | else |
| 45178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 45178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 45179 | fi | 45179 | fi |
| 45180 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 45180 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 45209, 16 lines modified | Offset 45209, 16 lines modified | ||
| 45209 | ··-·no_reboot_needed | 45209 | ··-·no_reboot_needed |
| 45210 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 45210 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 45211 | ··stat: | 45211 | ··stat: |
| 45212 | ····path:·/boot/grub2/grub.cfg | 45212 | ····path:·/boot/grub2/grub.cfg |
| 45213 | ··register:·file_exists | 45213 | ··register:·file_exists |
| 45214 | ··when: | 45214 | ··when: |
| 45215 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45216 | ··-·'"grub2-common"·in·ansible_facts.packages' | 45215 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 45216 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45217 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 45217 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 45218 | ··tags: | 45218 | ··tags: |
| 45219 | ··-·CCE-80805-5 | 45219 | ··-·CCE-80805-5 |
| 45220 | ··-·CJIS-5.5.2.2 | 45220 | ··-·CJIS-5.5.2.2 |
| 45221 | ··-·NIST-800-171-3.4.5 | 45221 | ··-·NIST-800-171-3.4.5 |
| 45222 | ··-·NIST-800-53-AC-6(1) | 45222 | ··-·NIST-800-53-AC-6(1) |
| 45223 | ··-·NIST-800-53-CM-6(a) | 45223 | ··-·NIST-800-53-CM-6(a) |
| Offset 45231, 16 lines modified | Offset 45231, 16 lines modified | ||
| 45231 | ··-·no_reboot_needed | 45231 | ··-·no_reboot_needed |
| 45232 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 45232 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 45233 | ··file: | 45233 | ··file: |
| 45234 | ····path:·/boot/grub2/grub.cfg | 45234 | ····path:·/boot/grub2/grub.cfg |
| 45235 | ····owner:·'0' | 45235 | ····owner:·'0' |
| 45236 | ··when: | 45236 | ··when: |
| 45237 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45238 | ··-·'"grub2-common"·in·ansible_facts.packages' | 45237 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 45238 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 45239 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 45239 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 45240 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 45240 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 45241 | ··tags: | 45241 | ··tags: |
| 45242 | ··-·CCE-80805-5 | 45242 | ··-·CCE-80805-5 |
| 45243 | ··-·CJIS-5.5.2.2 | 45243 | ··-·CJIS-5.5.2.2 |
| 45244 | ··-·NIST-800-171-3.4.5 | 45244 | ··-·NIST-800-171-3.4.5 |
| 45245 | ··-·NIST-800-53-AC-6(1) | 45245 | ··-·NIST-800-53-AC-6(1) |
| Offset 45253, 15 lines modified | Offset 45253, 15 lines modified | ||
| 45253 | ··-·medium_severity | 45253 | ··-·medium_severity |
| 45254 | ··-·no_reboot_needed | 45254 | ··-·no_reboot_needed |
| 45255 | Remediation_Shell_script_⇲ | 45255 | Remediation_Shell_script_⇲ |
| 45256 | Complexity:·low | 45256 | Complexity:·low |
| 45257 | Disruption:·low | 45257 | Disruption:·low |
| 45258 | Strategy:···configure | 45258 | Strategy:···configure |
| 45259 | #·Remediation·is·applicable·only·in·certain·platforms | 45259 | #·Remediation·is·applicable·only·in·certain·platforms |
| 45260 | if· | 45260 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 45261 | chown·0·/boot/grub2/grub.cfg | 45261 | chown·0·/boot/grub2/grub.cfg |
| 45262 | else | 45262 | else |
| 45263 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 45263 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 45264 | fi | 45264 | fi |
| 45265 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules | 45265 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules |
| Offset 45735, 22 lines modified | Offset 45735, 22 lines modified | ||
| 000b2a60:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | 000b2a60:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | ||
| 000b2a70:·6520·2f62·6f6f·742f·6772·7562·322f·6772··e·/boot/grub2/gr | 000b2a70:·6520·2f62·6f6f·742f·6772·7562·322f·6772··e·/boot/grub2/gr | ||
| 000b2a80:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | 000b2a80:·7562·2e63·6667·0a20·2073·7461·743a·0a20··ub.cfg.··stat:.· | ||
| 000b2a90:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 000b2a90:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 000b2aa0:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 000b2aa0:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 000b2ab0:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | 000b2ab0:·7265·6769·7374·6572·3a20·6669·6c65·5f65··register:·file_e | ||
| 000b2ac0:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | 000b2ac0:·7869·7374·730a·2020·7768·656e·3a0a·2020··xists.··when:.·· | ||
| 000b2ad0:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 000b2ae0:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 000b2af0:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 000b2b00:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 000b2b10:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 000b2b20:·322d·636f·6d6d·6f6e·2220·696e·2061·6e73··2-common"·in·ans | |||
| 000b2 | 000b2ad0:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 000b2ae0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 000b2af0:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000b2b00:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 000b2b10:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 000b2b20:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000b2b30:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000b2b40:·6 | 000b2b40:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 000b2b50:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 000b2b50:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 000b2b60:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 000b2b60:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 000b2b70:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 000b2b70:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 000b2b80:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 000b2b80:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 000b2b90:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 000b2b90:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 000b2ba0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 000b2ba0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 000b2bb0:·3038·3030·2d36·0a20·202d·2043·4a49·532d··0800-6.··-·CJIS- | 000b2bb0:·3038·3030·2d36·0a20·202d·2043·4a49·532d··0800-6.··-·CJIS- | ||
| Offset 45772, 21 lines modified | Offset 45772, 21 lines modified | ||
| 000b2cb0:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | 000b2cb0:·456e·7375·7265·2067·726f·7570·206f·776e··Ensure·group·own | ||
| 000b2cc0:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | 000b2cc0:·6572·2030·206f·6e20·2f62·6f6f·742f·6772··er·0·on·/boot/gr | ||
| 000b2cd0:·7562·322f·6772·7562·2e63·6667·0a20·2066··ub2/grub.cfg.··f | 000b2cd0:·7562·322f·6772·7562·2e63·6667·0a20·2066··ub2/grub.cfg.··f | ||
| 000b2ce0:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | 000b2ce0:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | ||
| 000b2cf0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 000b2cf0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 000b2d00:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | 000b2d00:·6366·670a·2020·2020·6772·6f75·703a·2027··cfg.····group:·' | ||
| 000b2d10:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | 000b2d10:·3027·0a20·2077·6865·6e3a·0a20·202d·2027··0'.··when:.··-·' | ||
| 000b2d20:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 000b2d30:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000b2d40:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000b2d50:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000b2d60:·7427·0a20·202d·2027·2267·7275·6232·2d63··t'.··-·'"grub2-c | |||
| 000b2d70:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | |||
| 000b2d | 000b2d20:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i | ||
| 000b2d30:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000b2d40:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 000b2d50:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 000b2d60:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 000b2d70:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 000b2d80:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 000b2d90:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 000b2d90:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 000b2da0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 000b2da0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 000b2db0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 000b2db0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 000b2dc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 000b2dc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 000b2dd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 000b2dd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 000b2de0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | 000b2de0:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | ||
| 000b2df0:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | 000b2df0:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | ||
| Offset 45838, 19 lines modified | Offset 45838, 19 lines modified | ||
| 000b30d0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | 000b30d0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 000b30e0:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | 000b30e0:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 000b30f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | 000b30f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 000b3100:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | 000b3100:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 000b3110:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 000b3110:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 000b3120:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 000b3120:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000b3130:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 000b3130:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 000b3140:·726d·730a·6966·205b·2021·202d·6620·2f73··rms.if·[·!·-f·/s | |||
| 000b3150:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | |||
| 000b3160:·5d20·2661·6d70·3b26·616d·703b·2072·706d··]·&&·rpm | |||
| 000b3170:·202d·2d71·7569·6574·202d·7120·6772·7562···--quiet·-q·grub | |||
| 000b31 | 000b3140:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | ||
| 000b3150:·6574·202d·7120·6772·7562·322d·636f·6d6d··et·-q·grub2-comm | |||
| 000b3160:·6f6e·2026·616d·703b·2661·6d70·3b20·5b20··on·&&·[· | |||
| 000b3170:·2120·2d66·202f·7379·732f·6669·726d·7761··!·-f·/sys/firmwa | |||
| 000b3180:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 000b3190:·6d70·3b20·7b20·5b20·2120·2d66·202f·2e64··mp;·{·[·!·-f·/.d | 000b3190:·6d70·3b20·7b20·5b20·2120·2d66·202f·2e64··mp;·{·[·!·-f·/.d | ||
| 000b31a0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | 000b31a0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | ||
| 000b31b0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | 000b31b0:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | ||
| 000b31c0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | 000b31c0:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | ||
| 000b31d0:·5d3b·207d·3b20·7468·656e·0a0a·6368·6772··];·};·then..chgr | 000b31d0:·5d3b·207d·3b20·7468·656e·0a0a·6368·6772··];·};·then..chgr | ||
| 000b31e0:·7020·3020·2f62·6f6f·742f·6772·7562·322f··p·0·/boot/grub2/ | 000b31e0:·7020·3020·2f62·6f6f·742f·6772·7562·322f··p·0·/boot/grub2/ | ||
| 000b31f0:·6772·7562·2e63·6667·0a0a·656c·7365·0a20··grub.cfg..else.· | 000b31f0:·6772·7562·2e63·6667·0a0a·656c·7365·0a20··grub.cfg..else.· | ||
| Offset 46348, 22 lines modified | Offset 46348, 22 lines modified | ||
| 000b50b0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | 000b50b0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | ||
| 000b50c0:·6365·202f·626f·6f74·2f67·7275·6232·2f67··ce·/boot/grub2/g | 000b50c0:·6365·202f·626f·6f74·2f67·7275·6232·2f67··ce·/boot/grub2/g | ||
| 000b50d0:·7275·622e·6366·670a·2020·7374·6174·3a0a··rub.cfg.··stat:. | 000b50d0:·7275·622e·6366·670a·2020·7374·6174·3a0a··rub.cfg.··stat:. | ||
| 000b50e0:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | 000b50e0:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | ||
| 000b50f0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 000b50f0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 000b5100:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | 000b5100:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | ||
| 000b5110:·6578·6973·7473·0a20·2077·6865·6e3a·0a20··exists.··when:.· | 000b5110:·6578·6973·7473·0a20·2077·6865·6e3a·0a20··exists.··when:.· | ||
| 000b5120:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000b5130:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 000b5140:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 000b5150:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 000b5160:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 000b5170:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | |||
| 000b51 | 000b5120:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | ||
| 000b5130:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 000b5140:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 000b5150:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 000b5160:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 000b5170:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 000b5180:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 000b5190:·6 | 000b5190:·6c69·7374·270a·2020·2d20·616e·7369·626c··list'.··-·ansibl | ||
| 000b51a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 000b51a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 000b51b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 000b51b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 000b51c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 000b51c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 000b51d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 000b51d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 000b51e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | 000b51e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 000b51f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | 000b51f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | ||
| 000b5200:·3830·3830·352d·350a·2020·2d20·434a·4953··80805-5.··-·CJIS | 000b5200:·3830·3830·352d·350a·2020·2d20·434a·4953··80805-5.··-·CJIS | ||
| Offset 46384, 22 lines modified | Offset 46384, 22 lines modified | ||
| 000b52f0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | 000b52f0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | ||
| 000b5300:·7265·206f·776e·6572·2030·206f·6e20·2f62··re·owner·0·on·/b | 000b5300:·7265·206f·776e·6572·2030·206f·6e20·2f62··re·owner·0·on·/b | ||
| 000b5310:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 000b5310:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 000b5320:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 000b5320:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 000b5330:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 000b5330:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 000b5340:·2f67·7275·622e·6366·670a·2020·2020·6f77··/grub.cfg.····ow | 000b5340:·2f67·7275·622e·6366·670a·2020·2020·6f77··/grub.cfg.····ow | ||
| 000b5350:·6e65·723a·2027·3027·0a20·2077·6865·6e3a··ner:·'0'.··when: | 000b5350:·6e65·723a·2027·3027·0a20·2077·6865·6e3a··ner:·'0'.··when: | ||
| 000b5360:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000b5370:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 000b5380:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000b5390:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000b53a0:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 000b53b0:·7275·6232·2d63·6f6d·6d6f·6e22·2069·6e20··rub2-common"·in· | |||
| 000b53 | 000b5360:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | ||
| 000b5370:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | |||
| 000b5380:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000b5390:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| Max diff block lines reached; 7832/17346 bytes (45.15%) of diff not shown. | |||
| Offset 4897, 16 lines modified | Offset 4897, 16 lines modified | ||
| 4897 | ··-·no_reboot_needed | 4897 | ··-·no_reboot_needed |
| 4898 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 4898 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 4899 | ··stat: | 4899 | ··stat: |
| 4900 | ····path:·/boot/grub2/grub.cfg | 4900 | ····path:·/boot/grub2/grub.cfg |
| 4901 | ··register:·file_exists | 4901 | ··register:·file_exists |
| 4902 | ··when: | 4902 | ··when: |
| 4903 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4904 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4903 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4904 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4905 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4906 | ··tags: | 4906 | ··tags: |
| 4907 | ··-·CCE-80800-6 | 4907 | ··-·CCE-80800-6 |
| 4908 | ··-·CJIS-5.5.2.2 | 4908 | ··-·CJIS-5.5.2.2 |
| 4909 | ··-·NIST-800-171-3.4.5 | 4909 | ··-·NIST-800-171-3.4.5 |
| 4910 | ··-·NIST-800-53-AC-6(1) | 4910 | ··-·NIST-800-53-AC-6(1) |
| 4911 | ··-·NIST-800-53-CM-6(a) | 4911 | ··-·NIST-800-53-CM-6(a) |
| Offset 4919, 16 lines modified | Offset 4919, 16 lines modified | ||
| 4919 | ··-·no_reboot_needed | 4919 | ··-·no_reboot_needed |
| 4920 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 4920 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 4921 | ··file: | 4921 | ··file: |
| 4922 | ····path:·/boot/grub2/grub.cfg | 4922 | ····path:·/boot/grub2/grub.cfg |
| 4923 | ····group:·'0' | 4923 | ····group:·'0' |
| 4924 | ··when: | 4924 | ··when: |
| 4925 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4926 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4925 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4926 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4927 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4927 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4928 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 4928 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 4929 | ··tags: | 4929 | ··tags: |
| 4930 | ··-·CCE-80800-6 | 4930 | ··-·CCE-80800-6 |
| 4931 | ··-·CJIS-5.5.2.2 | 4931 | ··-·CJIS-5.5.2.2 |
| 4932 | ··-·NIST-800-171-3.4.5 | 4932 | ··-·NIST-800-171-3.4.5 |
| 4933 | ··-·NIST-800-53-AC-6(1) | 4933 | ··-·NIST-800-53-AC-6(1) |
| Offset 4941, 15 lines modified | Offset 4941, 15 lines modified | ||
| 4941 | ··-·medium_severity | 4941 | ··-·medium_severity |
| 4942 | ··-·no_reboot_needed | 4942 | ··-·no_reboot_needed |
| 4943 | Remediation_Shell_script_⇲ | 4943 | Remediation_Shell_script_⇲ |
| 4944 | Complexity:·low | 4944 | Complexity:·low |
| 4945 | Disruption:·low | 4945 | Disruption:·low |
| 4946 | Strategy:···configure | 4946 | Strategy:···configure |
| 4947 | #·Remediation·is·applicable·only·in·certain·platforms | 4947 | #·Remediation·is·applicable·only·in·certain·platforms |
| 4948 | if· | 4948 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 4949 | chgrp·0·/boot/grub2/grub.cfg | 4949 | chgrp·0·/boot/grub2/grub.cfg |
| 4950 | else | 4950 | else |
| 4951 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 4951 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 4952 | fi | 4952 | fi |
| 4953 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 4953 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 4982, 16 lines modified | Offset 4982, 16 lines modified | ||
| 4982 | ··-·no_reboot_needed | 4982 | ··-·no_reboot_needed |
| 4983 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 4983 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 4984 | ··stat: | 4984 | ··stat: |
| 4985 | ····path:·/boot/grub2/grub.cfg | 4985 | ····path:·/boot/grub2/grub.cfg |
| 4986 | ··register:·file_exists | 4986 | ··register:·file_exists |
| 4987 | ··when: | 4987 | ··when: |
| 4988 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4989 | ··-·'"grub2-common"·in·ansible_facts.packages' | 4988 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 4989 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 4990 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 4990 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 4991 | ··tags: | 4991 | ··tags: |
| 4992 | ··-·CCE-80805-5 | 4992 | ··-·CCE-80805-5 |
| 4993 | ··-·CJIS-5.5.2.2 | 4993 | ··-·CJIS-5.5.2.2 |
| 4994 | ··-·NIST-800-171-3.4.5 | 4994 | ··-·NIST-800-171-3.4.5 |
| 4995 | ··-·NIST-800-53-AC-6(1) | 4995 | ··-·NIST-800-53-AC-6(1) |
| 4996 | ··-·NIST-800-53-CM-6(a) | 4996 | ··-·NIST-800-53-CM-6(a) |
| Offset 5004, 16 lines modified | Offset 5004, 16 lines modified | ||
| 5004 | ··-·no_reboot_needed | 5004 | ··-·no_reboot_needed |
| 5005 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5005 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5006 | ··file: | 5006 | ··file: |
| 5007 | ····path:·/boot/grub2/grub.cfg | 5007 | ····path:·/boot/grub2/grub.cfg |
| 5008 | ····owner:·'0' | 5008 | ····owner:·'0' |
| 5009 | ··when: | 5009 | ··when: |
| 5010 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5011 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5010 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5011 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5012 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5012 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5013 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5013 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5014 | ··tags: | 5014 | ··tags: |
| 5015 | ··-·CCE-80805-5 | 5015 | ··-·CCE-80805-5 |
| 5016 | ··-·CJIS-5.5.2.2 | 5016 | ··-·CJIS-5.5.2.2 |
| 5017 | ··-·NIST-800-171-3.4.5 | 5017 | ··-·NIST-800-171-3.4.5 |
| 5018 | ··-·NIST-800-53-AC-6(1) | 5018 | ··-·NIST-800-53-AC-6(1) |
| Offset 5026, 15 lines modified | Offset 5026, 15 lines modified | ||
| 5026 | ··-·medium_severity | 5026 | ··-·medium_severity |
| 5027 | ··-·no_reboot_needed | 5027 | ··-·no_reboot_needed |
| 5028 | Remediation_Shell_script_⇲ | 5028 | Remediation_Shell_script_⇲ |
| 5029 | Complexity:·low | 5029 | Complexity:·low |
| 5030 | Disruption:·low | 5030 | Disruption:·low |
| 5031 | Strategy:···configure | 5031 | Strategy:···configure |
| 5032 | #·Remediation·is·applicable·only·in·certain·platforms | 5032 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5033 | if· | 5033 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 5034 | chown·0·/boot/grub2/grub.cfg | 5034 | chown·0·/boot/grub2/grub.cfg |
| 5035 | else | 5035 | else |
| 5036 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5036 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5037 | fi | 5037 | fi |
| 5038 | ***·Rule ·Verify·/boot/grub2/grub.cfg·Permissions· [ref]·*** | 5038 | ***·Rule ·Verify·/boot/grub2/grub.cfg·Permissions· [ref]·*** |
| Offset 5065, 16 lines modified | Offset 5065, 16 lines modified | ||
| 5065 | ··-·no_reboot_needed | 5065 | ··-·no_reboot_needed |
| 5066 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5066 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5067 | ··stat: | 5067 | ··stat: |
| 5068 | ····path:·/boot/grub2/grub.cfg | 5068 | ····path:·/boot/grub2/grub.cfg |
| 5069 | ··register:·file_exists | 5069 | ··register:·file_exists |
| 5070 | ··when: | 5070 | ··when: |
| 5071 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5072 | ··-·'"grub2-common"·in·ansible_facts.packages' | 5071 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 5072 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5073 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5073 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5074 | ··tags: | 5074 | ··tags: |
| 5075 | ··-·CCE-80814-7 | 5075 | ··-·CCE-80814-7 |
| 5076 | ··-·NIST-800-171-3.4.5 | 5076 | ··-·NIST-800-171-3.4.5 |
| 5077 | ··-·NIST-800-53-AC-6(1) | 5077 | ··-·NIST-800-53-AC-6(1) |
| 5078 | ··-·NIST-800-53-CM-6(a) | 5078 | ··-·NIST-800-53-CM-6(a) |
| 5079 | ··-·configure_strategy | 5079 | ··-·configure_strategy |
| Offset 5085, 16 lines modified | Offset 5085, 16 lines modified | ||
| 5085 | ··-·no_reboot_needed | 5085 | ··-·no_reboot_needed |
| 5086 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5086 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5087 | ··file: | 5087 | ··file: |
| 5088 | ····path:·/boot/grub2/grub.cfg | 5088 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1101/5502 bytes (20.01%) of diff not shown. | |||
| Offset 364514, 23 lines modified | Offset 364514, 23 lines modified | ||
| 0058fe10:·6e74·5f72·6573·7472·6963·7469·6f6e·735c··nt_restrictions\ | 0058fe10:·6e74·5f72·6573·7472·6963·7469·6f6e·735c··nt_restrictions\ | ||
| 0058fe20:·732a·3d5c·732a·0a20·2020·2020·206c·696e··s*=\s*.······lin | 0058fe20:·732a·3d5c·732a·0a20·2020·2020·206c·696e··s*=\s*.······lin | ||
| 0058fe30:·653a·2073·6d74·7064·5f63·6c69·656e·745f··e:·smtpd_client_ | 0058fe30:·653a·2073·6d74·7064·5f63·6c69·656e·745f··e:·smtpd_client_ | ||
| 0058fe40:·7265·7374·7269·6374·696f·6e73·203d·2070··restrictions·=·p | 0058fe40:·7265·7374·7269·6374·696f·6e73·203d·2070··restrictions·=·p | ||
| 0058fe50:·6572·6d69·745f·6d79·6e65·7477·6f72·6b73··ermit_mynetworks | 0058fe50:·6572·6d69·745f·6d79·6e65·7477·6f72·6b73··ermit_mynetworks | ||
| 0058fe60:·2c72·656a·6563·740a·2020·2020·2020·7374··,reject.······st | 0058fe60:·2c72·656a·6563·740a·2020·2020·2020·7374··,reject.······st | ||
| 0058fe70:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | 0058fe70:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | ||
| 0058fe80:·6865·6e3a·0a20·202d·20 | 0058fe80:·6865·6e3a·0a20·202d·2061·6e73·6962·6c65··hen:.··-·ansible | ||
| 0058fe90:·6978·2220·696e·2061·6e73·6962·6c65·5f66··ix"·in·ansible_f | |||
| 0058fea0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0058feb0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | |||
| 0058fec0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0058fed0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0058fee0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0058fef0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0058f | 0058fe90:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 0058fea0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0058feb0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0058fec0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0058fed0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0058fee0:·202d·2027·2270·6f73·7466·6978·2220·696e···-·'"postfix"·in | |||
| 0058fef0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0058ff00:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0058ff10:·0a20·202d·2043·4345·2d38·3430·3534·2d36··.··-·CCE-84054-6 | 0058ff10:·0a20·202d·2043·4345·2d38·3430·3534·2d36··.··-·CCE-84054-6 | ||
| 0058ff20:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | 0058ff20:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | ||
| 0058ff30:·4845·4c2d·3038·2d30·3430·3239·300a·2020··HEL-08-040290.·· | 0058ff30:·4845·4c2d·3038·2d30·3430·3239·300a·2020··HEL-08-040290.·· | ||
| 0058ff40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | 0058ff40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | ||
| 0058ff50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | 0058ff50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | ||
| 0058ff60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | 0058ff60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | ||
| 0058ff70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | 0058ff70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | ||
| Offset 364555, 21 lines modified | Offset 364555, 21 lines modified | ||
| 005900a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | 005900a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 005900b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | 005900b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 005900c0:·6170·7365·2220·6964·3d22·6964·6d37·3430··apse"·id="idm740 | 005900c0:·6170·7365·2220·6964·3d22·6964·6d37·3430··apse"·id="idm740 | ||
| 005900d0:·3834·223e·3c70·7265·3e3c·636f·6465·3e23··84"><pre><code># | 005900d0:·3834·223e·3c70·7265·3e3c·636f·6465·3e23··84"><pre><code># | ||
| 005900e0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | 005900e0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 005900f0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | 005900f0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 00590100:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | 00590100:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 00590110:·6f72·6d73·0a69·6620· | 00590110:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | ||
| 00590120:·6965·7420·2d71·2070·6f73·7466·6978·2026··iet·-q·postfix·& | |||
| 00590130:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 005901 | 00590120:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | ||
| 005901 | 00590130:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 005901 | 00590140:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 00590150:·7620·5d20·2661·6d70·3b26·616d·703b·2072··v·]·&&·r | |||
| 00590160:·706d·202d·2d71·7569·6574·202d·7120·706f··pm·--quiet·-q·po | |||
| 00590170:· | 00590170:·7374·6669·783b·2074·6865·6e0a·0a69·6620··stfix;·then..if· | ||
| 00590180:·2120·6772·6570·202d·7120·5e73·6d74·7064··!·grep·-q·^smtpd | 00590180:·2120·6772·6570·202d·7120·5e73·6d74·7064··!·grep·-q·^smtpd | ||
| 00590190:·5f63·6c69·656e·745f·7265·7374·7269·6374··_client_restrict | 00590190:·5f63·6c69·656e·745f·7265·7374·7269·6374··_client_restrict | ||
| 005901a0:·696f·6e73·202f·6574·632f·706f·7374·6669··ions·/etc/postfi | 005901a0:·696f·6e73·202f·6574·632f·706f·7374·6669··ions·/etc/postfi | ||
| 005901b0:·782f·6d61·696e·2e63·663b·2074·6865·6e0a··x/main.cf;·then. | 005901b0:·782f·6d61·696e·2e63·663b·2074·6865·6e0a··x/main.cf;·then. | ||
| 005901c0:·0965·6368·6f20·2273·6d74·7064·5f63·6c69··.echo·"smtpd_cli | 005901c0:·0965·6368·6f20·2273·6d74·7064·5f63·6c69··.echo·"smtpd_cli | ||
| 005901d0:·656e·745f·7265·7374·7269·6374·696f·6e73··ent_restrictions | 005901d0:·656e·745f·7265·7374·7269·6374·696f·6e73··ent_restrictions | ||
| 005901e0:·203d·2070·6572·6d69·745f·6d79·6e65·7477···=·permit_mynetw | 005901e0:·203d·2070·6572·6d69·745f·6d79·6e65·7477···=·permit_mynetw |
| Offset 75963, 28 lines modified | Offset 75963, 28 lines modified | ||
| 75963 | ····lineinfile: | 75963 | ····lineinfile: |
| 75964 | ······path:·/etc/postfix/main.cf | 75964 | ······path:·/etc/postfix/main.cf |
| 75965 | ······create:·true | 75965 | ······create:·true |
| 75966 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 75966 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 75967 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 75967 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 75968 | ······state:·present | 75968 | ······state:·present |
| 75969 | ··when: | 75969 | ··when: |
| 75970 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 75971 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 75970 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 75971 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 75972 | ··tags: | 75972 | ··tags: |
| 75973 | ··-·CCE-84054-6 | 75973 | ··-·CCE-84054-6 |
| 75974 | ··-·DISA-STIG-RHEL-08-040290 | 75974 | ··-·DISA-STIG-RHEL-08-040290 |
| 75975 | ··-·low_complexity | 75975 | ··-·low_complexity |
| 75976 | ··-·low_disruption | 75976 | ··-·low_disruption |
| 75977 | ··-·medium_severity | 75977 | ··-·medium_severity |
| 75978 | ··-·no_reboot_needed | 75978 | ··-·no_reboot_needed |
| 75979 | ··-·postfix_prevent_unrestricted_relay | 75979 | ··-·postfix_prevent_unrestricted_relay |
| 75980 | ··-·restrict_strategy | 75980 | ··-·restrict_strategy |
| 75981 | Remediation_Shell_script_⇲ | 75981 | Remediation_Shell_script_⇲ |
| 75982 | #·Remediation·is·applicable·only·in·certain·platforms | 75982 | #·Remediation·is·applicable·only·in·certain·platforms |
| 75983 | if· | 75983 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 75984 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 75984 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 75985 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 75985 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 75986 | else | 75986 | else |
| 75987 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 75987 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 75988 | fi | 75988 | fi |
| Offset 364186, 23 lines modified | Offset 364186, 23 lines modified | ||
| 0058e990:·7269·6374·696f·6e73·5c73·2a3d·5c73·2a0a··rictions\s*=\s*. | 0058e990:·7269·6374·696f·6e73·5c73·2a3d·5c73·2a0a··rictions\s*=\s*. | ||
| 0058e9a0:·2020·2020·2020·6c69·6e65·3a20·736d·7470········line:·smtp | 0058e9a0:·2020·2020·2020·6c69·6e65·3a20·736d·7470········line:·smtp | ||
| 0058e9b0:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | 0058e9b0:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | ||
| 0058e9c0:·7469·6f6e·7320·3d20·7065·726d·6974·5f6d··tions·=·permit_m | 0058e9c0:·7469·6f6e·7320·3d20·7065·726d·6974·5f6d··tions·=·permit_m | ||
| 0058e9d0:·796e·6574·776f·726b·732c·7265·6a65·6374··ynetworks,reject | 0058e9d0:·796e·6574·776f·726b·732c·7265·6a65·6374··ynetworks,reject | ||
| 0058e9e0:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | 0058e9e0:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | ||
| 0058e9f0:·6573·656e·740a·2020·7768·656e·3a0a·2020··esent.··when:.·· | 0058e9f0:·6573·656e·740a·2020·7768·656e·3a0a·2020··esent.··when:.·· | ||
| 0058ea00:·2d20·2722·706f·7374·6669·7822·2069·6e20··-·'"postfix"·in· | |||
| 0058ea10:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0058ea20:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 0058ea30:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0058ea40:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0058ea50:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0058ea60:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0058ea | 0058ea00:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 0058ea10:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0058ea20:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0058ea30:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0058ea40:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0058ea50:·6169·6e65·7222·5d0a·2020·2d20·2722·706f··ainer"].··-·'"po | |||
| 0058ea60:·7374·6669·7822·2069·6e20·616e·7369·626c··stfix"·in·ansibl | |||
| 0058ea70:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0058ea80:· | 0058ea80:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | ||
| 0058ea90:·452d·3834·3035·342d·360a·2020·2d20·4449··E-84054-6.··-·DI | 0058ea90:·452d·3834·3035·342d·360a·2020·2d20·4449··E-84054-6.··-·DI | ||
| 0058eaa0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | 0058eaa0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | ||
| 0058eab0:·3034·3032·3930·0a20·202d·206c·6f77·5f63··040290.··-·low_c | 0058eab0:·3034·3032·3930·0a20·202d·206c·6f77·5f63··040290.··-·low_c | ||
| 0058eac0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | 0058eac0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | ||
| 0058ead0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | 0058ead0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | ||
| 0058eae0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | 0058eae0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | ||
| 0058eaf0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | 0058eaf0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| Offset 364227, 20 lines modified | Offset 364227, 20 lines modified | ||
| 0058ec20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | 0058ec20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0058ec30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | 0058ec30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0058ec40:·643d·2269·646d·3734·3038·3422·3e3c·7072··d="idm74084"><pr | 0058ec40:·643d·2269·646d·3734·3038·3422·3e3c·7072··d="idm74084"><pr | ||
| 0058ec50:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | 0058ec50:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0058ec60:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | 0058ec60:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0058ec70:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | 0058ec70:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0058ec80:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | 0058ec80:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0058ec90:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0058eca0:·706f·7374·6669·7820·2661·6d70·3b26·616d··postfix·&&am | |||
| 0058ec | 0058ec90:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | ||
| 0058ec | 0058eca0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | ||
| 0058ec | 0058ecb0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | ||
| 0058ec | 0058ecc0:·6e74·6169·6e65·7265·6e76·205d·2026·616d··ntainerenv·]·&am | ||
| 0058ecd0:·703b·2661·6d70·3b20·7270·6d20·2d2d·7175··p;&·rpm·--qu | |||
| 0058ece0:·6965·7420·2d71·2070·6f73·7466·6978·3b20··iet·-q·postfix;· | |||
| 0058ecf0:·7468·656e·0a0a·6966·2021·2067·7265·7020··then..if·!·grep· | 0058ecf0:·7468·656e·0a0a·6966·2021·2067·7265·7020··then..if·!·grep· | ||
| 0058ed00:·2d71·205e·736d·7470·645f·636c·6965·6e74··-q·^smtpd_client | 0058ed00:·2d71·205e·736d·7470·645f·636c·6965·6e74··-q·^smtpd_client | ||
| 0058ed10:·5f72·6573·7472·6963·7469·6f6e·7320·2f65··_restrictions·/e | 0058ed10:·5f72·6573·7472·6963·7469·6f6e·7320·2f65··_restrictions·/e | ||
| 0058ed20:·7463·2f70·6f73·7466·6978·2f6d·6169·6e2e··tc/postfix/main. | 0058ed20:·7463·2f70·6f73·7466·6978·2f6d·6169·6e2e··tc/postfix/main. | ||
| 0058ed30:·6366·3b20·7468·656e·0a09·6563·686f·2022··cf;·then..echo·" | 0058ed30:·6366·3b20·7468·656e·0a09·6563·686f·2022··cf;·then..echo·" | ||
| 0058ed40:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | 0058ed40:·736d·7470·645f·636c·6965·6e74·5f72·6573··smtpd_client_res | ||
| 0058ed50:·7472·6963·7469·6f6e·7320·3d20·7065·726d··trictions·=·perm | 0058ed50:·7472·6963·7469·6f6e·7320·3d20·7065·726d··trictions·=·perm |
| Offset 75910, 28 lines modified | Offset 75910, 28 lines modified | ||
| 75910 | ····lineinfile: | 75910 | ····lineinfile: |
| 75911 | ······path:·/etc/postfix/main.cf | 75911 | ······path:·/etc/postfix/main.cf |
| 75912 | ······create:·true | 75912 | ······create:·true |
| 75913 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 75913 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 75914 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 75914 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 75915 | ······state:·present | 75915 | ······state:·present |
| 75916 | ··when: | 75916 | ··when: |
| 75917 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 75918 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 75917 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 75918 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 75919 | ··tags: | 75919 | ··tags: |
| 75920 | ··-·CCE-84054-6 | 75920 | ··-·CCE-84054-6 |
| 75921 | ··-·DISA-STIG-RHEL-08-040290 | 75921 | ··-·DISA-STIG-RHEL-08-040290 |
| 75922 | ··-·low_complexity | 75922 | ··-·low_complexity |
| 75923 | ··-·low_disruption | 75923 | ··-·low_disruption |
| 75924 | ··-·medium_severity | 75924 | ··-·medium_severity |
| 75925 | ··-·no_reboot_needed | 75925 | ··-·no_reboot_needed |
| 75926 | ··-·postfix_prevent_unrestricted_relay | 75926 | ··-·postfix_prevent_unrestricted_relay |
| 75927 | ··-·restrict_strategy | 75927 | ··-·restrict_strategy |
| 75928 | Remediation_Shell_script_⇲ | 75928 | Remediation_Shell_script_⇲ |
| 75929 | #·Remediation·is·applicable·only·in·certain·platforms | 75929 | #·Remediation·is·applicable·only·in·certain·platforms |
| 75930 | if· | 75930 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 75931 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 75931 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 75932 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 75932 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 75933 | else | 75933 | else |
| 75934 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 75934 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 75935 | fi | 75935 | fi |
| Offset 190946, 22 lines modified | Offset 190946, 22 lines modified | ||
| 002e9e10:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | 002e9e10:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | ||
| 002e9e20:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | 002e9e20:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | ||
| 002e9e30:·322f·7573·6572·2e63·6667·0a20·2073·7461··2/user.cfg.··sta | 002e9e30:·322f·7573·6572·2e63·6667·0a20·2073·7461··2/user.cfg.··sta | ||
| 002e9e40:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 002e9e40:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 002e9e50:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | 002e9e50:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | ||
| 002e9e60:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 002e9e60:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 002e9e70:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 002e9e70:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 002e9e80:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | |||
| 002e9e80:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 002e9e90:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 002e9ea0:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002e9eb0:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002e9ec0:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 002e9e | 002e9e90:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | ||
| 002e9e | 002e9ea0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 002e9eb0:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 002e9ec0:·2220·696e·2061·6e73·6962·6c65·5f6d·6f75··"·in·ansible_mou | |||
| 002e9ed0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002e9ee0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002e9ef0:·6 | 002e9ef0:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 002e9f00:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 002e9f00:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 002e9f10:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 002e9f10:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 002e9f20:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 002e9f20:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 002e9f30:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 002e9f30:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 002e9f40:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 002e9f40:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 002e9f50:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 002e9f50:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 002e9f60:·3630·3133·2d30·0a20·202d·2043·4a49·532d··6013-0.··-·CJIS- | 002e9f60:·3630·3133·2d30·0a20·202d·2043·4a49·532d··6013-0.··-·CJIS- | ||
| Offset 190983, 21 lines modified | Offset 190983, 21 lines modified | ||
| 002ea060:·653a·2045·6e73·7572·6520·6772·6f75·7020··e:·Ensure·group· | 002ea060:·653a·2045·6e73·7572·6520·6772·6f75·7020··e:·Ensure·group· | ||
| 002ea070:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 002ea070:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 002ea080:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 002ea080:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 002ea090:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | 002ea090:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | ||
| 002ea0a0:·3a20·2f62·6f6f·742f·6772·7562·322f·7573··:·/boot/grub2/us | 002ea0a0:·3a20·2f62·6f6f·742f·6772·7562·322f·7573··:·/boot/grub2/us | ||
| 002ea0b0:·6572·2e63·6667·0a20·2020·2067·726f·7570··er.cfg.····group | 002ea0b0:·6572·2e63·6667·0a20·2020·2067·726f·7570··er.cfg.····group | ||
| 002ea0c0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | 002ea0c0:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | ||
| 002ea0d0:·2d20·2722·2f62·6f6f·742f·6566·6922·2069··-·'"/boot/efi"·i | |||
| 002ea0e0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002ea0f0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002ea100:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002ea | 002ea0d0:·2d20·2722·6772·7562·322d·636f·6d6d·6f6e··-·'"grub2-common | ||
| 002ea | 002ea0e0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 002ea | 002ea0f0:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | ||
| 002ea100:·2027·222f·626f·6f74·2f65·6669·2220·696e···'"/boot/efi"·in | |||
| 002ea110:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 002ea120:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 002ea130:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 002ea140:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 002ea140:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 002ea150:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 002ea150:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 002ea160:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 002ea160:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 002ea170:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 002ea170:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 002ea180:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 002ea180:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 002ea190:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 002ea190:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 002ea1a0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 002ea1a0:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Offset 191049, 19 lines modified | Offset 191049, 19 lines modified | ||
| 002ea480:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | 002ea480:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 002ea490:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | 002ea490:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | ||
| 002ea4a0:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | 002ea4a0:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | ||
| 002ea4b0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | 002ea4b0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 002ea4c0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 002ea4c0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 002ea4d0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 002ea4d0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 002ea4e0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 002ea4e0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 002ea4f0:·666f·726d·730a·6966·20 | 002ea4f0:·666f·726d·730a·6966·2072·706d·202d·2d71··forms.if·rpm·--q | ||
| 002ea500:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | |||
| 002ea510:·5d20·2661·6d70·3b26·616d·703b·2072·706d··]·&&·rpm | |||
| 002ea5 | 002ea500:·7569·6574·202d·7120·6772·7562·322d·636f··uiet·-q·grub2-co | ||
| 002ea5 | 002ea510:·6d6d·6f6e·2026·616d·703b·2661·6d70·3b20··mmon·&&· | ||
| 002ea520:·5b20·2d66·202f·7379·732f·6669·726d·7761··[·-f·/sys/firmwa | |||
| 002ea530:·7265·2f65·6669·205d·2026·616d·703b·2661··re/efi·]·&&a | |||
| 002ea540:·6d70·3b20·7b20·5b20·2120·2d66·202f·2e64··mp;·{·[·!·-f·/.d | 002ea540:·6d70·3b20·7b20·5b20·2120·2d66·202f·2e64··mp;·{·[·!·-f·/.d | ||
| 002ea550:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | 002ea550:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | ||
| 002ea560:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | 002ea560:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | ||
| 002ea570:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | 002ea570:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | ||
| 002ea580:·5d3b·207d·3b20·7468·656e·0a0a·6368·6772··];·};·then..chgr | 002ea580:·5d3b·207d·3b20·7468·656e·0a0a·6368·6772··];·};·then..chgr | ||
| 002ea590:·7020·3020·2f62·6f6f·742f·6772·7562·322f··p·0·/boot/grub2/ | 002ea590:·7020·3020·2f62·6f6f·742f·6772·7562·322f··p·0·/boot/grub2/ | ||
| 002ea5a0:·7573·6572·2e63·6667·0a0a·656c·7365·0a20··user.cfg..else.· | 002ea5a0:·7573·6572·2e63·6667·0a0a·656c·7365·0a20··user.cfg..else.· | ||
| Offset 191475, 22 lines modified | Offset 191475, 22 lines modified | ||
| 002ebf20:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | 002ebf20:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | ||
| 002ebf30:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | 002ebf30:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | ||
| 002ebf40:·322f·7573·6572·2e63·6667·0a20·2073·7461··2/user.cfg.··sta | 002ebf40:·322f·7573·6572·2e63·6667·0a20·2073·7461··2/user.cfg.··sta | ||
| 002ebf50:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 002ebf50:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 002ebf60:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | 002ebf60:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | ||
| 002ebf70:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 002ebf70:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 002ebf80:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 002ebf80:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 002ebf90:·3a0a·2020·2d20·2722·6772·7562·322d·636f··:.··-·'"grub2-co | |||
| 002ebf90:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 002ebfa0:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 002ebfb0:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002ebfc0:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002ebfd0:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 002ebf | 002ebfa0:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | ||
| 002ebf | 002ebfb0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | ||
| 002ebfc0:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 002ebfd0:·2220·696e·2061·6e73·6962·6c65·5f6d·6f75··"·in·ansible_mou | |||
| 002ebfe0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002ebff0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002ec000:·6 | 002ec000:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 002ec010:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 002ec010:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 002ec020:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 002ec020:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 002ec030:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 002ec030:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 002ec040:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 002ec040:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 002ec050:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 002ec050:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 002ec060:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 002ec060:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 002ec070:·3630·3232·2d31·0a20·202d·2043·4a49·532d··6022-1.··-·CJIS- | 002ec070:·3630·3232·2d31·0a20·202d·2043·4a49·532d··6022-1.··-·CJIS- | ||
| Offset 191511, 22 lines modified | Offset 191511, 22 lines modified | ||
| 002ec160:·6564·6564·0a0a·2d20·6e61·6d65·3a20·456e··eded..-·name:·En | 002ec160:·6564·6564·0a0a·2d20·6e61·6d65·3a20·456e··eded..-·name:·En | ||
| 002ec170:·7375·7265·206f·776e·6572·2030·206f·6e20··sure·owner·0·on· | 002ec170:·7375·7265·206f·776e·6572·2030·206f·6e20··sure·owner·0·on· | ||
| 002ec180:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 002ec180:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 002ec190:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 002ec190:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 002ec1a0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 002ec1a0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 002ec1b0:·6232·2f75·7365·722e·6366·670a·2020·2020··b2/user.cfg.···· | 002ec1b0:·6232·2f75·7365·722e·6366·670a·2020·2020··b2/user.cfg.···· | ||
| 002ec1c0:·6f77·6e65·723a·2027·3027·0a20·2077·6865··owner:·'0'.··whe | 002ec1c0:·6f77·6e65·723a·2027·3027·0a20·2077·6865··owner:·'0'.··whe | ||
| 002ec1d0:·6e3a·0a20·202d·2027·22 | 002ec1d0:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 002ec1e0:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 002ec1f0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002ec200:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002ec210:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 002ec | 002ec1e0:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 002ec | 002ec1f0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 002ec200:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 002ec210:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 002ec220:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002ec230:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002ec240:·6 | 002ec240:·6c69·7374·270a·2020·2d20·616e·7369·626c··list'.··-·ansibl | ||
| 002ec250:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 002ec250:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 002ec260:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 002ec260:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 002ec270:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 002ec270:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 002ec280:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 002ec280:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| Max diff block lines reached; 13306/23106 bytes (57.59%) of diff not shown. | |||
| Offset 42285, 16 lines modified | Offset 42285, 16 lines modified | ||
| 42285 | ··-·no_reboot_needed | 42285 | ··-·no_reboot_needed |
| 42286 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 42286 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 42287 | ··stat: | 42287 | ··stat: |
| 42288 | ····path:·/boot/grub2/user.cfg | 42288 | ····path:·/boot/grub2/user.cfg |
| 42289 | ··register:·file_exists | 42289 | ··register:·file_exists |
| 42290 | ··when: | 42290 | ··when: |
| 42291 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42292 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42291 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42292 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42293 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42293 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42294 | ··tags: | 42294 | ··tags: |
| 42295 | ··-·CCE-86013-0 | 42295 | ··-·CCE-86013-0 |
| 42296 | ··-·CJIS-5.5.2.2 | 42296 | ··-·CJIS-5.5.2.2 |
| 42297 | ··-·NIST-800-171-3.4.5 | 42297 | ··-·NIST-800-171-3.4.5 |
| 42298 | ··-·NIST-800-53-AC-6(1) | 42298 | ··-·NIST-800-53-AC-6(1) |
| 42299 | ··-·NIST-800-53-CM-6(a) | 42299 | ··-·NIST-800-53-CM-6(a) |
| Offset 42307, 16 lines modified | Offset 42307, 16 lines modified | ||
| 42307 | ··-·no_reboot_needed | 42307 | ··-·no_reboot_needed |
| 42308 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 42308 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 42309 | ··file: | 42309 | ··file: |
| 42310 | ····path:·/boot/grub2/user.cfg | 42310 | ····path:·/boot/grub2/user.cfg |
| 42311 | ····group:·'0' | 42311 | ····group:·'0' |
| 42312 | ··when: | 42312 | ··when: |
| 42313 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42314 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42313 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42314 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42315 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42315 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42316 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42316 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42317 | ··tags: | 42317 | ··tags: |
| 42318 | ··-·CCE-86013-0 | 42318 | ··-·CCE-86013-0 |
| 42319 | ··-·CJIS-5.5.2.2 | 42319 | ··-·CJIS-5.5.2.2 |
| 42320 | ··-·NIST-800-171-3.4.5 | 42320 | ··-·NIST-800-171-3.4.5 |
| 42321 | ··-·NIST-800-53-AC-6(1) | 42321 | ··-·NIST-800-53-AC-6(1) |
| Offset 42329, 15 lines modified | Offset 42329, 15 lines modified | ||
| 42329 | ··-·medium_severity | 42329 | ··-·medium_severity |
| 42330 | ··-·no_reboot_needed | 42330 | ··-·no_reboot_needed |
| 42331 | Remediation_Shell_script_⇲ | 42331 | Remediation_Shell_script_⇲ |
| 42332 | Complexity:·low | 42332 | Complexity:·low |
| 42333 | Disruption:·low | 42333 | Disruption:·low |
| 42334 | Strategy:···configure | 42334 | Strategy:···configure |
| 42335 | #·Remediation·is·applicable·only·in·certain·platforms | 42335 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42336 | if· | 42336 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42337 | chgrp·0·/boot/grub2/user.cfg | 42337 | chgrp·0·/boot/grub2/user.cfg |
| 42338 | else | 42338 | else |
| 42339 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42339 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42340 | fi | 42340 | fi |
| 42341 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 42341 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 42370, 16 lines modified | Offset 42370, 16 lines modified | ||
| 42370 | ··-·no_reboot_needed | 42370 | ··-·no_reboot_needed |
| 42371 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 42371 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 42372 | ··stat: | 42372 | ··stat: |
| 42373 | ····path:·/boot/grub2/user.cfg | 42373 | ····path:·/boot/grub2/user.cfg |
| 42374 | ··register:·file_exists | 42374 | ··register:·file_exists |
| 42375 | ··when: | 42375 | ··when: |
| 42376 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42377 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42376 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42377 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42378 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42378 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42379 | ··tags: | 42379 | ··tags: |
| 42380 | ··-·CCE-86022-1 | 42380 | ··-·CCE-86022-1 |
| 42381 | ··-·CJIS-5.5.2.2 | 42381 | ··-·CJIS-5.5.2.2 |
| 42382 | ··-·NIST-800-171-3.4.5 | 42382 | ··-·NIST-800-171-3.4.5 |
| 42383 | ··-·NIST-800-53-AC-6(1) | 42383 | ··-·NIST-800-53-AC-6(1) |
| 42384 | ··-·NIST-800-53-CM-6(a) | 42384 | ··-·NIST-800-53-CM-6(a) |
| Offset 42392, 16 lines modified | Offset 42392, 16 lines modified | ||
| 42392 | ··-·no_reboot_needed | 42392 | ··-·no_reboot_needed |
| 42393 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 42393 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 42394 | ··file: | 42394 | ··file: |
| 42395 | ····path:·/boot/grub2/user.cfg | 42395 | ····path:·/boot/grub2/user.cfg |
| 42396 | ····owner:·'0' | 42396 | ····owner:·'0' |
| 42397 | ··when: | 42397 | ··when: |
| 42398 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42399 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42398 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42399 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42400 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42400 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42401 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42401 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42402 | ··tags: | 42402 | ··tags: |
| 42403 | ··-·CCE-86022-1 | 42403 | ··-·CCE-86022-1 |
| 42404 | ··-·CJIS-5.5.2.2 | 42404 | ··-·CJIS-5.5.2.2 |
| 42405 | ··-·NIST-800-171-3.4.5 | 42405 | ··-·NIST-800-171-3.4.5 |
| 42406 | ··-·NIST-800-53-AC-6(1) | 42406 | ··-·NIST-800-53-AC-6(1) |
| Offset 42414, 15 lines modified | Offset 42414, 15 lines modified | ||
| 42414 | ··-·medium_severity | 42414 | ··-·medium_severity |
| 42415 | ··-·no_reboot_needed | 42415 | ··-·no_reboot_needed |
| 42416 | Remediation_Shell_script_⇲ | 42416 | Remediation_Shell_script_⇲ |
| 42417 | Complexity:·low | 42417 | Complexity:·low |
| 42418 | Disruption:·low | 42418 | Disruption:·low |
| 42419 | Strategy:···configure | 42419 | Strategy:···configure |
| 42420 | #·Remediation·is·applicable·only·in·certain·platforms | 42420 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42421 | if· | 42421 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42422 | chown·0·/boot/grub2/user.cfg | 42422 | chown·0·/boot/grub2/user.cfg |
| 42423 | else | 42423 | else |
| 42424 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42424 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42425 | fi | 42425 | fi |
| 42426 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 42426 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 42453, 16 lines modified | Offset 42453, 16 lines modified | ||
| 42453 | ··-·no_reboot_needed | 42453 | ··-·no_reboot_needed |
| 42454 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 42454 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 42455 | ··stat: | 42455 | ··stat: |
| 42456 | ····path:·/boot/grub2/grub.cfg | 42456 | ····path:·/boot/grub2/grub.cfg |
| 42457 | ··register:·file_exists | 42457 | ··register:·file_exists |
| 42458 | ··when: | 42458 | ··when: |
| 42459 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42460 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42459 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42460 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42461 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42461 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42462 | ··tags: | 42462 | ··tags: |
| 42463 | ··-·CCE-85925-6 | 42463 | ··-·CCE-85925-6 |
| 42464 | ··-·NIST-800-171-3.4.5 | 42464 | ··-·NIST-800-171-3.4.5 |
| 42465 | ··-·NIST-800-53-AC-6(1) | 42465 | ··-·NIST-800-53-AC-6(1) |
| 42466 | ··-·NIST-800-53-CM-6(a) | 42466 | ··-·NIST-800-53-CM-6(a) |
| 42467 | ··-·configure_strategy | 42467 | ··-·configure_strategy |
| Offset 42473, 16 lines modified | Offset 42473, 16 lines modified | ||
| 42473 | ··-·no_reboot_needed | 42473 | ··-·no_reboot_needed |
| 42474 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 42474 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 42475 | ··file: | 42475 | ··file: |
| 42476 | ····path:·/boot/grub2/grub.cfg | 42476 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2953/7329 bytes (40.29%) of diff not shown. | |||
| Offset 63726, 22 lines modified | Offset 63726, 22 lines modified | ||
| 000f8ed0:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 000f8ed0:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 000f8ee0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 000f8ee0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 000f8ef0:·7562·322f·7573·6572·2e63·6667·0a20·2073··ub2/user.cfg.··s | 000f8ef0:·7562·322f·7573·6572·2e63·6667·0a20·2073··ub2/user.cfg.··s | ||
| 000f8f00:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 000f8f00:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 000f8f10:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000f8f10:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000f8f20:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 000f8f20:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 000f8f30:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 000f8f30:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 000f8f40:·656e·3a0a·2020·2d20·2722· | 000f8f40:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 000f8f50:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 000f8f60:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000f8f70:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000f8f80:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 000f8f | 000f8f50:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 000f8f | 000f8f60:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 000f8f70:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 000f8f80:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 000f8f90:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 000f8fa0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 000f8fb0:· | 000f8fb0:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 000f8fc0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 000f8fc0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 000f8fd0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 000f8fd0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 000f8fe0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 000f8fe0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 000f8ff0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 000f8ff0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 000f9000:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 000f9000:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 000f9010:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | 000f9010:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 000f9020:·2d38·3630·3133·2d30·0a20·202d·2043·4a49··-86013-0.··-·CJI | 000f9020:·2d38·3630·3133·2d30·0a20·202d·2043·4a49··-86013-0.··-·CJI | ||
| Offset 63763, 22 lines modified | Offset 63763, 22 lines modified | ||
| 000f9120:·616d·653a·2045·6e73·7572·6520·6772·6f75··ame:·Ensure·grou | 000f9120:·616d·653a·2045·6e73·7572·6520·6772·6f75··ame:·Ensure·grou | ||
| 000f9130:·7020·6f77·6e65·7220·3020·6f6e·202f·626f··p·owner·0·on·/bo | 000f9130:·7020·6f77·6e65·7220·3020·6f6e·202f·626f··p·owner·0·on·/bo | ||
| 000f9140:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | 000f9140:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | ||
| 000f9150:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | 000f9150:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | ||
| 000f9160:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 000f9160:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 000f9170:·7573·6572·2e63·6667·0a20·2020·2067·726f··user.cfg.····gro | 000f9170:·7573·6572·2e63·6667·0a20·2020·2067·726f··user.cfg.····gro | ||
| 000f9180:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | 000f9180:·7570·3a20·2730·270a·2020·7768·656e·3a0a··up:·'0'.··when:. | ||
| 000f9190:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000f91a0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000f91b0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000f91c0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000f91 | 000f9190:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 000f91 | 000f91a0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 000f91 | 000f91b0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 000f91c0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000f91d0:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000f91e0:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000f91f0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000f9200:·7 | 000f9200:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000f9210:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000f9210:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000f9220:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000f9220:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000f9230:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000f9230:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000f9240:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000f9240:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000f9250:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | 000f9250:·2263·6f6e·7461·696e·6572·225d·0a20·202d··"container"].··- | ||
| 000f9260:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | 000f9260:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | ||
| 000f9270:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | 000f9270:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | ||
| Offset 63829, 19 lines modified | Offset 63829, 19 lines modified | ||
| 000f9540:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | 000f9540:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 000f9550:·6779·3a3c·2f74·683e·3c74·643e·636f·6e66··gy:</th><td>conf | 000f9550:·6779·3a3c·2f74·683e·3c74·643e·636f·6e66··gy:</th><td>conf | ||
| 000f9560:·6967·7572·653c·2f74·643e·3c2f·7472·3e3c··igure</td></tr>< | 000f9560:·6967·7572·653c·2f74·643e·3c2f·7472·3e3c··igure</td></tr>< | ||
| 000f9570:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | 000f9570:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 000f9580:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | 000f9580:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 000f9590:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | 000f9590:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 000f95a0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | 000f95a0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 000f95b0:·6174·666f·726d·730a·6966·20 | 000f95b0:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | ||
| 000f95c0:·2f73·7973·2f66·6972·6d77·6172·652f·6566··/sys/firmware/ef | |||
| 000f95d0:·6920·5d20·2661·6d70·3b26·616d·703b·2072··i·]·&&·r | |||
| 000f95 | 000f95c0:·2d71·7569·6574·202d·7120·6772·7562·322d··-quiet·-q·grub2- | ||
| 000f95 | 000f95d0:·636f·6d6d·6f6e·2026·616d·703b·2661·6d70··common·&& | ||
| 000f95e0:·3b20·5b20·2d66·202f·7379·732f·6669·726d··;·[·-f·/sys/firm | |||
| 000f95f0:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·& | |||
| 000f9600:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | 000f9600:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | ||
| 000f9610:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | 000f9610:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | ||
| 000f9620:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | 000f9620:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 000f9630:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | 000f9630:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 000f9640:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | 000f9640:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | ||
| 000f9650:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | 000f9650:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | ||
| 000f9660:·322f·7573·6572·2e63·6667·0a0a·656c·7365··2/user.cfg..else | 000f9660:·322f·7573·6572·2e63·6667·0a0a·656c·7365··2/user.cfg..else | ||
| Offset 64255, 22 lines modified | Offset 64255, 22 lines modified | ||
| 000fafe0:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 000fafe0:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 000faff0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 000faff0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 000fb000:·7562·322f·7573·6572·2e63·6667·0a20·2073··ub2/user.cfg.··s | 000fb000:·7562·322f·7573·6572·2e63·6667·0a20·2073··ub2/user.cfg.··s | ||
| 000fb010:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 000fb010:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 000fb020:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | 000fb020:·626f·6f74·2f67·7275·6232·2f75·7365·722e··boot/grub2/user. | ||
| 000fb030:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 000fb030:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 000fb040:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 000fb040:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 000fb050:·656e·3a0a·2020·2d20·2722· | 000fb050:·656e·3a0a·2020·2d20·2722·6772·7562·322d··en:.··-·'"grub2- | ||
| 000fb060:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 000fb070:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000fb080:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000fb090:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 000fb0 | 000fb060:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib | ||
| 000fb0 | 000fb070:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | ||
| 000fb080:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 000fb090:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 000fb0a0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 000fb0b0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 000fb0c0:· | 000fb0c0:·206c·6973·7427·0a20·202d·2061·6e73·6962···list'.··-·ansib | ||
| 000fb0d0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 000fb0d0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 000fb0e0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 000fb0e0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 000fb0f0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 000fb0f0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 000fb100:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 000fb100:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 000fb110:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 000fb110:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 000fb120:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | 000fb120:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 000fb130:·2d38·3630·3232·2d31·0a20·202d·2043·4a49··-86022-1.··-·CJI | 000fb130:·2d38·3630·3232·2d31·0a20·202d·2043·4a49··-86022-1.··-·CJI | ||
| Offset 64291, 22 lines modified | Offset 64291, 22 lines modified | ||
| 000fb220:·6e65·6564·6564·0a0a·2d20·6e61·6d65·3a20··needed..-·name:· | 000fb220:·6e65·6564·6564·0a0a·2d20·6e61·6d65·3a20··needed..-·name:· | ||
| 000fb230:·456e·7375·7265·206f·776e·6572·2030·206f··Ensure·owner·0·o | 000fb230:·456e·7375·7265·206f·776e·6572·2030·206f··Ensure·owner·0·o | ||
| 000fb240:·6e20·2f62·6f6f·742f·6772·7562·322f·7573··n·/boot/grub2/us | 000fb240:·6e20·2f62·6f6f·742f·6772·7562·322f·7573··n·/boot/grub2/us | ||
| 000fb250:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | 000fb250:·6572·2e63·6667·0a20·2066·696c·653a·0a20··er.cfg.··file:.· | ||
| 000fb260:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | 000fb260:·2020·2070·6174·683a·202f·626f·6f74·2f67·····path:·/boot/g | ||
| 000fb270:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 000fb270:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 000fb280:·2020·6f77·6e65·723a·2027·3027·0a20·2077····owner:·'0'.··w | 000fb280:·2020·6f77·6e65·723a·2027·3027·0a20·2077····owner:·'0'.··w | ||
| 000fb290:·6865·6e3a·0a20·202d·2027·22 | 000fb290:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 000fb2a0:·2f65·6669·2220·696e·2061·6e73·6962·6c65··/efi"·in·ansible | |||
| 000fb2b0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000fb2c0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000fb2d0:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 000fb2 | 000fb2a0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | ||
| 000fb2 | 000fb2b0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | ||
| 000fb2c0:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000fb2d0:·6566·6922·2069·6e20·616e·7369·626c·655f··efi"·in·ansible_ | |||
| 000fb2e0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000fb2f0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000fb300:· | 000fb300:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 000fb310:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 000fb310:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 000fb320:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 000fb320:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 000fb330:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 000fb330:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 000fb340:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 000fb340:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 000fb350:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 000fb350:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| Max diff block lines reached; 13085/23082 bytes (56.69%) of diff not shown. | |||
| Offset 8460, 16 lines modified | Offset 8460, 16 lines modified | ||
| 8460 | ··-·no_reboot_needed | 8460 | ··-·no_reboot_needed |
| 8461 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8461 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8462 | ··stat: | 8462 | ··stat: |
| 8463 | ····path:·/boot/grub2/user.cfg | 8463 | ····path:·/boot/grub2/user.cfg |
| 8464 | ··register:·file_exists | 8464 | ··register:·file_exists |
| 8465 | ··when: | 8465 | ··when: |
| 8466 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8467 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8466 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8467 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8468 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8468 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8469 | ··tags: | 8469 | ··tags: |
| 8470 | ··-·CCE-86013-0 | 8470 | ··-·CCE-86013-0 |
| 8471 | ··-·CJIS-5.5.2.2 | 8471 | ··-·CJIS-5.5.2.2 |
| 8472 | ··-·NIST-800-171-3.4.5 | 8472 | ··-·NIST-800-171-3.4.5 |
| 8473 | ··-·NIST-800-53-AC-6(1) | 8473 | ··-·NIST-800-53-AC-6(1) |
| 8474 | ··-·NIST-800-53-CM-6(a) | 8474 | ··-·NIST-800-53-CM-6(a) |
| Offset 8482, 16 lines modified | Offset 8482, 16 lines modified | ||
| 8482 | ··-·no_reboot_needed | 8482 | ··-·no_reboot_needed |
| 8483 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8483 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8484 | ··file: | 8484 | ··file: |
| 8485 | ····path:·/boot/grub2/user.cfg | 8485 | ····path:·/boot/grub2/user.cfg |
| 8486 | ····group:·'0' | 8486 | ····group:·'0' |
| 8487 | ··when: | 8487 | ··when: |
| 8488 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8489 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8488 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8489 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8490 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8490 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8491 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8491 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8492 | ··tags: | 8492 | ··tags: |
| 8493 | ··-·CCE-86013-0 | 8493 | ··-·CCE-86013-0 |
| 8494 | ··-·CJIS-5.5.2.2 | 8494 | ··-·CJIS-5.5.2.2 |
| 8495 | ··-·NIST-800-171-3.4.5 | 8495 | ··-·NIST-800-171-3.4.5 |
| 8496 | ··-·NIST-800-53-AC-6(1) | 8496 | ··-·NIST-800-53-AC-6(1) |
| Offset 8504, 15 lines modified | Offset 8504, 15 lines modified | ||
| 8504 | ··-·medium_severity | 8504 | ··-·medium_severity |
| 8505 | ··-·no_reboot_needed | 8505 | ··-·no_reboot_needed |
| 8506 | Remediation_Shell_script_⇲ | 8506 | Remediation_Shell_script_⇲ |
| 8507 | Complexity:·low | 8507 | Complexity:·low |
| 8508 | Disruption:·low | 8508 | Disruption:·low |
| 8509 | Strategy:···configure | 8509 | Strategy:···configure |
| 8510 | #·Remediation·is·applicable·only·in·certain·platforms | 8510 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8511 | if· | 8511 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8512 | chgrp·0·/boot/grub2/user.cfg | 8512 | chgrp·0·/boot/grub2/user.cfg |
| 8513 | else | 8513 | else |
| 8514 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8514 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8515 | fi | 8515 | fi |
| 8516 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 8516 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 8545, 16 lines modified | Offset 8545, 16 lines modified | ||
| 8545 | ··-·no_reboot_needed | 8545 | ··-·no_reboot_needed |
| 8546 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8546 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8547 | ··stat: | 8547 | ··stat: |
| 8548 | ····path:·/boot/grub2/user.cfg | 8548 | ····path:·/boot/grub2/user.cfg |
| 8549 | ··register:·file_exists | 8549 | ··register:·file_exists |
| 8550 | ··when: | 8550 | ··when: |
| 8551 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8552 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8551 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8552 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8553 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8554 | ··tags: | 8554 | ··tags: |
| 8555 | ··-·CCE-86022-1 | 8555 | ··-·CCE-86022-1 |
| 8556 | ··-·CJIS-5.5.2.2 | 8556 | ··-·CJIS-5.5.2.2 |
| 8557 | ··-·NIST-800-171-3.4.5 | 8557 | ··-·NIST-800-171-3.4.5 |
| 8558 | ··-·NIST-800-53-AC-6(1) | 8558 | ··-·NIST-800-53-AC-6(1) |
| 8559 | ··-·NIST-800-53-CM-6(a) | 8559 | ··-·NIST-800-53-CM-6(a) |
| Offset 8567, 16 lines modified | Offset 8567, 16 lines modified | ||
| 8567 | ··-·no_reboot_needed | 8567 | ··-·no_reboot_needed |
| 8568 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 8568 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 8569 | ··file: | 8569 | ··file: |
| 8570 | ····path:·/boot/grub2/user.cfg | 8570 | ····path:·/boot/grub2/user.cfg |
| 8571 | ····owner:·'0' | 8571 | ····owner:·'0' |
| 8572 | ··when: | 8572 | ··when: |
| 8573 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8574 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8573 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8574 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8575 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8575 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8576 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8576 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8577 | ··tags: | 8577 | ··tags: |
| 8578 | ··-·CCE-86022-1 | 8578 | ··-·CCE-86022-1 |
| 8579 | ··-·CJIS-5.5.2.2 | 8579 | ··-·CJIS-5.5.2.2 |
| 8580 | ··-·NIST-800-171-3.4.5 | 8580 | ··-·NIST-800-171-3.4.5 |
| 8581 | ··-·NIST-800-53-AC-6(1) | 8581 | ··-·NIST-800-53-AC-6(1) |
| Offset 8589, 15 lines modified | Offset 8589, 15 lines modified | ||
| 8589 | ··-·medium_severity | 8589 | ··-·medium_severity |
| 8590 | ··-·no_reboot_needed | 8590 | ··-·no_reboot_needed |
| 8591 | Remediation_Shell_script_⇲ | 8591 | Remediation_Shell_script_⇲ |
| 8592 | Complexity:·low | 8592 | Complexity:·low |
| 8593 | Disruption:·low | 8593 | Disruption:·low |
| 8594 | Strategy:···configure | 8594 | Strategy:···configure |
| 8595 | #·Remediation·is·applicable·only·in·certain·platforms | 8595 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8596 | if· | 8596 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8597 | chown·0·/boot/grub2/user.cfg | 8597 | chown·0·/boot/grub2/user.cfg |
| 8598 | else | 8598 | else |
| 8599 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8599 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8600 | fi | 8600 | fi |
| 8601 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 8601 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 8628, 16 lines modified | Offset 8628, 16 lines modified | ||
| 8628 | ··-·no_reboot_needed | 8628 | ··-·no_reboot_needed |
| 8629 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8629 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8630 | ··stat: | 8630 | ··stat: |
| 8631 | ····path:·/boot/grub2/grub.cfg | 8631 | ····path:·/boot/grub2/grub.cfg |
| 8632 | ··register:·file_exists | 8632 | ··register:·file_exists |
| 8633 | ··when: | 8633 | ··when: |
| 8634 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8635 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8634 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8635 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8636 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8636 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8637 | ··tags: | 8637 | ··tags: |
| 8638 | ··-·CCE-85925-6 | 8638 | ··-·CCE-85925-6 |
| 8639 | ··-·NIST-800-171-3.4.5 | 8639 | ··-·NIST-800-171-3.4.5 |
| 8640 | ··-·NIST-800-53-AC-6(1) | 8640 | ··-·NIST-800-53-AC-6(1) |
| 8641 | ··-·NIST-800-53-CM-6(a) | 8641 | ··-·NIST-800-53-CM-6(a) |
| 8642 | ··-·configure_strategy | 8642 | ··-·configure_strategy |
| Offset 8648, 16 lines modified | Offset 8648, 16 lines modified | ||
| 8648 | ··-·no_reboot_needed | 8648 | ··-·no_reboot_needed |
| 8649 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 8649 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 8650 | ··file: | 8650 | ··file: |
| 8651 | ····path:·/boot/grub2/grub.cfg | 8651 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2945/7305 bytes (40.31%) of diff not shown. | |||
| Offset 63722, 22 lines modified | Offset 63722, 22 lines modified | ||
| 000f8e90:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 000f8e90:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 000f8ea0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | 000f8ea0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | ||
| 000f8eb0:·7573·6572·2e63·6667·0a20·2073·7461·743a··user.cfg.··stat: | 000f8eb0:·7573·6572·2e63·6667·0a20·2073·7461·743a··user.cfg.··stat: | ||
| 000f8ec0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000f8ec0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000f8ed0:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 000f8ed0:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 000f8ee0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 000f8ee0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 000f8ef0:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 000f8ef0:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 000f8f00:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000f8f10:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000f8f20:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000f8f30:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000f8f | 000f8f00:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 000f8f | 000f8f10:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 000f8f | 000f8f20:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 000f8f30:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000f8f40:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000f8f50:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000f8f60:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000f8f70:·7 | 000f8f70:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000f8f80:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000f8f80:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000f8f90:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000f8f90:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000f8fa0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000f8fa0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000f8fb0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000f8fb0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000f8fc0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 000f8fc0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 000f8fd0:·6167·733a·0a20·202d·2043·4345·2d38·3630··ags:.··-·CCE-860 | 000f8fd0:·6167·733a·0a20·202d·2043·4345·2d38·3630··ags:.··-·CCE-860 | ||
| 000f8fe0:·3133·2d30·0a20·202d·2043·4a49·532d·352e··13-0.··-·CJIS-5. | 000f8fe0:·3133·2d30·0a20·202d·2043·4a49·532d·352e··13-0.··-·CJIS-5. | ||
| Offset 63759, 21 lines modified | Offset 63759, 21 lines modified | ||
| 000f90e0:·2045·6e73·7572·6520·6772·6f75·7020·6f77···Ensure·group·ow | 000f90e0:·2045·6e73·7572·6520·6772·6f75·7020·6f77···Ensure·group·ow | ||
| 000f90f0:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | 000f90f0:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | ||
| 000f9100:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | 000f9100:·7275·6232·2f75·7365·722e·6366·670a·2020··rub2/user.cfg.·· | ||
| 000f9110:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | 000f9110:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | ||
| 000f9120:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 000f9120:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 000f9130:·2e63·6667·0a20·2020·2067·726f·7570·3a20··.cfg.····group:· | 000f9130:·2e63·6667·0a20·2020·2067·726f·7570·3a20··.cfg.····group:· | ||
| 000f9140:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | 000f9140:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | ||
| 000f9150:·2722·2f62·6f6f·742f·6566·6922·2069·6e20··'"/boot/efi"·in· | |||
| 000f9160:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 000f9170:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 000f9180:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 000f91 | 000f9150:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | ||
| 000f91 | 000f9160:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | ||
| 000f91 | 000f9170:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | ||
| 000f9180:·222f·626f·6f74·2f65·6669·2220·696e·2061··"/boot/efi"·in·a | |||
| 000f9190:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 000f91a0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 000f91b0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 000f91c0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 000f91c0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 000f91d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 000f91d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 000f91e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | 000f91e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 000f91f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | 000f91f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 000f9200:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | 000f9200:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 000f9210:·7461·696e·6572·225d·0a20·202d·2066·696c··tainer"].··-·fil | 000f9210:·7461·696e·6572·225d·0a20·202d·2066·696c··tainer"].··-·fil | ||
| 000f9220:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | 000f9220:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | ||
| Offset 63825, 19 lines modified | Offset 63825, 19 lines modified | ||
| 000f9500:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | 000f9500:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 000f9510:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | 000f9510:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 000f9520:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | 000f9520:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 000f9530:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | 000f9530:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 000f9540:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 000f9540:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 000f9550:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 000f9550:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000f9560:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 000f9560:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 000f9570:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 000f9570:·726d·730a·6966·205b·202d·6620·2f73·7973··rms.if·[·-f·/sys | |||
| 000f9580:·2f66·6972·6d77·6172·652f·6566·6920·5d20··/firmware/efi·]· | |||
| 000f9590:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 000f95 | 000f9580:·6574·202d·7120·6772·7562·322d·636f·6d6d··et·-q·grub2-comm | ||
| 000f95 | 000f9590:·6f6e·2026·616d·703b·2661·6d70·3b20·5b20··on·&&·[· | ||
| 000f95a0:·2d66·202f·7379·732f·6669·726d·7761·7265··-f·/sys/firmware | |||
| 000f95b0:·2f65·6669·205d·2026·616d·703b·2661·6d70··/efi·]·&& | |||
| 000f95c0:·3b20·7b20·5b20·2120·2d66·202f·2e64·6f63··;·{·[·!·-f·/.doc | 000f95c0:·3b20·7b20·5b20·2120·2d66·202f·2e64·6f63··;·{·[·!·-f·/.doc | ||
| 000f95d0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | 000f95d0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 000f95e0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | 000f95e0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 000f95f0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | 000f95f0:·2e63·6f6e·7461·696e·6572·656e·7620·5d3b··.containerenv·]; | ||
| 000f9600:·207d·3b20·7468·656e·0a0a·6368·6772·7020···};·then..chgrp· | 000f9600:·207d·3b20·7468·656e·0a0a·6368·6772·7020···};·then..chgrp· | ||
| 000f9610:·3020·2f62·6f6f·742f·6772·7562·322f·7573··0·/boot/grub2/us | 000f9610:·3020·2f62·6f6f·742f·6772·7562·322f·7573··0·/boot/grub2/us | ||
| 000f9620:·6572·2e63·6667·0a0a·656c·7365·0a20·2020··er.cfg..else.··· | 000f9620:·6572·2e63·6667·0a0a·656c·7365·0a20·2020··er.cfg..else.··· | ||
| Offset 64251, 22 lines modified | Offset 64251, 22 lines modified | ||
| 000fafa0:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 000fafa0:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 000fafb0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | 000fafb0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | ||
| 000fafc0:·7573·6572·2e63·6667·0a20·2073·7461·743a··user.cfg.··stat: | 000fafc0:·7573·6572·2e63·6667·0a20·2073·7461·743a··user.cfg.··stat: | ||
| 000fafd0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 000fafd0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 000fafe0:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 000fafe0:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 000faff0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 000faff0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 000fb000:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 000fb000:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 000fb010:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000fb020:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000fb030:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000fb040:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000fb0 | 000fb010:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | ||
| 000fb0 | 000fb020:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | ||
| 000fb0 | 000fb030:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | ||
| 000fb040:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 000fb050:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 000fb060:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 000fb070:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 000fb080:·7 | 000fb080:·7427·0a20·202d·2061·6e73·6962·6c65·5f76··t'.··-·ansible_v | ||
| 000fb090:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | 000fb090:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 000fb0a0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | 000fb0a0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 000fb0b0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | 000fb0b0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 000fb0c0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | 000fb0c0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 000fb0d0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | 000fb0d0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 000fb0e0:·6167·733a·0a20·202d·2043·4345·2d38·3630··ags:.··-·CCE-860 | 000fb0e0:·6167·733a·0a20·202d·2043·4345·2d38·3630··ags:.··-·CCE-860 | ||
| 000fb0f0:·3232·2d31·0a20·202d·2043·4a49·532d·352e··22-1.··-·CJIS-5. | 000fb0f0:·3232·2d31·0a20·202d·2043·4a49·532d·352e··22-1.··-·CJIS-5. | ||
| Offset 64287, 22 lines modified | Offset 64287, 22 lines modified | ||
| 000fb1e0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | 000fb1e0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | ||
| 000fb1f0:·7265·206f·776e·6572·2030·206f·6e20·2f62··re·owner·0·on·/b | 000fb1f0:·7265·206f·776e·6572·2030·206f·6e20·2f62··re·owner·0·on·/b | ||
| 000fb200:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | 000fb200:·6f6f·742f·6772·7562·322f·7573·6572·2e63··oot/grub2/user.c | ||
| 000fb210:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 000fb210:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 000fb220:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 000fb220:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 000fb230:·2f75·7365·722e·6366·670a·2020·2020·6f77··/user.cfg.····ow | 000fb230:·2f75·7365·722e·6366·670a·2020·2020·6f77··/user.cfg.····ow | ||
| 000fb240:·6e65·723a·2027·3027·0a20·2077·6865·6e3a··ner:·'0'.··when: | 000fb240:·6e65·723a·2027·3027·0a20·2077·6865·6e3a··ner:·'0'.··when: | ||
| 000fb250:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000fb260:·2220·696e·2061·6e73·6962·6c65·5f6d·6f75··"·in·ansible_mou | |||
| 000fb270:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000fb280:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000fb2 | 000fb250:·0a20·202d·2027·2267·7275·6232·2d63·6f6d··.··-·'"grub2-com | ||
| 000fb2 | 000fb260:·6d6f·6e22·2069·6e20·616e·7369·626c·655f··mon"·in·ansible_ | ||
| 000fb2 | 000fb270:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | ||
| 000fb280:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000fb290:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000fb2a0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000fb2b0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000fb2c0:· | 000fb2c0:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 000fb2d0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 000fb2d0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 000fb2e0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 000fb2e0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 000fb2f0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 000fb2f0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 000fb300:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 000fb300:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 000fb310:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 000fb310:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| Max diff block lines reached; 13223/23082 bytes (57.29%) of diff not shown. | |||
| Offset 8459, 16 lines modified | Offset 8459, 16 lines modified | ||
| 8459 | ··-·no_reboot_needed | 8459 | ··-·no_reboot_needed |
| 8460 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8460 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8461 | ··stat: | 8461 | ··stat: |
| 8462 | ····path:·/boot/grub2/user.cfg | 8462 | ····path:·/boot/grub2/user.cfg |
| 8463 | ··register:·file_exists | 8463 | ··register:·file_exists |
| 8464 | ··when: | 8464 | ··when: |
| 8465 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8466 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8465 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8466 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8467 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8467 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8468 | ··tags: | 8468 | ··tags: |
| 8469 | ··-·CCE-86013-0 | 8469 | ··-·CCE-86013-0 |
| 8470 | ··-·CJIS-5.5.2.2 | 8470 | ··-·CJIS-5.5.2.2 |
| 8471 | ··-·NIST-800-171-3.4.5 | 8471 | ··-·NIST-800-171-3.4.5 |
| 8472 | ··-·NIST-800-53-AC-6(1) | 8472 | ··-·NIST-800-53-AC-6(1) |
| 8473 | ··-·NIST-800-53-CM-6(a) | 8473 | ··-·NIST-800-53-CM-6(a) |
| Offset 8481, 16 lines modified | Offset 8481, 16 lines modified | ||
| 8481 | ··-·no_reboot_needed | 8481 | ··-·no_reboot_needed |
| 8482 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 8482 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 8483 | ··file: | 8483 | ··file: |
| 8484 | ····path:·/boot/grub2/user.cfg | 8484 | ····path:·/boot/grub2/user.cfg |
| 8485 | ····group:·'0' | 8485 | ····group:·'0' |
| 8486 | ··when: | 8486 | ··when: |
| 8487 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8488 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8487 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8488 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8489 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8489 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8490 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8490 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8491 | ··tags: | 8491 | ··tags: |
| 8492 | ··-·CCE-86013-0 | 8492 | ··-·CCE-86013-0 |
| 8493 | ··-·CJIS-5.5.2.2 | 8493 | ··-·CJIS-5.5.2.2 |
| 8494 | ··-·NIST-800-171-3.4.5 | 8494 | ··-·NIST-800-171-3.4.5 |
| 8495 | ··-·NIST-800-53-AC-6(1) | 8495 | ··-·NIST-800-53-AC-6(1) |
| Offset 8503, 15 lines modified | Offset 8503, 15 lines modified | ||
| 8503 | ··-·medium_severity | 8503 | ··-·medium_severity |
| 8504 | ··-·no_reboot_needed | 8504 | ··-·no_reboot_needed |
| 8505 | Remediation_Shell_script_⇲ | 8505 | Remediation_Shell_script_⇲ |
| 8506 | Complexity:·low | 8506 | Complexity:·low |
| 8507 | Disruption:·low | 8507 | Disruption:·low |
| 8508 | Strategy:···configure | 8508 | Strategy:···configure |
| 8509 | #·Remediation·is·applicable·only·in·certain·platforms | 8509 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8510 | if· | 8510 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8511 | chgrp·0·/boot/grub2/user.cfg | 8511 | chgrp·0·/boot/grub2/user.cfg |
| 8512 | else | 8512 | else |
| 8513 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8513 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8514 | fi | 8514 | fi |
| 8515 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 8515 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 8544, 16 lines modified | Offset 8544, 16 lines modified | ||
| 8544 | ··-·no_reboot_needed | 8544 | ··-·no_reboot_needed |
| 8545 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 8545 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 8546 | ··stat: | 8546 | ··stat: |
| 8547 | ····path:·/boot/grub2/user.cfg | 8547 | ····path:·/boot/grub2/user.cfg |
| 8548 | ··register:·file_exists | 8548 | ··register:·file_exists |
| 8549 | ··when: | 8549 | ··when: |
| 8550 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8551 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8550 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8551 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8552 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8552 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8553 | ··tags: | 8553 | ··tags: |
| 8554 | ··-·CCE-86022-1 | 8554 | ··-·CCE-86022-1 |
| 8555 | ··-·CJIS-5.5.2.2 | 8555 | ··-·CJIS-5.5.2.2 |
| 8556 | ··-·NIST-800-171-3.4.5 | 8556 | ··-·NIST-800-171-3.4.5 |
| 8557 | ··-·NIST-800-53-AC-6(1) | 8557 | ··-·NIST-800-53-AC-6(1) |
| 8558 | ··-·NIST-800-53-CM-6(a) | 8558 | ··-·NIST-800-53-CM-6(a) |
| Offset 8566, 16 lines modified | Offset 8566, 16 lines modified | ||
| 8566 | ··-·no_reboot_needed | 8566 | ··-·no_reboot_needed |
| 8567 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 8567 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 8568 | ··file: | 8568 | ··file: |
| 8569 | ····path:·/boot/grub2/user.cfg | 8569 | ····path:·/boot/grub2/user.cfg |
| 8570 | ····owner:·'0' | 8570 | ····owner:·'0' |
| 8571 | ··when: | 8571 | ··when: |
| 8572 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8573 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8572 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8573 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8574 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8574 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8575 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 8575 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 8576 | ··tags: | 8576 | ··tags: |
| 8577 | ··-·CCE-86022-1 | 8577 | ··-·CCE-86022-1 |
| 8578 | ··-·CJIS-5.5.2.2 | 8578 | ··-·CJIS-5.5.2.2 |
| 8579 | ··-·NIST-800-171-3.4.5 | 8579 | ··-·NIST-800-171-3.4.5 |
| 8580 | ··-·NIST-800-53-AC-6(1) | 8580 | ··-·NIST-800-53-AC-6(1) |
| Offset 8588, 15 lines modified | Offset 8588, 15 lines modified | ||
| 8588 | ··-·medium_severity | 8588 | ··-·medium_severity |
| 8589 | ··-·no_reboot_needed | 8589 | ··-·no_reboot_needed |
| 8590 | Remediation_Shell_script_⇲ | 8590 | Remediation_Shell_script_⇲ |
| 8591 | Complexity:·low | 8591 | Complexity:·low |
| 8592 | Disruption:·low | 8592 | Disruption:·low |
| 8593 | Strategy:···configure | 8593 | Strategy:···configure |
| 8594 | #·Remediation·is·applicable·only·in·certain·platforms | 8594 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8595 | if· | 8595 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 8596 | chown·0·/boot/grub2/user.cfg | 8596 | chown·0·/boot/grub2/user.cfg |
| 8597 | else | 8597 | else |
| 8598 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8598 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8599 | fi | 8599 | fi |
| 8600 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 8600 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 8627, 16 lines modified | Offset 8627, 16 lines modified | ||
| 8627 | ··-·no_reboot_needed | 8627 | ··-·no_reboot_needed |
| 8628 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 8628 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 8629 | ··stat: | 8629 | ··stat: |
| 8630 | ····path:·/boot/grub2/grub.cfg | 8630 | ····path:·/boot/grub2/grub.cfg |
| 8631 | ··register:·file_exists | 8631 | ··register:·file_exists |
| 8632 | ··when: | 8632 | ··when: |
| 8633 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8634 | ··-·'"grub2-common"·in·ansible_facts.packages' | 8633 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 8634 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 8635 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 8635 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 8636 | ··tags: | 8636 | ··tags: |
| 8637 | ··-·CCE-85925-6 | 8637 | ··-·CCE-85925-6 |
| 8638 | ··-·NIST-800-171-3.4.5 | 8638 | ··-·NIST-800-171-3.4.5 |
| 8639 | ··-·NIST-800-53-AC-6(1) | 8639 | ··-·NIST-800-53-AC-6(1) |
| 8640 | ··-·NIST-800-53-CM-6(a) | 8640 | ··-·NIST-800-53-CM-6(a) |
| 8641 | ··-·configure_strategy | 8641 | ··-·configure_strategy |
| Offset 8647, 16 lines modified | Offset 8647, 16 lines modified | ||
| 8647 | ··-·no_reboot_needed | 8647 | ··-·no_reboot_needed |
| 8648 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 8648 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 8649 | ··file: | 8649 | ··file: |
| 8650 | ····path:·/boot/grub2/grub.cfg | 8650 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2945/7305 bytes (40.31%) of diff not shown. | |||
| Offset 190942, 22 lines modified | Offset 190942, 22 lines modified | ||
| 002e9dd0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | 002e9dd0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | ||
| 002e9de0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | 002e9de0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | ||
| 002e9df0:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 002e9df0:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 002e9e00:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 002e9e00:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 002e9e10:·3a20·2f62·6f6f·742f·6772·7562·322f·7573··:·/boot/grub2/us | 002e9e10:·3a20·2f62·6f6f·742f·6772·7562·322f·7573··:·/boot/grub2/us | ||
| 002e9e20:·6572·2e63·6667·0a20·2072·6567·6973·7465··er.cfg.··registe | 002e9e20:·6572·2e63·6667·0a20·2072·6567·6973·7465··er.cfg.··registe | ||
| 002e9e30:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | 002e9e30:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | ||
| 002e9e40:·2077·6865·6e3a·0a20·202d·2027·22 | 002e9e40:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 002e9e50:·6f74·2f65·6669·2220·696e·2061·6e73·6962··ot/efi"·in·ansib | |||
| 002e9e60:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 002e9e70:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002e9e80:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 002e9e | 002e9e50:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 002e9e | 002e9e60:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 002e9e | 002e9e70:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | ||
| 002e9e80:·742f·6566·6922·2069·6e20·616e·7369·626c··t/efi"·in·ansibl | |||
| 002e9e90:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002e9ea0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002e9eb0:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 002e9ec0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 002e9ec0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 002e9ed0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 002e9ed0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 002e9ee0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 002e9ee0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 002e9ef0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 002e9ef0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 002e9f00:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 002e9f00:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 002e9f10:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | 002e9f10:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 002e9f20:·4343·452d·3836·3031·332d·300a·2020·2d20··CCE-86013-0.··-· | 002e9f20:·4343·452d·3836·3031·332d·300a·2020·2d20··CCE-86013-0.··-· | ||
| Offset 190979, 22 lines modified | Offset 190979, 22 lines modified | ||
| 002ea020:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | 002ea020:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | ||
| 002ea030:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | 002ea030:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | ||
| 002ea040:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | 002ea040:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 002ea050:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | 002ea050:·2e63·6667·0a20·2066·696c·653a·0a20·2020··.cfg.··file:.··· | ||
| 002ea060:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 002ea060:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 002ea070:·6232·2f75·7365·722e·6366·670a·2020·2020··b2/user.cfg.···· | 002ea070:·6232·2f75·7365·722e·6366·670a·2020·2020··b2/user.cfg.···· | ||
| 002ea080:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | 002ea080:·6772·6f75·703a·2027·3027·0a20·2077·6865··group:·'0'.··whe | ||
| 002ea090:·6e3a·0a20·202d·2027·22 | 002ea090:·6e3a·0a20·202d·2027·2267·7275·6232·2d63··n:.··-·'"grub2-c | ||
| 002ea0a0:·6669·2220·696e·2061·6e73·6962·6c65·5f6d··fi"·in·ansible_m | |||
| 002ea0b0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002ea0c0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002ea0d0:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 002ea0 | 002ea0a0:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl | ||
| 002ea0 | 002ea0b0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | ||
| 002ea0c0:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 002ea0d0:·6922·2069·6e20·616e·7369·626c·655f·6d6f··i"·in·ansible_mo | |||
| 002ea0e0:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002ea0f0:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002ea100:·6 | 002ea100:·6c69·7374·270a·2020·2d20·616e·7369·626c··list'.··-·ansibl | ||
| 002ea110:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 002ea110:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 002ea120:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | 002ea120:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 002ea130:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | 002ea130:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 002ea140:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | 002ea140:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 002ea150:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | 002ea150:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 002ea160:·2020·2d20·6669·6c65·5f65·7869·7374·732e····-·file_exists. | 002ea160:·2020·2d20·6669·6c65·5f65·7869·7374·732e····-·file_exists. | ||
| 002ea170:·7374·6174·2069·7320·6465·6669·6e65·6420··stat·is·defined· | 002ea170:·7374·6174·2069·7320·6465·6669·6e65·6420··stat·is·defined· | ||
| Offset 191045, 19 lines modified | Offset 191045, 19 lines modified | ||
| 002ea440:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | 002ea440:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 002ea450:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | 002ea450:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | ||
| 002ea460:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | 002ea460:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | ||
| 002ea470:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | 002ea470:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 002ea480:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | 002ea480:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 002ea490:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | 002ea490:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 002ea4a0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | 002ea4a0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 002ea4b0:·2070·6c61·7466·6f72·6d73·0a69·6620· | 002ea4b0:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | ||
| 002ea4c0:·2d66·202f·7379·732f·6669·726d·7761·7265··-f·/sys/firmware | |||
| 002ea4d0:·2f65·6669·205d·2026·616d·703b·2661·6d70··/efi·]·&& | |||
| 002ea4 | 002ea4c0:·6d20·2d2d·7175·6965·7420·2d71·2067·7275··m·--quiet·-q·gru | ||
| 002ea4 | 002ea4d0:·6232·2d63·6f6d·6d6f·6e20·2661·6d70·3b26··b2-common·&& | ||
| 002ea4e0:·616d·703b·205b·202d·6620·2f73·7973·2f66··amp;·[·-f·/sys/f | |||
| 002ea4f0:·6972·6d77·6172·652f·6566·6920·5d20·2661··irmware/efi·]·&a | |||
| 002ea500:·6d70·3b26·616d·703b·207b·205b·2021·202d··mp;&·{·[·!·- | 002ea500:·6d70·3b26·616d·703b·207b·205b·2021·202d··mp;&·{·[·!·- | ||
| 002ea510:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | 002ea510:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | ||
| 002ea520:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | 002ea520:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | ||
| 002ea530:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | 002ea530:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | ||
| 002ea540:·7265·6e76·205d·3b20·7d3b·2074·6865·6e0a··renv·];·};·then. | 002ea540:·7265·6e76·205d·3b20·7d3b·2074·6865·6e0a··renv·];·};·then. | ||
| 002ea550:·0a63·6867·7270·2030·202f·626f·6f74·2f67··.chgrp·0·/boot/g | 002ea550:·0a63·6867·7270·2030·202f·626f·6f74·2f67··.chgrp·0·/boot/g | ||
| 002ea560:·7275·6232·2f75·7365·722e·6366·670a·0a65··rub2/user.cfg..e | 002ea560:·7275·6232·2f75·7365·722e·6366·670a·0a65··rub2/user.cfg..e | ||
| Offset 191471, 22 lines modified | Offset 191471, 22 lines modified | ||
| 002ebee0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | 002ebee0:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for | ||
| 002ebef0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | 002ebef0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot | ||
| 002ebf00:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | 002ebf00:·2f67·7275·6232·2f75·7365·722e·6366·670a··/grub2/user.cfg. | ||
| 002ebf10:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | 002ebf10:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path | ||
| 002ebf20:·3a20·2f62·6f6f·742f·6772·7562·322f·7573··:·/boot/grub2/us | 002ebf20:·3a20·2f62·6f6f·742f·6772·7562·322f·7573··:·/boot/grub2/us | ||
| 002ebf30:·6572·2e63·6667·0a20·2072·6567·6973·7465··er.cfg.··registe | 002ebf30:·6572·2e63·6667·0a20·2072·6567·6973·7465··er.cfg.··registe | ||
| 002ebf40:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | 002ebf40:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.· | ||
| 002ebf50:·2077·6865·6e3a·0a20·202d·2027·22 | 002ebf50:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"gru | ||
| 002ebf60:·6f74·2f65·6669·2220·696e·2061·6e73·6962··ot/efi"·in·ansib | |||
| 002ebf70:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 002ebf80:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002ebf90:·2229·207c·206c·6973·7427·0a20·202d·2027··")·|·list'.··-·' | |||
| 002ebf | 002ebf60:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an | ||
| 002ebf | 002ebf70:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | ||
| 002ebf | 002ebf80:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | ||
| 002ebf90:·742f·6566·6922·2069·6e20·616e·7369·626c··t/efi"·in·ansibl | |||
| 002ebfa0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002ebfb0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002ebfc0:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 002ebfd0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 002ebfd0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 002ebfe0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 002ebfe0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 002ebff0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 002ebff0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 002ec000:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 002ec000:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 002ec010:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 002ec010:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 002ec020:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | 002ec020:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 002ec030:·4343·452d·3836·3032·322d·310a·2020·2d20··CCE-86022-1.··-· | 002ec030:·4343·452d·3836·3032·322d·310a·2020·2d20··CCE-86022-1.··-· | ||
| Offset 191507, 22 lines modified | Offset 191507, 22 lines modified | ||
| 002ec120:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | 002ec120:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | ||
| 002ec130:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | 002ec130:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | ||
| 002ec140:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 002ec140:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 002ec150:·2f75·7365·722e·6366·670a·2020·6669·6c65··/user.cfg.··file | 002ec150:·2f75·7365·722e·6366·670a·2020·6669·6c65··/user.cfg.··file | ||
| 002ec160:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 002ec160:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 002ec170:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | 002ec170:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | ||
| 002ec180:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | 002ec180:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | ||
| 002ec190:·2020·7768·656e·3a0a·2020·2d20·2722· | 002ec190:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 002ec1a0:·6f6f·742f·6566·6922·2069·6e20·616e·7369··oot/efi"·in·ansi | |||
| 002ec1b0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 002ec1c0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 002ec1d0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 002ec1 | 002ec1a0:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | ||
| 002ec1 | 002ec1b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | ||
| 002ec | 002ec1c0:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | ||
| 002ec1d0:·6f74·2f65·6669·2220·696e·2061·6e73·6962··ot/efi"·in·ansib | |||
| 002ec1e0:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 002ec1f0:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002ec200:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 002ec210:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 002ec210:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 002ec220:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 002ec220:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 002ec230:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 002ec230:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 002ec240:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 002ec240:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 002ec250:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 002ec250:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| Max diff block lines reached; 13375/23382 bytes (57.20%) of diff not shown. | |||
| Offset 42284, 16 lines modified | Offset 42284, 16 lines modified | ||
| 42284 | ··-·no_reboot_needed | 42284 | ··-·no_reboot_needed |
| 42285 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 42285 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 42286 | ··stat: | 42286 | ··stat: |
| 42287 | ····path:·/boot/grub2/user.cfg | 42287 | ····path:·/boot/grub2/user.cfg |
| 42288 | ··register:·file_exists | 42288 | ··register:·file_exists |
| 42289 | ··when: | 42289 | ··when: |
| 42290 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42291 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42290 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42291 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42292 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42292 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42293 | ··tags: | 42293 | ··tags: |
| 42294 | ··-·CCE-86013-0 | 42294 | ··-·CCE-86013-0 |
| 42295 | ··-·CJIS-5.5.2.2 | 42295 | ··-·CJIS-5.5.2.2 |
| 42296 | ··-·NIST-800-171-3.4.5 | 42296 | ··-·NIST-800-171-3.4.5 |
| 42297 | ··-·NIST-800-53-AC-6(1) | 42297 | ··-·NIST-800-53-AC-6(1) |
| 42298 | ··-·NIST-800-53-CM-6(a) | 42298 | ··-·NIST-800-53-CM-6(a) |
| Offset 42306, 16 lines modified | Offset 42306, 16 lines modified | ||
| 42306 | ··-·no_reboot_needed | 42306 | ··-·no_reboot_needed |
| 42307 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 42307 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 42308 | ··file: | 42308 | ··file: |
| 42309 | ····path:·/boot/grub2/user.cfg | 42309 | ····path:·/boot/grub2/user.cfg |
| 42310 | ····group:·'0' | 42310 | ····group:·'0' |
| 42311 | ··when: | 42311 | ··when: |
| 42312 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42313 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42312 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42313 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42314 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42314 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42315 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42315 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42316 | ··tags: | 42316 | ··tags: |
| 42317 | ··-·CCE-86013-0 | 42317 | ··-·CCE-86013-0 |
| 42318 | ··-·CJIS-5.5.2.2 | 42318 | ··-·CJIS-5.5.2.2 |
| 42319 | ··-·NIST-800-171-3.4.5 | 42319 | ··-·NIST-800-171-3.4.5 |
| 42320 | ··-·NIST-800-53-AC-6(1) | 42320 | ··-·NIST-800-53-AC-6(1) |
| Offset 42328, 15 lines modified | Offset 42328, 15 lines modified | ||
| 42328 | ··-·medium_severity | 42328 | ··-·medium_severity |
| 42329 | ··-·no_reboot_needed | 42329 | ··-·no_reboot_needed |
| 42330 | Remediation_Shell_script_⇲ | 42330 | Remediation_Shell_script_⇲ |
| 42331 | Complexity:·low | 42331 | Complexity:·low |
| 42332 | Disruption:·low | 42332 | Disruption:·low |
| 42333 | Strategy:···configure | 42333 | Strategy:···configure |
| 42334 | #·Remediation·is·applicable·only·in·certain·platforms | 42334 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42335 | if· | 42335 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42336 | chgrp·0·/boot/grub2/user.cfg | 42336 | chgrp·0·/boot/grub2/user.cfg |
| 42337 | else | 42337 | else |
| 42338 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42338 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42339 | fi | 42339 | fi |
| 42340 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** | 42340 | ***·Rule ·Verify·/boot/grub2/user.cfg·User·Ownership· [ref]·*** |
| Offset 42369, 16 lines modified | Offset 42369, 16 lines modified | ||
| 42369 | ··-·no_reboot_needed | 42369 | ··-·no_reboot_needed |
| 42370 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 42370 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 42371 | ··stat: | 42371 | ··stat: |
| 42372 | ····path:·/boot/grub2/user.cfg | 42372 | ····path:·/boot/grub2/user.cfg |
| 42373 | ··register:·file_exists | 42373 | ··register:·file_exists |
| 42374 | ··when: | 42374 | ··when: |
| 42375 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42376 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42375 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42376 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42377 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42377 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42378 | ··tags: | 42378 | ··tags: |
| 42379 | ··-·CCE-86022-1 | 42379 | ··-·CCE-86022-1 |
| 42380 | ··-·CJIS-5.5.2.2 | 42380 | ··-·CJIS-5.5.2.2 |
| 42381 | ··-·NIST-800-171-3.4.5 | 42381 | ··-·NIST-800-171-3.4.5 |
| 42382 | ··-·NIST-800-53-AC-6(1) | 42382 | ··-·NIST-800-53-AC-6(1) |
| 42383 | ··-·NIST-800-53-CM-6(a) | 42383 | ··-·NIST-800-53-CM-6(a) |
| Offset 42391, 16 lines modified | Offset 42391, 16 lines modified | ||
| 42391 | ··-·no_reboot_needed | 42391 | ··-·no_reboot_needed |
| 42392 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 42392 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 42393 | ··file: | 42393 | ··file: |
| 42394 | ····path:·/boot/grub2/user.cfg | 42394 | ····path:·/boot/grub2/user.cfg |
| 42395 | ····owner:·'0' | 42395 | ····owner:·'0' |
| 42396 | ··when: | 42396 | ··when: |
| 42397 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42398 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42397 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42398 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42399 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42399 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42400 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 42400 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 42401 | ··tags: | 42401 | ··tags: |
| 42402 | ··-·CCE-86022-1 | 42402 | ··-·CCE-86022-1 |
| 42403 | ··-·CJIS-5.5.2.2 | 42403 | ··-·CJIS-5.5.2.2 |
| 42404 | ··-·NIST-800-171-3.4.5 | 42404 | ··-·NIST-800-171-3.4.5 |
| 42405 | ··-·NIST-800-53-AC-6(1) | 42405 | ··-·NIST-800-53-AC-6(1) |
| Offset 42413, 15 lines modified | Offset 42413, 15 lines modified | ||
| 42413 | ··-·medium_severity | 42413 | ··-·medium_severity |
| 42414 | ··-·no_reboot_needed | 42414 | ··-·no_reboot_needed |
| 42415 | Remediation_Shell_script_⇲ | 42415 | Remediation_Shell_script_⇲ |
| 42416 | Complexity:·low | 42416 | Complexity:·low |
| 42417 | Disruption:·low | 42417 | Disruption:·low |
| 42418 | Strategy:···configure | 42418 | Strategy:···configure |
| 42419 | #·Remediation·is·applicable·only·in·certain·platforms | 42419 | #·Remediation·is·applicable·only·in·certain·platforms |
| 42420 | if· | 42420 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 42421 | chown·0·/boot/grub2/user.cfg | 42421 | chown·0·/boot/grub2/user.cfg |
| 42422 | else | 42422 | else |
| 42423 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 42423 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 42424 | fi | 42424 | fi |
| 42425 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** | 42425 | ***·Rule ·Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions· [ref]·*** |
| Offset 42452, 16 lines modified | Offset 42452, 16 lines modified | ||
| 42452 | ··-·no_reboot_needed | 42452 | ··-·no_reboot_needed |
| 42453 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 42453 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 42454 | ··stat: | 42454 | ··stat: |
| 42455 | ····path:·/boot/grub2/grub.cfg | 42455 | ····path:·/boot/grub2/grub.cfg |
| 42456 | ··register:·file_exists | 42456 | ··register:·file_exists |
| 42457 | ··when: | 42457 | ··when: |
| 42458 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42459 | ··-·'"grub2-common"·in·ansible_facts.packages' | 42458 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 42459 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 42460 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 42460 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 42461 | ··tags: | 42461 | ··tags: |
| 42462 | ··-·CCE-85925-6 | 42462 | ··-·CCE-85925-6 |
| 42463 | ··-·NIST-800-171-3.4.5 | 42463 | ··-·NIST-800-171-3.4.5 |
| 42464 | ··-·NIST-800-53-AC-6(1) | 42464 | ··-·NIST-800-53-AC-6(1) |
| 42465 | ··-·NIST-800-53-CM-6(a) | 42465 | ··-·NIST-800-53-CM-6(a) |
| 42466 | ··-·configure_strategy | 42466 | ··-·configure_strategy |
| Offset 42472, 16 lines modified | Offset 42472, 16 lines modified | ||
| 42472 | ··-·no_reboot_needed | 42472 | ··-·no_reboot_needed |
| 42473 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 42473 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 42474 | ··file: | 42474 | ··file: |
| 42475 | ····path:·/boot/grub2/grub.cfg | 42475 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 2953/7329 bytes (40.29%) of diff not shown. | |||
| Offset 431202, 23 lines modified | Offset 431202, 23 lines modified | ||
| 00694610:·5f63·6c69·656e·745f·7265·7374·7269·6374··_client_restrict | 00694610:·5f63·6c69·656e·745f·7265·7374·7269·6374··_client_restrict | ||
| 00694620:·696f·6e73·5c73·2a3d·5c73·2a0a·2020·2020··ions\s*=\s*.···· | 00694620:·696f·6e73·5c73·2a3d·5c73·2a0a·2020·2020··ions\s*=\s*.···· | ||
| 00694630:·2020·6c69·6e65·3a20·736d·7470·645f·636c····line:·smtpd_cl | 00694630:·2020·6c69·6e65·3a20·736d·7470·645f·636c····line:·smtpd_cl | ||
| 00694640:·6965·6e74·5f72·6573·7472·6963·7469·6f6e··ient_restriction | 00694640:·6965·6e74·5f72·6573·7472·6963·7469·6f6e··ient_restriction | ||
| 00694650:·7320·3d20·7065·726d·6974·5f6d·796e·6574··s·=·permit_mynet | 00694650:·7320·3d20·7065·726d·6974·5f6d·796e·6574··s·=·permit_mynet | ||
| 00694660:·776f·726b·732c·7265·6a65·6374·0a20·2020··works,reject.··· | 00694660:·776f·726b·732c·7265·6a65·6374·0a20·2020··works,reject.··· | ||
| 00694670:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | 00694670:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | ||
| 00694680:·740a·2020·7768·656e·3a0a·2020·2d20· | 00694680:·740a·2020·7768·656e·3a0a·2020·2d20·616e··t.··when:.··-·an | ||
| 00694690:·706f·7374·6669·7822·2069·6e20·616e·7369··postfix"·in·ansi | |||
| 006946a0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 006946b0:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | |||
| 006946c0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 006946d0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 006946e0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 006946f0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00694 | 00694690:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 006946a0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 006946b0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 006946c0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 006946d0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 006946e0:·7222·5d0a·2020·2d20·2722·706f·7374·6669··r"].··-·'"postfi | |||
| 006946f0:·7822·2069·6e20·616e·7369·626c·655f·6661··x"·in·ansible_fa | |||
| 00694700:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 00694710:·7461·6773·3a0a·2020·2d20·4343·452d·3837··tags:.··-·CCE-87 | 00694710:·7461·6773·3a0a·2020·2d20·4343·452d·3837··tags:.··-·CCE-87 | ||
| 00694720:·3233·322d·350a·2020·2d20·6c6f·775f·636f··232-5.··-·low_co | 00694720:·3233·322d·350a·2020·2d20·6c6f·775f·636f··232-5.··-·low_co | ||
| 00694730:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | 00694730:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | ||
| 00694740:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | 00694740:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 00694750:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | 00694750:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | ||
| 00694760:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | 00694760:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 00694770:·6564·6564·0a20·202d·2070·6f73·7466·6978··eded.··-·postfix | 00694770:·6564·6564·0a20·202d·2070·6f73·7466·6978··eded.··-·postfix | ||
| Offset 431242, 20 lines modified | Offset 431242, 20 lines modified | ||
| 00694890:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 00694890:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 006948a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 006948a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 006948b0:·3d22·6964·6d36·3730·3834·223e·3c70·7265··="idm67084"><pre | 006948b0:·3d22·6964·6d36·3730·3834·223e·3c70·7265··="idm67084"><pre | ||
| 006948c0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | 006948c0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 006948d0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | 006948d0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 006948e0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | 006948e0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 006948f0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | 006948f0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 00694900:·7270·6d20·2d2d·7175·6965·7420·2d71·2070··rpm·--quiet·-q·p | |||
| 00694910:·6f73·7466·6978·2026·616d·703b·2661·6d70··ostfix·&& | |||
| 006949 | 00694900:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 006949 | 00694910:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 006949 | 00694920:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 006949 | 00694930:·7461·696e·6572·656e·7620·5d20·2661·6d70··tainerenv·]·& | ||
| 00694940:·3b26·616d·703b·2072·706d·202d·2d71·7569··;&·rpm·--qui | |||
| 00694950:·6574·202d·7120·706f·7374·6669·783b·2074··et·-q·postfix;·t | |||
| 00694960:·6865·6e0a·0a69·6620·2120·6772·6570·202d··hen..if·!·grep·- | 00694960:·6865·6e0a·0a69·6620·2120·6772·6570·202d··hen..if·!·grep·- | ||
| 00694970:·7120·5e73·6d74·7064·5f63·6c69·656e·745f··q·^smtpd_client_ | 00694970:·7120·5e73·6d74·7064·5f63·6c69·656e·745f··q·^smtpd_client_ | ||
| 00694980:·7265·7374·7269·6374·696f·6e73·202f·6574··restrictions·/et | 00694980:·7265·7374·7269·6374·696f·6e73·202f·6574··restrictions·/et | ||
| 00694990:·632f·706f·7374·6669·782f·6d61·696e·2e63··c/postfix/main.c | 00694990:·632f·706f·7374·6669·782f·6d61·696e·2e63··c/postfix/main.c | ||
| 006949a0:·663b·2074·6865·6e0a·0965·6368·6f20·2273··f;·then..echo·"s | 006949a0:·663b·2074·6865·6e0a·0965·6368·6f20·2273··f;·then..echo·"s | ||
| 006949b0:·6d74·7064·5f63·6c69·656e·745f·7265·7374··mtpd_client_rest | 006949b0:·6d74·7064·5f63·6c69·656e·745f·7265·7374··mtpd_client_rest | ||
| 006949c0:·7269·6374·696f·6e73·203d·2070·6572·6d69··rictions·=·permi | 006949c0:·7269·6374·696f·6e73·203d·2070·6572·6d69··rictions·=·permi |
| Offset 90301, 27 lines modified | Offset 90301, 27 lines modified | ||
| 90301 | ····lineinfile: | 90301 | ····lineinfile: |
| 90302 | ······path:·/etc/postfix/main.cf | 90302 | ······path:·/etc/postfix/main.cf |
| 90303 | ······create:·true | 90303 | ······create:·true |
| 90304 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 90304 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 90305 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 90305 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 90306 | ······state:·present | 90306 | ······state:·present |
| 90307 | ··when: | 90307 | ··when: |
| 90308 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 90309 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 90308 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 90309 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 90310 | ··tags: | 90310 | ··tags: |
| 90311 | ··-·CCE-87232-5 | 90311 | ··-·CCE-87232-5 |
| 90312 | ··-·low_complexity | 90312 | ··-·low_complexity |
| 90313 | ··-·low_disruption | 90313 | ··-·low_disruption |
| 90314 | ··-·medium_severity | 90314 | ··-·medium_severity |
| 90315 | ··-·no_reboot_needed | 90315 | ··-·no_reboot_needed |
| 90316 | ··-·postfix_prevent_unrestricted_relay | 90316 | ··-·postfix_prevent_unrestricted_relay |
| 90317 | ··-·restrict_strategy | 90317 | ··-·restrict_strategy |
| 90318 | Remediation_Shell_script_⇲ | 90318 | Remediation_Shell_script_⇲ |
| 90319 | #·Remediation·is·applicable·only·in·certain·platforms | 90319 | #·Remediation·is·applicable·only·in·certain·platforms |
| 90320 | if· | 90320 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 90321 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 90321 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 90322 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 90322 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 90323 | else | 90323 | else |
| 90324 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 90324 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 90325 | fi | 90325 | fi |
| Offset 430845, 23 lines modified | Offset 430845, 23 lines modified | ||
| 00692fc0:·7269·6374·696f·6e73·5c73·2a3d·5c73·2a0a··rictions\s*=\s*. | 00692fc0:·7269·6374·696f·6e73·5c73·2a3d·5c73·2a0a··rictions\s*=\s*. | ||
| 00692fd0:·2020·2020·2020·6c69·6e65·3a20·736d·7470········line:·smtp | 00692fd0:·2020·2020·2020·6c69·6e65·3a20·736d·7470········line:·smtp | ||
| 00692fe0:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | 00692fe0:·645f·636c·6965·6e74·5f72·6573·7472·6963··d_client_restric | ||
| 00692ff0:·7469·6f6e·7320·3d20·7065·726d·6974·5f6d··tions·=·permit_m | 00692ff0:·7469·6f6e·7320·3d20·7065·726d·6974·5f6d··tions·=·permit_m | ||
| 00693000:·796e·6574·776f·726b·732c·7265·6a65·6374··ynetworks,reject | 00693000:·796e·6574·776f·726b·732c·7265·6a65·6374··ynetworks,reject | ||
| 00693010:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | 00693010:·0a20·2020·2020·2073·7461·7465·3a20·7072··.······state:·pr | ||
| 00693020:·6573·656e·740a·2020·7768·656e·3a0a·2020··esent.··when:.·· | 00693020:·6573·656e·740a·2020·7768·656e·3a0a·2020··esent.··when:.·· | ||
| 00693030:·2d20·2722·706f·7374·6669·7822·2069·6e20··-·'"postfix"·in· | |||
| 00693040:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 00693050:·636b·6167·6573·270a·2020·2d20·616e·7369··ckages'.··-·ansi | |||
| 00693060:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 00693070:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 00693080:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 00693090:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 006930 | 00693030:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 00693040:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00693050:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00693060:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00693070:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00693080:·6169·6e65·7222·5d0a·2020·2d20·2722·706f··ainer"].··-·'"po | |||
| 00693090:·7374·6669·7822·2069·6e20·616e·7369·626c··stfix"·in·ansibl | |||
| 006930a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 006930b0:· | 006930b0:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | ||
| 006930c0:·452d·3837·3233·322d·350a·2020·2d20·6c6f··E-87232-5.··-·lo | 006930c0:·452d·3837·3233·322d·350a·2020·2d20·6c6f··E-87232-5.··-·lo | ||
| 006930d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | 006930d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | ||
| 006930e0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | 006930e0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | ||
| 006930f0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | 006930f0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | ||
| 00693100:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | 00693100:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | ||
| 00693110:·745f·6e65·6564·6564·0a20·202d·2070·6f73··t_needed.··-·pos | 00693110:·745f·6e65·6564·6564·0a20·202d·2070·6f73··t_needed.··-·pos | ||
| 00693120:·7466·6978·5f70·7265·7665·6e74·5f75·6e72··tfix_prevent_unr | 00693120:·7466·6978·5f70·7265·7665·6e74·5f75·6e72··tfix_prevent_unr | ||
| Offset 430884, 21 lines modified | Offset 430884, 21 lines modified | ||
| 00693230:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | 00693230:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00693240:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | 00693240:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00693250:·2220·6964·3d22·6964·6d36·3730·3834·223e··"·id="idm67084"> | 00693250:·2220·6964·3d22·6964·6d36·3730·3834·223e··"·id="idm67084"> | ||
| 00693260:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 00693260:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 00693270:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 00693270:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 00693280:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 00693280:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 00693290:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 00693290:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 006932a0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 006932b0:·2d71·2070·6f73·7466·6978·2026·616d·703b··-q·postfix·& | |||
| 006932 | 006932a0:·0a69·6620·5b20·2120·2d66·202f·2e64·6f63··.if·[·!·-f·/.doc | ||
| 006932 | 006932b0:·6b65·7265·6e76·205d·2026·616d·703b·2661··kerenv·]·&&a | ||
| 006932 | 006932c0:·6d70·3b20·5b20·2120·2d66·202f·7275·6e2f··mp;·[·!·-f·/run/ | ||
| 006932 | 006932d0:·2e63·6f6e·7461·696e·6572·656e·7620·5d20··.containerenv·]· | ||
| 006932e0:·2661·6d70·3b26·616d·703b·2072·706d·202d··&&·rpm·- | |||
| 006932f0:·2d71·7569·6574·202d·7120·706f·7374·6669··-quiet·-q·postfi | |||
| 00693300:· | 00693300:·783b·2074·6865·6e0a·0a69·6620·2120·6772··x;·then..if·!·gr | ||
| 00693310:·6570·202d·7120·5e73·6d74·7064·5f63·6c69··ep·-q·^smtpd_cli | 00693310:·6570·202d·7120·5e73·6d74·7064·5f63·6c69··ep·-q·^smtpd_cli | ||
| 00693320:·656e·745f·7265·7374·7269·6374·696f·6e73··ent_restrictions | 00693320:·656e·745f·7265·7374·7269·6374·696f·6e73··ent_restrictions | ||
| 00693330:·202f·6574·632f·706f·7374·6669·782f·6d61···/etc/postfix/ma | 00693330:·202f·6574·632f·706f·7374·6669·782f·6d61···/etc/postfix/ma | ||
| 00693340:·696e·2e63·663b·2074·6865·6e0a·0965·6368··in.cf;·then..ech | 00693340:·696e·2e63·663b·2074·6865·6e0a·0965·6368··in.cf;·then..ech | ||
| 00693350:·6f20·2273·6d74·7064·5f63·6c69·656e·745f··o·"smtpd_client_ | 00693350:·6f20·2273·6d74·7064·5f63·6c69·656e·745f··o·"smtpd_client_ | ||
| 00693360:·7265·7374·7269·6374·696f·6e73·203d·2070··restrictions·=·p | 00693360:·7265·7374·7269·6374·696f·6e73·203d·2070··restrictions·=·p | ||
| 00693370:·6572·6d69·745f·6d79·6e65·7477·6f72·6b73··ermit_mynetworks | 00693370:·6572·6d69·745f·6d79·6e65·7477·6f72·6b73··ermit_mynetworks |
| Offset 90225, 27 lines modified | Offset 90225, 27 lines modified | ||
| 90225 | ····lineinfile: | 90225 | ····lineinfile: |
| 90226 | ······path:·/etc/postfix/main.cf | 90226 | ······path:·/etc/postfix/main.cf |
| 90227 | ······create:·true | 90227 | ······create:·true |
| 90228 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 90228 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 90229 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 90229 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 90230 | ······state:·present | 90230 | ······state:·present |
| 90231 | ··when: | 90231 | ··when: |
| 90232 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 90233 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 90232 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 90233 | ··-·'"postfix"·in·ansible_facts.packages' | ||
| 90234 | ··tags: | 90234 | ··tags: |
| 90235 | ··-·CCE-87232-5 | 90235 | ··-·CCE-87232-5 |
| 90236 | ··-·low_complexity | 90236 | ··-·low_complexity |
| 90237 | ··-·low_disruption | 90237 | ··-·low_disruption |
| 90238 | ··-·medium_severity | 90238 | ··-·medium_severity |
| 90239 | ··-·no_reboot_needed | 90239 | ··-·no_reboot_needed |
| 90240 | ··-·postfix_prevent_unrestricted_relay | 90240 | ··-·postfix_prevent_unrestricted_relay |
| 90241 | ··-·restrict_strategy | 90241 | ··-·restrict_strategy |
| 90242 | Remediation_Shell_script_⇲ | 90242 | Remediation_Shell_script_⇲ |
| 90243 | #·Remediation·is·applicable·only·in·certain·platforms | 90243 | #·Remediation·is·applicable·only·in·certain·platforms |
| 90244 | if· | 90244 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·rpm·--quiet·-q·postfix;·then |
| 90245 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 90245 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 90246 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 90246 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 90247 | else | 90247 | else |
| 90248 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 90248 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 90249 | fi | 90249 | fi |
| Offset 176397, 22 lines modified | Offset 176397, 22 lines modified | ||
| 002b10c0:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | 002b10c0:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe | ||
| 002b10d0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | 002b10d0:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/ | ||
| 002b10e0:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | 002b10e0:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat: | ||
| 002b10f0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | 002b10f0:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot | ||
| 002b1100:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 002b1100:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 002b1110:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | 002b1110:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | ||
| 002b1120:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | 002b1120:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:. | ||
| 002b1130:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm | |||
| 002b1140:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f | |||
| 002b1150:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 002b1160:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002b1170:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 002b1180:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002b11 | 002b1130:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | ||
| 002b1140:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002b1150:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002b1160:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002b1170:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 002b1180:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a | |||
| 002b1190:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 002b11a0:· | 002b11a0:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib | ||
| 002b11b0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | 002b11b0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | ||
| 002b11c0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | 002b11c0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | ||
| 002b11d0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | 002b11d0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | ||
| 002b11e0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | 002b11e0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | ||
| 002b11f0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | 002b11f0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | ||
| 002b1200:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | 002b1200:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 002b1210:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | 002b1210:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI | ||
| Offset 176433, 22 lines modified | Offset 176433, 22 lines modified | ||
| 002b1300:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o | 002b1300:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o | ||
| 002b1310:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | 002b1310:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | ||
| 002b1320:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002b1320:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002b1330:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | 002b1330:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | ||
| 002b1340:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002b1340:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002b1350:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group: | 002b1350:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group: | ||
| 002b1360:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | 002b1360:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | ||
| 002b1370:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002b1380:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002b1390:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002b1370:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 002b1380:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002b1390:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002b13a0:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002b13b0:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002b13c0:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002b13 | 002b13a0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | ||
| 002b13b0:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002b13c0:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002b13d0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 002b13e0:· | 002b13e0:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | ||
| 002b13f0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002b13f0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002b1400:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002b1400:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002b1410:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002b1410:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002b1420:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002b1420:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002b1430:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002b1430:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002b1440:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | 002b1440:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st | ||
| 002b1450:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | 002b1450:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | ||
| Offset 176498, 19 lines modified | Offset 176498, 19 lines modified | ||
| 002b1710:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | 002b1710:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 002b1720:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | 002b1720:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | ||
| 002b1730:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | 002b1730:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | ||
| 002b1740:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | 002b1740:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 002b1750:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | 002b1750:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 002b1760:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | 002b1760:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 002b1770:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | 002b1770:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 002b1780:·666f·726d·730a·6966·20 | 002b1780:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | ||
| 002b1790:·7569·6574·202d·7120·6772·7562·322d·636f··uiet·-q·grub2-co | |||
| 002b17a0:·6d6d·6f6e·2026·616d·703b·2661·6d70·3b20··mmon·&&· | |||
| 002b17b0:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm | |||
| 002b17 | 002b1790:·2f73·7973·2f66·6972·6d77·6172·652f·6566··/sys/firmware/ef | ||
| 002b17a0:·6920·5d20·2661·6d70·3b26·616d·703b·2072··i·]·&&·r | |||
| 002b17b0:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | |||
| 002b17c0:·7562·322d·636f·6d6d·6f6e·2026·616d·703b··ub2-common·& | |||
| 002b17d0:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | 002b17d0:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/ | ||
| 002b17e0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | 002b17e0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | ||
| 002b17f0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | 002b17f0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | ||
| 002b1800:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | 002b1800:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | ||
| 002b1810:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | 002b1810:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch | ||
| 002b1820:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | 002b1820:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub | ||
| 002b1830:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else | 002b1830:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else | ||
| Offset 176972, 22 lines modified | Offset 176972, 22 lines modified | ||
| 002b34b0:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | 002b34b0:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | ||
| 002b34c0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002b34c0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002b34d0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 002b34d0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 002b34e0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 002b34e0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 002b34f0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | 002b34f0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | ||
| 002b3500:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 002b3500:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 002b3510:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 002b3510:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 002b3520:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002b3530:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002b3540:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002b3520:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 002b3530:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 002b3540:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 002b3550:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 002b3560:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 002b3570:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 002b35 | 002b3550:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | ||
| 002b3560:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 002b3570:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 002b3580:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 002b3590:· | 002b3590:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | ||
| 002b35a0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 002b35a0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 002b35b0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 002b35b0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 002b35c0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 002b35c0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 002b35d0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 002b35d0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 002b35e0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 002b35e0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 002b35f0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | 002b35f0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 002b3600:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | 002b3600:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | ||
| Offset 177007, 22 lines modified | Offset 177007, 22 lines modified | ||
| 002b36e0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | 002b36e0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 002b36f0:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | 002b36f0:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | ||
| 002b3700:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 002b3700:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 002b3710:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | 002b3710:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | ||
| 002b3720:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | 002b3720:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | ||
| 002b3730:·7275·622e·6366·670a·2020·2020·6f77·6e65··rub.cfg.····owne | 002b3730:·7275·622e·6366·670a·2020·2020·6f77·6e65··rub.cfg.····owne | ||
| 002b3740:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | 002b3740:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | ||
| 002b3750:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo | |||
| 002b3760:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa | |||
| 002b3770:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 002b3780:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 002b3790:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 002b37a0:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002b37 | 002b3750:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | ||
| 002b3760:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 002b3770:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002b3780:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| Max diff block lines reached; 2098/11760 bytes (17.84%) of diff not shown. | |||
| Offset 39547, 16 lines modified | Offset 39547, 16 lines modified | ||
| 39547 | ··-·no_reboot_needed | 39547 | ··-·no_reboot_needed |
| 39548 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 39548 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 39549 | ··stat: | 39549 | ··stat: |
| 39550 | ····path:·/boot/grub2/grub.cfg | 39550 | ····path:·/boot/grub2/grub.cfg |
| 39551 | ··register:·file_exists | 39551 | ··register:·file_exists |
| 39552 | ··when: | 39552 | ··when: |
| 39553 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39554 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39553 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39554 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39555 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39555 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39556 | ··tags: | 39556 | ··tags: |
| 39557 | ··-·CJIS-5.5.2.2 | 39557 | ··-·CJIS-5.5.2.2 |
| 39558 | ··-·NIST-800-171-3.4.5 | 39558 | ··-·NIST-800-171-3.4.5 |
| 39559 | ··-·NIST-800-53-AC-6(1) | 39559 | ··-·NIST-800-53-AC-6(1) |
| 39560 | ··-·NIST-800-53-CM-6(a) | 39560 | ··-·NIST-800-53-CM-6(a) |
| 39561 | ··-·PCI-DSS-Req-7.1 | 39561 | ··-·PCI-DSS-Req-7.1 |
| Offset 39568, 16 lines modified | Offset 39568, 16 lines modified | ||
| 39568 | ··-·no_reboot_needed | 39568 | ··-·no_reboot_needed |
| 39569 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 39569 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 39570 | ··file: | 39570 | ··file: |
| 39571 | ····path:·/boot/grub2/grub.cfg | 39571 | ····path:·/boot/grub2/grub.cfg |
| 39572 | ····group:·'0' | 39572 | ····group:·'0' |
| 39573 | ··when: | 39573 | ··when: |
| 39574 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39575 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39574 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39575 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39576 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39576 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39577 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 39577 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 39578 | ··tags: | 39578 | ··tags: |
| 39579 | ··-·CJIS-5.5.2.2 | 39579 | ··-·CJIS-5.5.2.2 |
| 39580 | ··-·NIST-800-171-3.4.5 | 39580 | ··-·NIST-800-171-3.4.5 |
| 39581 | ··-·NIST-800-53-AC-6(1) | 39581 | ··-·NIST-800-53-AC-6(1) |
| 39582 | ··-·NIST-800-53-CM-6(a) | 39582 | ··-·NIST-800-53-CM-6(a) |
| Offset 39589, 15 lines modified | Offset 39589, 15 lines modified | ||
| 39589 | ··-·medium_severity | 39589 | ··-·medium_severity |
| 39590 | ··-·no_reboot_needed | 39590 | ··-·no_reboot_needed |
| 39591 | Remediation_Shell_script_⇲ | 39591 | Remediation_Shell_script_⇲ |
| 39592 | Complexity:·low | 39592 | Complexity:·low |
| 39593 | Disruption:·low | 39593 | Disruption:·low |
| 39594 | Strategy:···configure | 39594 | Strategy:···configure |
| 39595 | #·Remediation·is·applicable·only·in·certain·platforms | 39595 | #·Remediation·is·applicable·only·in·certain·platforms |
| 39596 | if· | 39596 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 39597 | chgrp·0·/boot/grub2/grub.cfg | 39597 | chgrp·0·/boot/grub2/grub.cfg |
| 39598 | else | 39598 | else |
| 39599 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 39599 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 39600 | fi | 39600 | fi |
| 39601 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 39601 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 39628, 16 lines modified | Offset 39628, 16 lines modified | ||
| 39628 | ··-·no_reboot_needed | 39628 | ··-·no_reboot_needed |
| 39629 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 39629 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 39630 | ··stat: | 39630 | ··stat: |
| 39631 | ····path:·/boot/grub2/grub.cfg | 39631 | ····path:·/boot/grub2/grub.cfg |
| 39632 | ··register:·file_exists | 39632 | ··register:·file_exists |
| 39633 | ··when: | 39633 | ··when: |
| 39634 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39635 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39634 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39635 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39636 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39636 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39637 | ··tags: | 39637 | ··tags: |
| 39638 | ··-·CJIS-5.5.2.2 | 39638 | ··-·CJIS-5.5.2.2 |
| 39639 | ··-·NIST-800-171-3.4.5 | 39639 | ··-·NIST-800-171-3.4.5 |
| 39640 | ··-·NIST-800-53-AC-6(1) | 39640 | ··-·NIST-800-53-AC-6(1) |
| 39641 | ··-·NIST-800-53-CM-6(a) | 39641 | ··-·NIST-800-53-CM-6(a) |
| 39642 | ··-·PCI-DSS-Req-7.1 | 39642 | ··-·PCI-DSS-Req-7.1 |
| Offset 39649, 16 lines modified | Offset 39649, 16 lines modified | ||
| 39649 | ··-·no_reboot_needed | 39649 | ··-·no_reboot_needed |
| 39650 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 39650 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 39651 | ··file: | 39651 | ··file: |
| 39652 | ····path:·/boot/grub2/grub.cfg | 39652 | ····path:·/boot/grub2/grub.cfg |
| 39653 | ····owner:·'0' | 39653 | ····owner:·'0' |
| 39654 | ··when: | 39654 | ··when: |
| 39655 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39656 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 39655 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 39656 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 39657 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 39657 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 39658 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 39658 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 39659 | ··tags: | 39659 | ··tags: |
| 39660 | ··-·CJIS-5.5.2.2 | 39660 | ··-·CJIS-5.5.2.2 |
| 39661 | ··-·NIST-800-171-3.4.5 | 39661 | ··-·NIST-800-171-3.4.5 |
| 39662 | ··-·NIST-800-53-AC-6(1) | 39662 | ··-·NIST-800-53-AC-6(1) |
| 39663 | ··-·NIST-800-53-CM-6(a) | 39663 | ··-·NIST-800-53-CM-6(a) |
| Offset 39670, 15 lines modified | Offset 39670, 15 lines modified | ||
| 39670 | ··-·medium_severity | 39670 | ··-·medium_severity |
| 39671 | ··-·no_reboot_needed | 39671 | ··-·no_reboot_needed |
| 39672 | Remediation_Shell_script_⇲ | 39672 | Remediation_Shell_script_⇲ |
| 39673 | Complexity:·low | 39673 | Complexity:·low |
| 39674 | Disruption:·low | 39674 | Disruption:·low |
| 39675 | Strategy:···configure | 39675 | Strategy:···configure |
| 39676 | #·Remediation·is·applicable·only·in·certain·platforms | 39676 | #·Remediation·is·applicable·only·in·certain·platforms |
| 39677 | if· | 39677 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 39678 | chown·0·/boot/grub2/grub.cfg | 39678 | chown·0·/boot/grub2/grub.cfg |
| 39679 | else | 39679 | else |
| 39680 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 39680 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 39681 | fi | 39681 | fi |
| 39682 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules | 39682 | Group ·Configure·Syslog· Group·contains·2·groups·and·4·rules |
| Offset 256218, 22 lines modified | Offset 256218, 22 lines modified | ||
| 003e8d90:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | 003e8d90:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | ||
| 003e8da0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 003e8da0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 003e8db0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 003e8db0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 003e8dc0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 003e8dc0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 003e8dd0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | 003e8dd0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | ||
| 003e8de0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 003e8de0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 003e8df0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 003e8df0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 003e8e00:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 003e8e10:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 003e8e20:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 003e8e00:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common" | |||
| 003e8e10:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 003e8e20:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 003e8e30:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 003e8e40:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 003e8e50:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 003e8e | 003e8e30:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | ||
| 003e8e40:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 003e8e50:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi | |||
| 003e8e60:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 003e8e70:· | 003e8e70:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_ | ||
| 003e8e80:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 003e8e80:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 003e8e90:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 003e8e90:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 003e8ea0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 003e8ea0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 003e8eb0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 003e8eb0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 003e8ec0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 003e8ec0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 003e8ed0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | 003e8ed0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 003e8ee0:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | 003e8ee0:·2e35·2e32·2e32·0a20·202d·204e·4953·542d··.5.2.2.··-·NIST- | ||
| Offset 256254, 21 lines modified | Offset 256254, 21 lines modified | ||
| 003e8fd0:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | 003e8fd0:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | ||
| 003e8fe0:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | 003e8fe0:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | ||
| 003e8ff0:·6232·2f67·7275·622e·6366·670a·2020·6669··b2/grub.cfg.··fi | 003e8ff0:·6232·2f67·7275·622e·6366·670a·2020·6669··b2/grub.cfg.··fi | ||
| 003e9000:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | 003e9000:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | ||
| 003e9010:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 003e9010:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 003e9020:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | 003e9020:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | ||
| 003e9030:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 003e9030:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 003e9040:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 003e9050:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 003e9060:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 003e9070:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 003e9080:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 003e9090:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 003e90 | 003e9040:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | ||
| 003e9050:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 003e9060:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 003e9070:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 003e9080:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | |||
| 003e9090:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 003e90a0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 003e90b0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 003e90b0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 003e90c0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 003e90c0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 003e90d0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 003e90d0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 003e90e0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 003e90e0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 003e90f0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 003e90f0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 003e9100:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 003e9100:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 003e9110:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 003e9110:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Offset 256319, 19 lines modified | Offset 256319, 19 lines modified | ||
| 003e93e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | 003e93e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 003e93f0:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | 003e93f0:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | ||
| 003e9400:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | 003e9400:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 003e9410:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | 003e9410:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 003e9420:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | 003e9420:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 003e9430:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | 003e9430:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 003e9440:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | 003e9440:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 003e9450:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 003e9460:·7420·2d71·2067·7275·6232·2d63·6f6d·6d6f··t·-q·grub2-commo | |||
| 003e9470:·6e20·2661·6d70·3b26·616d·703b·205b·2021··n·&&·[·! | |||
| 003e9480:·202d·6620·2f73·7973·2f66·6972·6d77·6172···-f·/sys/firmwar | |||
| 003e94 | 003e9450:·6d73·0a69·6620·5b20·2120·2d66·202f·7379··ms.if·[·!·-f·/sy | ||
| 003e9460:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | |||
| 003e9470:·2026·616d·703b·2661·6d70·3b20·7270·6d20···&&·rpm· | |||
| 003e9480:·2d2d·7175·6965·7420·2d71·2067·7275·6232··--quiet·-q·grub2 | |||
| 003e9490:·2d63·6f6d·6d6f·6e20·2661·6d70·3b26·616d··-common·&&am | |||
| 003e94a0:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | 003e94a0:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | ||
| 003e94b0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | 003e94b0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | ||
| 003e94c0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | 003e94c0:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | ||
| 003e94d0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | 003e94d0:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | ||
| 003e94e0:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | 003e94e0:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | ||
| 003e94f0:·2030·202f·626f·6f74·2f67·7275·6232·2f67···0·/boot/grub2/g | 003e94f0:·2030·202f·626f·6f74·2f67·7275·6232·2f67···0·/boot/grub2/g | ||
| 003e9500:·7275·622e·6366·670a·0a65·6c73·650a·2020··rub.cfg..else.·· | 003e9500:·7275·622e·6366·670a·0a65·6c73·650a·2020··rub.cfg..else.·· | ||
| Offset 256793, 21 lines modified | Offset 256793, 21 lines modified | ||
| 003eb180:·666f·7220·6578·6973·7465·6e63·6520·2f62··for·existence·/b | 003eb180:·666f·7220·6578·6973·7465·6e63·6520·2f62··for·existence·/b | ||
| 003eb190:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 003eb190:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 003eb1a0:·6667·0a20·2073·7461·743a·0a20·2020·2070··fg.··stat:.····p | 003eb1a0:·6667·0a20·2073·7461·743a·0a20·2020·2070··fg.··stat:.····p | ||
| 003eb1b0:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 003eb1b0:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 003eb1c0:·2f67·7275·622e·6366·670a·2020·7265·6769··/grub.cfg.··regi | 003eb1c0:·2f67·7275·622e·6366·670a·2020·7265·6769··/grub.cfg.··regi | ||
| 003eb1d0:·7374·6572·3a20·6669·6c65·5f65·7869·7374··ster:·file_exist | 003eb1d0:·7374·6572·3a20·6669·6c65·5f65·7869·7374··ster:·file_exist | ||
| 003eb1e0:·730a·2020·7768·656e·3a0a·2020·2d20·2722··s.··when:.··-·'" | 003eb1e0:·730a·2020·7768·656e·3a0a·2020·2d20·2722··s.··when:.··-·'" | ||
| 003eb1f0:·6772·7562·322d·636f·6d6d·6f6e·2220·696e··grub2-common"·in | |||
| 003eb200:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 003eb210:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 003eb220:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 003eb230:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 003eb240:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 003eb | 003eb1f0:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | ||
| 003eb200:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 003eb210:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 003eb220:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 003eb230:·270a·2020·2d20·2722·6772·7562·322d·636f··'.··-·'"grub2-co | |||
| 003eb240:·6d6d·6f6e·2220·696e·2061·6e73·6962·6c65··mmon"·in·ansible | |||
| 003eb250:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 003eb260:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 003eb260:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 003eb270:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 003eb270:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 003eb280:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 003eb280:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 003eb290:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 003eb290:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 003eb2a0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 003eb2a0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 003eb2b0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | 003eb2b0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | ||
| 003eb2c0:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | 003eb2c0:·733a·0a20·202d·2043·4a49·532d·352e·352e··s:.··-·CJIS-5.5. | ||
| Offset 256828, 22 lines modified | Offset 256828, 22 lines modified | ||
| 003eb3b0:·206e·616d·653a·2045·6e73·7572·6520·6f77···name:·Ensure·ow | 003eb3b0:·206e·616d·653a·2045·6e73·7572·6520·6f77···name:·Ensure·ow | ||
| 003eb3c0:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | 003eb3c0:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | ||
| 003eb3d0:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 003eb3d0:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 003eb3e0:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | 003eb3e0:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | ||
| 003eb3f0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 003eb3f0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 003eb400:·2e63·6667·0a20·2020·206f·776e·6572·3a20··.cfg.····owner:· | 003eb400:·2e63·6667·0a20·2020·206f·776e·6572·3a20··.cfg.····owner:· | ||
| 003eb410:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | 003eb410:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | ||
| 003eb420:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"· | |||
| 003eb430:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 003eb440:·2e70·6163·6b61·6765·7327·0a20·202d·2027··.packages'.··-·' | |||
| 003eb450:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 003eb460:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 003eb470:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 003eb4 | 003eb420:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | ||
| 003eb430:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 003eb440:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 003eb450:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 003eb460:·7374·270a·2020·2d20·2722·6772·7562·322d··st'.··-·'"grub2- | |||
| Max diff block lines reached; 7978/17364 bytes (45.95%) of diff not shown. | |||
| Offset 56202, 16 lines modified | Offset 56202, 16 lines modified | ||
| 56202 | ··-·no_reboot_needed | 56202 | ··-·no_reboot_needed |
| 56203 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 56203 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 56204 | ··stat: | 56204 | ··stat: |
| 56205 | ····path:·/boot/grub2/grub.cfg | 56205 | ····path:·/boot/grub2/grub.cfg |
| 56206 | ··register:·file_exists | 56206 | ··register:·file_exists |
| 56207 | ··when: | 56207 | ··when: |
| 56208 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56209 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 56208 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 56209 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56210 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 56210 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 56211 | ··tags: | 56211 | ··tags: |
| 56212 | ··-·CJIS-5.5.2.2 | 56212 | ··-·CJIS-5.5.2.2 |
| 56213 | ··-·NIST-800-171-3.4.5 | 56213 | ··-·NIST-800-171-3.4.5 |
| 56214 | ··-·NIST-800-53-AC-6(1) | 56214 | ··-·NIST-800-53-AC-6(1) |
| 56215 | ··-·NIST-800-53-CM-6(a) | 56215 | ··-·NIST-800-53-CM-6(a) |
| 56216 | ··-·PCI-DSS-Req-7.1 | 56216 | ··-·PCI-DSS-Req-7.1 |
| Offset 56223, 16 lines modified | Offset 56223, 16 lines modified | ||
| 56223 | ··-·no_reboot_needed | 56223 | ··-·no_reboot_needed |
| 56224 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 56224 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 56225 | ··file: | 56225 | ··file: |
| 56226 | ····path:·/boot/grub2/grub.cfg | 56226 | ····path:·/boot/grub2/grub.cfg |
| 56227 | ····group:·'0' | 56227 | ····group:·'0' |
| 56228 | ··when: | 56228 | ··when: |
| 56229 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56230 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 56229 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 56230 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56231 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 56231 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 56232 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 56232 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 56233 | ··tags: | 56233 | ··tags: |
| 56234 | ··-·CJIS-5.5.2.2 | 56234 | ··-·CJIS-5.5.2.2 |
| 56235 | ··-·NIST-800-171-3.4.5 | 56235 | ··-·NIST-800-171-3.4.5 |
| 56236 | ··-·NIST-800-53-AC-6(1) | 56236 | ··-·NIST-800-53-AC-6(1) |
| 56237 | ··-·NIST-800-53-CM-6(a) | 56237 | ··-·NIST-800-53-CM-6(a) |
| Offset 56244, 15 lines modified | Offset 56244, 15 lines modified | ||
| 56244 | ··-·medium_severity | 56244 | ··-·medium_severity |
| 56245 | ··-·no_reboot_needed | 56245 | ··-·no_reboot_needed |
| 56246 | Remediation_Shell_script_⇲ | 56246 | Remediation_Shell_script_⇲ |
| 56247 | Complexity:·low | 56247 | Complexity:·low |
| 56248 | Disruption:·low | 56248 | Disruption:·low |
| 56249 | Strategy:···configure | 56249 | Strategy:···configure |
| 56250 | #·Remediation·is·applicable·only·in·certain·platforms | 56250 | #·Remediation·is·applicable·only·in·certain·platforms |
| 56251 | if· | 56251 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 56252 | chgrp·0·/boot/grub2/grub.cfg | 56252 | chgrp·0·/boot/grub2/grub.cfg |
| 56253 | else | 56253 | else |
| 56254 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 56254 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 56255 | fi | 56255 | fi |
| 56256 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** | 56256 | ***·Rule ·Verify·/boot/grub2/grub.cfg·User·Ownership· [ref]·*** |
| Offset 56283, 16 lines modified | Offset 56283, 16 lines modified | ||
| 56283 | ··-·no_reboot_needed | 56283 | ··-·no_reboot_needed |
| 56284 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 56284 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 56285 | ··stat: | 56285 | ··stat: |
| 56286 | ····path:·/boot/grub2/grub.cfg | 56286 | ····path:·/boot/grub2/grub.cfg |
| 56287 | ··register:·file_exists | 56287 | ··register:·file_exists |
| 56288 | ··when: | 56288 | ··when: |
| 56289 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56290 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 56289 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 56290 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56291 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 56291 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 56292 | ··tags: | 56292 | ··tags: |
| 56293 | ··-·CJIS-5.5.2.2 | 56293 | ··-·CJIS-5.5.2.2 |
| 56294 | ··-·NIST-800-171-3.4.5 | 56294 | ··-·NIST-800-171-3.4.5 |
| 56295 | ··-·NIST-800-53-AC-6(1) | 56295 | ··-·NIST-800-53-AC-6(1) |
| 56296 | ··-·NIST-800-53-CM-6(a) | 56296 | ··-·NIST-800-53-CM-6(a) |
| 56297 | ··-·PCI-DSS-Req-7.1 | 56297 | ··-·PCI-DSS-Req-7.1 |
| Offset 56304, 16 lines modified | Offset 56304, 16 lines modified | ||
| 56304 | ··-·no_reboot_needed | 56304 | ··-·no_reboot_needed |
| 56305 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 56305 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 56306 | ··file: | 56306 | ··file: |
| 56307 | ····path:·/boot/grub2/grub.cfg | 56307 | ····path:·/boot/grub2/grub.cfg |
| 56308 | ····owner:·'0' | 56308 | ····owner:·'0' |
| 56309 | ··when: | 56309 | ··when: |
| 56310 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56311 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 56310 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 56311 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56312 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 56312 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 56313 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 56313 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 56314 | ··tags: | 56314 | ··tags: |
| 56315 | ··-·CJIS-5.5.2.2 | 56315 | ··-·CJIS-5.5.2.2 |
| 56316 | ··-·NIST-800-171-3.4.5 | 56316 | ··-·NIST-800-171-3.4.5 |
| 56317 | ··-·NIST-800-53-AC-6(1) | 56317 | ··-·NIST-800-53-AC-6(1) |
| 56318 | ··-·NIST-800-53-CM-6(a) | 56318 | ··-·NIST-800-53-CM-6(a) |
| Offset 56325, 15 lines modified | Offset 56325, 15 lines modified | ||
| 56325 | ··-·medium_severity | 56325 | ··-·medium_severity |
| 56326 | ··-·no_reboot_needed | 56326 | ··-·no_reboot_needed |
| 56327 | Remediation_Shell_script_⇲ | 56327 | Remediation_Shell_script_⇲ |
| 56328 | Complexity:·low | 56328 | Complexity:·low |
| 56329 | Disruption:·low | 56329 | Disruption:·low |
| 56330 | Strategy:···configure | 56330 | Strategy:···configure |
| 56331 | #·Remediation·is·applicable·only·in·certain·platforms | 56331 | #·Remediation·is·applicable·only·in·certain·platforms |
| 56332 | if· | 56332 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 56333 | chown·0·/boot/grub2/grub.cfg | 56333 | chown·0·/boot/grub2/grub.cfg |
| 56334 | else | 56334 | else |
| 56335 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 56335 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 56336 | fi | 56336 | fi |
| 56337 | ***·Rule ·Verify·/boot/grub2/grub.cfg·Permissions· [ref]·*** | 56337 | ***·Rule ·Verify·/boot/grub2/grub.cfg·Permissions· [ref]·*** |
| Offset 56362, 16 lines modified | Offset 56362, 16 lines modified | ||
| 56362 | ··-·no_reboot_needed | 56362 | ··-·no_reboot_needed |
| 56363 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 56363 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 56364 | ··stat: | 56364 | ··stat: |
| 56365 | ····path:·/boot/grub2/grub.cfg | 56365 | ····path:·/boot/grub2/grub.cfg |
| 56366 | ··register:·file_exists | 56366 | ··register:·file_exists |
| 56367 | ··when: | 56367 | ··when: |
| 56368 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56369 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 56368 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 56369 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 56370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 56370 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 56371 | ··tags: | 56371 | ··tags: |
| 56372 | ··-·NIST-800-171-3.4.5 | 56372 | ··-·NIST-800-171-3.4.5 |
| 56373 | ··-·NIST-800-53-AC-6(1) | 56373 | ··-·NIST-800-53-AC-6(1) |
| 56374 | ··-·NIST-800-53-CM-6(a) | 56374 | ··-·NIST-800-53-CM-6(a) |
| 56375 | ··-·configure_strategy | 56375 | ··-·configure_strategy |
| 56376 | ··-·file_permissions_grub2_cfg | 56376 | ··-·file_permissions_grub2_cfg |
| Offset 56381, 16 lines modified | Offset 56381, 16 lines modified | ||
| 56381 | ··-·no_reboot_needed | 56381 | ··-·no_reboot_needed |
| 56382 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 56382 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 56383 | ··file: | 56383 | ··file: |
| 56384 | ····path:·/boot/grub2/grub.cfg | 56384 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1100/5431 bytes (20.25%) of diff not shown. | |||
| Offset 167903, 22 lines modified | Offset 167903, 22 lines modified | ||
| 0028fde0:·0a0a·2d20·6e61·6d65·3a20·5465·7374·2066··..-·name:·Test·f | 0028fde0:·0a0a·2d20·6e61·6d65·3a20·5465·7374·2066··..-·name:·Test·f | ||
| 0028fdf0:·6f72·2065·7869·7374·656e·6365·202f·626f··or·existence·/bo | 0028fdf0:·6f72·2065·7869·7374·656e·6365·202f·626f··or·existence·/bo | ||
| 0028fe00:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 0028fe00:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 0028fe10:·670a·2020·7374·6174·3a0a·2020·2020·7061··g.··stat:.····pa | 0028fe10:·670a·2020·7374·6174·3a0a·2020·2020·7061··g.··stat:.····pa | ||
| 0028fe20:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 0028fe20:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 0028fe30:·6772·7562·2e63·6667·0a20·2072·6567·6973··grub.cfg.··regis | 0028fe30:·6772·7562·2e63·6667·0a20·2072·6567·6973··grub.cfg.··regis | ||
| 0028fe40:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | 0028fe40:·7465·723a·2066·696c·655f·6578·6973·7473··ter:·file_exists | ||
| 0028fe50:·0a20·2077·6865·6e3a·0a20·202d·2027·22 | 0028fe50:·0a20·2077·6865·6e3a·0a20·202d·2027·2267··.··when:.··-·'"g | ||
| 0028fe60:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 0028fe70:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 0028fe80:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 0028fe90:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 0028fea0:·0a20·202d·2027·2267·7275·6232·2220·696e··.··-·'"grub2"·in | |||
| 0028feb0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0028fe | 0028fe60:·7275·6232·2220·696e·2061·6e73·6962·6c65··rub2"·in·ansible | ||
| 0028fe70:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0028fe80:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 0028fe90:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 0028fea0:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 0028feb0:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 0028fec0:·207c·206c·6973·7427·0a20·202d·2061·6e73···|·list'.··-·ans | |||
| 0028fed0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | 0028fed0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | ||
| 0028fee0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | 0028fee0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | ||
| 0028fef0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | 0028fef0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | ||
| 0028ff00:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | 0028ff00:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | ||
| 0028ff10:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | 0028ff10:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | ||
| 0028ff20:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | 0028ff20:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | ||
| 0028ff30:·4345·2d38·3538·3439·2d38·0a20·202d·2043··CE-85849-8.··-·C | 0028ff30:·4345·2d38·3538·3439·2d38·0a20·202d·2043··CE-85849-8.··-·C | ||
| Offset 167940, 21 lines modified | Offset 167940, 21 lines modified | ||
| 00290030:·6d65·3a20·456e·7375·7265·2067·726f·7570··me:·Ensure·group | 00290030:·6d65·3a20·456e·7375·7265·2067·726f·7570··me:·Ensure·group | ||
| 00290040:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | 00290040:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | ||
| 00290050:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00290050:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 00290060:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | 00290060:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | ||
| 00290070:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | 00290070:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | ||
| 00290080:·7275·622e·6366·670a·2020·2020·6772·6f75··rub.cfg.····grou | 00290080:·7275·622e·6366·670a·2020·2020·6772·6f75··rub.cfg.····grou | ||
| 00290090:·703a·2027·3027·0a20·2077·6865·6e3a·0a20··p:·'0'.··when:.· | 00290090:·703a·2027·3027·0a20·2077·6865·6e3a·0a20··p:·'0'.··when:.· | ||
| 002900a0:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 002900b0:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 002900c0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 002900d0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 002900e0:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 002900f0:·6232·2220·696e·2061·6e73·6962·6c65·5f66··b2"·in·ansible_f | |||
| 00290 | 002900a0:·202d·2027·2267·7275·6232·2220·696e·2061···-·'"grub2"·in·a | ||
| 002900b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 002900c0:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | |||
| 002900d0:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 002900e0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 002900f0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 00290100:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 00290110:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 00290110:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 00290120:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 00290120:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 00290130:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | 00290130:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 00290140:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | 00290140:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 00290150:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | 00290150:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 00290160:·7461·696e·6572·225d·0a20·202d·2066·696c··tainer"].··-·fil | 00290160:·7461·696e·6572·225d·0a20·202d·2066·696c··tainer"].··-·fil | ||
| 00290170:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | 00290170:·655f·6578·6973·7473·2e73·7461·7420·6973··e_exists.stat·is | ||
| Offset 168006, 18 lines modified | Offset 168006, 18 lines modified | ||
| 00290450:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | 00290450:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 00290460:·3e3c·7464·3e63·6f6e·6669·6775·7265·3c2f··><td>configure</ | 00290460:·3e3c·7464·3e63·6f6e·6669·6775·7265·3c2f··><td>configure</ | ||
| 00290470:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | 00290470:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 00290480:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | 00290480:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 00290490:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | 00290490:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 002904a0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | 002904a0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 002904b0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | 002904b0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 002904c0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 002904d0:·2d71·2067·7275·6232·2026·616d·703b·2661··-q·grub2·&&a | |||
| 002904 | 002904e0:·6d70·3b20·5b20·2120·2d66·202f·7379·732f··mp;·[·!·-f·/sys/ | ||
| 002904 | 002904f0:·6669·726d·7761·7265·2f65·6669·205d·2026··firmware/efi·]·& | ||
| 002904e0:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 002904f0:·7175·6965·7420·2d71·2067·7275·6232·2026··quiet·-q·grub2·& | |||
| 00290500:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | 00290500:·616d·703b·2661·6d70·3b20·7b20·5b20·2120··amp;&·{·[·!· | ||
| 00290510:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | 00290510:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | ||
| 00290520:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | 00290520:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 00290530:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | 00290530:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 00290540:·6572·656e·7620·5d3b·207d·3b20·7468·656e··erenv·];·};·then | 00290540:·6572·656e·7620·5d3b·207d·3b20·7468·656e··erenv·];·};·then | ||
| 00290550:·0a0a·6368·6772·7020·3020·2f62·6f6f·742f··..chgrp·0·/boot/ | 00290550:·0a0a·6368·6772·7020·3020·2f62·6f6f·742f··..chgrp·0·/boot/ | ||
| 00290560:·6772·7562·322f·6772·7562·2e63·6667·0a0a··grub2/grub.cfg.. | 00290560:·6772·7562·322f·6772·7562·2e63·6667·0a0a··grub2/grub.cfg.. | ||
| Offset 168515, 21 lines modified | Offset 168515, 21 lines modified | ||
| 00292420:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | 00292420:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | ||
| 00292430:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | 00292430:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | ||
| 00292440:·322f·6772·7562·2e63·6667·0a20·2073·7461··2/grub.cfg.··sta | 00292440:·322f·6772·7562·2e63·6667·0a20·2073·7461··2/grub.cfg.··sta | ||
| 00292450:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 00292450:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 00292460:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 00292460:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 00292470:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 00292470:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 00292480:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 00292480:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 00292490:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 002924a0:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 002924b0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002924c0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002924d0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 002924e0:·6772·7562·3222·2069·6e20·616e·7369·626c··grub2"·in·ansibl | |||
| 002924 | 00292490:·3a0a·2020·2d20·2722·6772·7562·3222·2069··:.··-·'"grub2"·i | ||
| 002924a0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 002924b0:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 002924c0:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 002924d0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002924e0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002924f0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 00292500:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 00292500:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 00292510:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 00292510:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 00292520:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 00292520:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 00292530:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 00292530:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 00292540:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 00292540:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 00292550:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | 00292550:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | ||
| 00292560:·6773·3a0a·2020·2d20·4343·452d·3835·3834··gs:.··-·CCE-8584 | 00292560:·6773·3a0a·2020·2d20·4343·452d·3835·3834··gs:.··-·CCE-8584 | ||
| Offset 168551, 21 lines modified | Offset 168551, 21 lines modified | ||
| 00292660:·2d20·6e61·6d65·3a20·456e·7375·7265·206f··-·name:·Ensure·o | 00292660:·2d20·6e61·6d65·3a20·456e·7375·7265·206f··-·name:·Ensure·o | ||
| 00292670:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | 00292670:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/ | ||
| 00292680:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 00292680:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 00292690:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | 00292690:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path: | ||
| 002926a0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 002926a0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 002926b0:·622e·6366·670a·2020·2020·6f77·6e65·723a··b.cfg.····owner: | 002926b0:·622e·6366·670a·2020·2020·6f77·6e65·723a··b.cfg.····owner: | ||
| 002926c0:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | 002926c0:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··- | ||
| 002926d0:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 002926e0:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002926f0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 00292700:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 00292710:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 00292720:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00292 | 002926d0:·2027·2267·7275·6232·2220·696e·2061·6e73···'"grub2"·in·ans | ||
| 002926e0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 002926f0:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 00292700:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00292710:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00292720:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 00292730:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 00292740:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 00292740:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| Max diff block lines reached; 7909/17088 bytes (46.28%) of diff not shown. | |||
| Offset 38061, 16 lines modified | Offset 38061, 16 lines modified | ||
| 38061 | ··-·no_reboot_needed | 38061 | ··-·no_reboot_needed |
| 38062 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 38062 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 38063 | ··stat: | 38063 | ··stat: |
| 38064 | ····path:·/boot/grub2/grub.cfg | 38064 | ····path:·/boot/grub2/grub.cfg |
| 38065 | ··register:·file_exists | 38065 | ··register:·file_exists |
| 38066 | ··when: | 38066 | ··when: |
| 38067 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38068 | ··-·'"grub2"·in·ansible_facts.packages' | 38067 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38068 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38069 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38069 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38070 | ··tags: | 38070 | ··tags: |
| 38071 | ··-·CCE-85849-8 | 38071 | ··-·CCE-85849-8 |
| 38072 | ··-·CJIS-5.5.2.2 | 38072 | ··-·CJIS-5.5.2.2 |
| 38073 | ··-·NIST-800-171-3.4.5 | 38073 | ··-·NIST-800-171-3.4.5 |
| 38074 | ··-·NIST-800-53-AC-6(1) | 38074 | ··-·NIST-800-53-AC-6(1) |
| 38075 | ··-·NIST-800-53-CM-6(a) | 38075 | ··-·NIST-800-53-CM-6(a) |
| Offset 38083, 16 lines modified | Offset 38083, 16 lines modified | ||
| 38083 | ··-·no_reboot_needed | 38083 | ··-·no_reboot_needed |
| 38084 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 38084 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 38085 | ··file: | 38085 | ··file: |
| 38086 | ····path:·/boot/grub2/grub.cfg | 38086 | ····path:·/boot/grub2/grub.cfg |
| 38087 | ····group:·'0' | 38087 | ····group:·'0' |
| 38088 | ··when: | 38088 | ··when: |
| 38089 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38090 | ··-·'"grub2"·in·ansible_facts.packages' | 38089 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38090 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38091 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38091 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38092 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 38092 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 38093 | ··tags: | 38093 | ··tags: |
| 38094 | ··-·CCE-85849-8 | 38094 | ··-·CCE-85849-8 |
| 38095 | ··-·CJIS-5.5.2.2 | 38095 | ··-·CJIS-5.5.2.2 |
| 38096 | ··-·NIST-800-171-3.4.5 | 38096 | ··-·NIST-800-171-3.4.5 |
| 38097 | ··-·NIST-800-53-AC-6(1) | 38097 | ··-·NIST-800-53-AC-6(1) |
| Offset 38105, 15 lines modified | Offset 38105, 15 lines modified | ||
| 38105 | ··-·medium_severity | 38105 | ··-·medium_severity |
| 38106 | ··-·no_reboot_needed | 38106 | ··-·no_reboot_needed |
| 38107 | Remediation_Shell_script_⇲ | 38107 | Remediation_Shell_script_⇲ |
| 38108 | Complexity:·low | 38108 | Complexity:·low |
| 38109 | Disruption:·low | 38109 | Disruption:·low |
| 38110 | Strategy:···configure | 38110 | Strategy:···configure |
| 38111 | #·Remediation·is·applicable·only·in·certain·platforms | 38111 | #·Remediation·is·applicable·only·in·certain·platforms |
| 38112 | if· | 38112 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 38113 | };·then | 38113 | };·then |
| 38114 | chgrp·0·/boot/grub2/grub.cfg | 38114 | chgrp·0·/boot/grub2/grub.cfg |
| 38115 | else | 38115 | else |
| 38116 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 38116 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 38117 | fi | 38117 | fi |
| Offset 38154, 16 lines modified | Offset 38154, 16 lines modified | ||
| 38154 | ··-·no_reboot_needed | 38154 | ··-·no_reboot_needed |
| 38155 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 38155 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 38156 | ··stat: | 38156 | ··stat: |
| 38157 | ····path:·/boot/grub2/grub.cfg | 38157 | ····path:·/boot/grub2/grub.cfg |
| 38158 | ··register:·file_exists | 38158 | ··register:·file_exists |
| 38159 | ··when: | 38159 | ··when: |
| 38160 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38161 | ··-·'"grub2"·in·ansible_facts.packages' | 38160 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38161 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38162 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38162 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38163 | ··tags: | 38163 | ··tags: |
| 38164 | ··-·CCE-85848-0 | 38164 | ··-·CCE-85848-0 |
| 38165 | ··-·CJIS-5.5.2.2 | 38165 | ··-·CJIS-5.5.2.2 |
| 38166 | ··-·NIST-800-171-3.4.5 | 38166 | ··-·NIST-800-171-3.4.5 |
| 38167 | ··-·NIST-800-53-AC-6(1) | 38167 | ··-·NIST-800-53-AC-6(1) |
| 38168 | ··-·NIST-800-53-CM-6(a) | 38168 | ··-·NIST-800-53-CM-6(a) |
| Offset 38176, 16 lines modified | Offset 38176, 16 lines modified | ||
| 38176 | ··-·no_reboot_needed | 38176 | ··-·no_reboot_needed |
| 38177 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 38177 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 38178 | ··file: | 38178 | ··file: |
| 38179 | ····path:·/boot/grub2/grub.cfg | 38179 | ····path:·/boot/grub2/grub.cfg |
| 38180 | ····owner:·'0' | 38180 | ····owner:·'0' |
| 38181 | ··when: | 38181 | ··when: |
| 38182 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38183 | ··-·'"grub2"·in·ansible_facts.packages' | 38182 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38183 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38184 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38184 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38185 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 38185 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 38186 | ··tags: | 38186 | ··tags: |
| 38187 | ··-·CCE-85848-0 | 38187 | ··-·CCE-85848-0 |
| 38188 | ··-·CJIS-5.5.2.2 | 38188 | ··-·CJIS-5.5.2.2 |
| 38189 | ··-·NIST-800-171-3.4.5 | 38189 | ··-·NIST-800-171-3.4.5 |
| 38190 | ··-·NIST-800-53-AC-6(1) | 38190 | ··-·NIST-800-53-AC-6(1) |
| Offset 38198, 15 lines modified | Offset 38198, 15 lines modified | ||
| 38198 | ··-·medium_severity | 38198 | ··-·medium_severity |
| 38199 | ··-·no_reboot_needed | 38199 | ··-·no_reboot_needed |
| 38200 | Remediation_Shell_script_⇲ | 38200 | Remediation_Shell_script_⇲ |
| 38201 | Complexity:·low | 38201 | Complexity:·low |
| 38202 | Disruption:·low | 38202 | Disruption:·low |
| 38203 | Strategy:···configure | 38203 | Strategy:···configure |
| 38204 | #·Remediation·is·applicable·only·in·certain·platforms | 38204 | #·Remediation·is·applicable·only·in·certain·platforms |
| 38205 | if· | 38205 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 38206 | };·then | 38206 | };·then |
| 38207 | chown·0·/boot/grub2/grub.cfg | 38207 | chown·0·/boot/grub2/grub.cfg |
| 38208 | else | 38208 | else |
| 38209 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 38209 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 38210 | fi | 38210 | fi |
| Offset 38245, 16 lines modified | Offset 38245, 16 lines modified | ||
| 38245 | ··-·no_reboot_needed | 38245 | ··-·no_reboot_needed |
| 38246 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 38246 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 38247 | ··stat: | 38247 | ··stat: |
| 38248 | ····path:·/boot/grub2/grub.cfg | 38248 | ····path:·/boot/grub2/grub.cfg |
| 38249 | ··register:·file_exists | 38249 | ··register:·file_exists |
| 38250 | ··when: | 38250 | ··when: |
| 38251 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38252 | ··-·'"grub2"·in·ansible_facts.packages' | 38251 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38252 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38254 | ··tags: | 38254 | ··tags: |
| 38255 | ··-·CCE-91426-7 | 38255 | ··-·CCE-91426-7 |
| 38256 | ··-·NIST-800-171-3.4.5 | 38256 | ··-·NIST-800-171-3.4.5 |
| 38257 | ··-·NIST-800-53-AC-6(1) | 38257 | ··-·NIST-800-53-AC-6(1) |
| 38258 | ··-·NIST-800-53-CM-6(a) | 38258 | ··-·NIST-800-53-CM-6(a) |
| 38259 | ··-·configure_strategy | 38259 | ··-·configure_strategy |
| Offset 38265, 16 lines modified | Offset 38265, 16 lines modified | ||
| 38265 | ··-·no_reboot_needed | 38265 | ··-·no_reboot_needed |
| 38266 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 38266 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 38267 | ··file: | 38267 | ··file: |
| 38268 | ····path:·/boot/grub2/grub.cfg | 38268 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 998/5207 bytes (19.17%) of diff not shown. | |||
| Offset 47494, 22 lines modified | Offset 47494, 22 lines modified | ||
| 000b9850:·0a2d·206e·616d·653a·2054·6573·7420·666f··.-·name:·Test·fo | 000b9850:·0a2d·206e·616d·653a·2054·6573·7420·666f··.-·name:·Test·fo | ||
| 000b9860:·7220·6578·6973·7465·6e63·6520·2f62·6f6f··r·existence·/boo | 000b9860:·7220·6578·6973·7465·6e63·6520·2f62·6f6f··r·existence·/boo | ||
| 000b9870:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 000b9870:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 000b9880:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | 000b9880:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | ||
| 000b9890:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | 000b9890:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | ||
| 000b98a0:·7275·622e·6366·670a·2020·7265·6769·7374··rub.cfg.··regist | 000b98a0:·7275·622e·6366·670a·2020·7265·6769·7374··rub.cfg.··regist | ||
| 000b98b0:·6572·3a20·6669·6c65·5f65·7869·7374·730a··er:·file_exists. | 000b98b0:·6572·3a20·6669·6c65·5f65·7869·7374·730a··er:·file_exists. | ||
| 000b98c0:·2020·7768·656e·3a0a·2020·2d20·2722· | 000b98c0:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 000b98d0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 000b98e0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 000b98f0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 000b9900:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 000b9910:·2020·2d20·2722·6772·7562·3222·2069·6e20····-·'"grub2"·in· | |||
| 000b9 | 000b98d0:·7562·3222·2069·6e20·616e·7369·626c·655f··ub2"·in·ansible_ | ||
| 000b98e0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000b98f0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000b9900:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 000b9910:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000b9920:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000b9930:· | 000b9930:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 000b9940:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 000b9940:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 000b9950:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 000b9950:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 000b9960:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 000b9960:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 000b9970:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 000b9970:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 000b9980:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 000b9980:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 000b9990:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | 000b9990:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | ||
| 000b99a0:·452d·3835·3834·392d·380a·2020·2d20·434a··E-85849-8.··-·CJ | 000b99a0:·452d·3835·3834·392d·380a·2020·2d20·434a··E-85849-8.··-·CJ | ||
| Offset 47531, 21 lines modified | Offset 47531, 21 lines modified | ||
| 000b9aa0:·653a·2045·6e73·7572·6520·6772·6f75·7020··e:·Ensure·group· | 000b9aa0:·653a·2045·6e73·7572·6520·6772·6f75·7020··e:·Ensure·group· | ||
| 000b9ab0:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | 000b9ab0:·6f77·6e65·7220·3020·6f6e·202f·626f·6f74··owner·0·on·/boot | ||
| 000b9ac0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | 000b9ac0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg. | ||
| 000b9ad0:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | 000b9ad0:·2020·6669·6c65·3a0a·2020·2020·7061·7468····file:.····path | ||
| 000b9ae0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | 000b9ae0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr | ||
| 000b9af0:·7562·2e63·6667·0a20·2020·2067·726f·7570··ub.cfg.····group | 000b9af0:·7562·2e63·6667·0a20·2020·2067·726f·7570··ub.cfg.····group | ||
| 000b9b00:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | 000b9b00:·3a20·2730·270a·2020·7768·656e·3a0a·2020··:·'0'.··when:.·· | ||
| 000b9b10:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 000b9b20:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 000b9b30:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 000b9b40:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 000b9b50:·6c69·7374·270a·2020·2d20·2722·6772·7562··list'.··-·'"grub | |||
| 000b9b60:·3222·2069·6e20·616e·7369·626c·655f·6661··2"·in·ansible_fa | |||
| 000b9b | 000b9b10:·2d20·2722·6772·7562·3222·2069·6e20·616e··-·'"grub2"·in·an | ||
| 000b9b20:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 000b9b30:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo | |||
| 000b9b40:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 000b9b50:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 000b9b60:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 000b9b70:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 000b9b80:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | 000b9b80:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 000b9b90:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | 000b9b90:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 000b9ba0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | 000b9ba0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 000b9bb0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | 000b9bb0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 000b9bc0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | 000b9bc0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 000b9bd0:·6169·6e65·7222·5d0a·2020·2d20·6669·6c65··ainer"].··-·file | 000b9bd0:·6169·6e65·7222·5d0a·2020·2d20·6669·6c65··ainer"].··-·file | ||
| 000b9be0:·5f65·7869·7374·732e·7374·6174·2069·7320··_exists.stat·is· | 000b9be0:·5f65·7869·7374·732e·7374·6174·2069·7320··_exists.stat·is· | ||
| Offset 47597, 18 lines modified | Offset 47597, 18 lines modified | ||
| 000b9ec0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | 000b9ec0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 000b9ed0:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | 000b9ed0:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | ||
| 000b9ee0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | 000b9ee0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 000b9ef0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | 000b9ef0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 000b9f00:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | 000b9f00:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 000b9f10:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | 000b9f10:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 000b9f20:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | 000b9f20:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 000b9f30:·6966·2072·706d·202d·2d71·7569·6574·202d··if·rpm·--quiet·- | |||
| 000b9f40:·7120·6772·7562·3220·2661·6d70·3b26·616d··q·grub2·&&am | |||
| 000b9f | 000b9f50:·703b·205b·2021·202d·6620·2f73·7973·2f66··p;·[·!·-f·/sys/f | ||
| 000b9f | 000b9f60:·6972·6d77·6172·652f·6566·6920·5d20·2661··irmware/efi·]·&a | ||
| 000b9f50:·6d70·3b26·616d·703b·2072·706d·202d·2d71··mp;&·rpm·--q | |||
| 000b9f60:·7569·6574·202d·7120·6772·7562·3220·2661··uiet·-q·grub2·&a | |||
| 000b9f70:·6d70·3b26·616d·703b·207b·205b·2021·202d··mp;&·{·[·!·- | 000b9f70:·6d70·3b26·616d·703b·207b·205b·2021·202d··mp;&·{·[·!·- | ||
| 000b9f80:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | 000b9f80:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | ||
| 000b9f90:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | 000b9f90:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | ||
| 000b9fa0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | 000b9fa0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | ||
| 000b9fb0:·7265·6e76·205d·3b20·7d3b·2074·6865·6e0a··renv·];·};·then. | 000b9fb0:·7265·6e76·205d·3b20·7d3b·2074·6865·6e0a··renv·];·};·then. | ||
| 000b9fc0:·0a63·6867·7270·2030·202f·626f·6f74·2f67··.chgrp·0·/boot/g | 000b9fc0:·0a63·6867·7270·2030·202f·626f·6f74·2f67··.chgrp·0·/boot/g | ||
| 000b9fd0:·7275·6232·2f67·7275·622e·6366·670a·0a65··rub2/grub.cfg..e | 000b9fd0:·7275·6232·2f67·7275·622e·6366·670a·0a65··rub2/grub.cfg..e | ||
| Offset 48106, 21 lines modified | Offset 48106, 21 lines modified | ||
| 000bbe90:·3a20·5465·7374·2066·6f72·2065·7869·7374··:·Test·for·exist | 000bbe90:·3a20·5465·7374·2066·6f72·2065·7869·7374··:·Test·for·exist | ||
| 000bbea0:·656e·6365·202f·626f·6f74·2f67·7275·6232··ence·/boot/grub2 | 000bbea0:·656e·6365·202f·626f·6f74·2f67·7275·6232··ence·/boot/grub2 | ||
| 000bbeb0:·2f67·7275·622e·6366·670a·2020·7374·6174··/grub.cfg.··stat | 000bbeb0:·2f67·7275·622e·6366·670a·2020·7374·6174··/grub.cfg.··stat | ||
| 000bbec0:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 000bbec0:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 000bbed0:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 000bbed0:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 000bbee0:·0a20·2072·6567·6973·7465·723a·2066·696c··.··register:·fil | 000bbee0:·0a20·2072·6567·6973·7465·723a·2066·696c··.··register:·fil | ||
| 000bbef0:·655f·6578·6973·7473·0a20·2077·6865·6e3a··e_exists.··when: | 000bbef0:·655f·6578·6973·7473·0a20·2077·6865·6e3a··e_exists.··when: | ||
| 000bbf00:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 000bbf10:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 000bbf20:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 000bbf30:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 000bbf40:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 000bbf50:·7275·6232·2220·696e·2061·6e73·6962·6c65··rub2"·in·ansible | |||
| 000bbf | 000bbf00:·0a20·202d·2027·2267·7275·6232·2220·696e··.··-·'"grub2"·in | ||
| 000bbf10:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 000bbf20:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 000bbf30:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 000bbf40:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 000bbf50:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 000bbf60:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 000bbf70:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 000bbf70:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 000bbf80:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 000bbf80:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 000bbf90:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 000bbf90:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 000bbfa0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 000bbfa0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 000bbfb0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 000bbfb0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 000bbfc0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | 000bbfc0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | ||
| 000bbfd0:·733a·0a20·202d·2043·4345·2d38·3538·3438··s:.··-·CCE-85848 | 000bbfd0:·733a·0a20·202d·2043·4345·2d38·3538·3438··s:.··-·CCE-85848 | ||
| Offset 48142, 21 lines modified | Offset 48142, 21 lines modified | ||
| 000bc0d0:·206e·616d·653a·2045·6e73·7572·6520·6f77···name:·Ensure·ow | 000bc0d0:·206e·616d·653a·2045·6e73·7572·6520·6f77···name:·Ensure·ow | ||
| 000bc0e0:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | 000bc0e0:·6e65·7220·3020·6f6e·202f·626f·6f74·2f67··ner·0·on·/boot/g | ||
| 000bc0f0:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 000bc0f0:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 000bc100:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | 000bc100:·6669·6c65·3a0a·2020·2020·7061·7468·3a20··file:.····path:· | ||
| 000bc110:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 000bc110:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 000bc120:·2e63·6667·0a20·2020·206f·776e·6572·3a20··.cfg.····owner:· | 000bc120:·2e63·6667·0a20·2020·206f·776e·6572·3a20··.cfg.····owner:· | ||
| 000bc130:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | 000bc130:·2730·270a·2020·7768·656e·3a0a·2020·2d20··'0'.··when:.··-· | ||
| 000bc140:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 000bc150:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000bc160:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000bc170:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000bc180:·7374·270a·2020·2d20·2722·6772·7562·3222··st'.··-·'"grub2" | |||
| 000bc190:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000bc1 | 000bc140:·2722·6772·7562·3222·2069·6e20·616e·7369··'"grub2"·in·ansi | ||
| 000bc150:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 000bc160:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000bc170:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000bc180:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000bc190:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000bc1a0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000bc1b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 000bc1b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 000bc1c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 000bc1c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| Max diff block lines reached; 7694/16932 bytes (45.44%) of diff not shown. | |||
| Offset 5503, 16 lines modified | Offset 5503, 16 lines modified | ||
| 5503 | ··-·no_reboot_needed | 5503 | ··-·no_reboot_needed |
| 5504 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5504 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5505 | ··stat: | 5505 | ··stat: |
| 5506 | ····path:·/boot/grub2/grub.cfg | 5506 | ····path:·/boot/grub2/grub.cfg |
| 5507 | ··register:·file_exists | 5507 | ··register:·file_exists |
| 5508 | ··when: | 5508 | ··when: |
| 5509 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5510 | ··-·'"grub2"·in·ansible_facts.packages' | 5509 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5510 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5511 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5511 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5512 | ··tags: | 5512 | ··tags: |
| 5513 | ··-·CCE-85849-8 | 5513 | ··-·CCE-85849-8 |
| 5514 | ··-·CJIS-5.5.2.2 | 5514 | ··-·CJIS-5.5.2.2 |
| 5515 | ··-·NIST-800-171-3.4.5 | 5515 | ··-·NIST-800-171-3.4.5 |
| 5516 | ··-·NIST-800-53-AC-6(1) | 5516 | ··-·NIST-800-53-AC-6(1) |
| 5517 | ··-·NIST-800-53-CM-6(a) | 5517 | ··-·NIST-800-53-CM-6(a) |
| Offset 5525, 16 lines modified | Offset 5525, 16 lines modified | ||
| 5525 | ··-·no_reboot_needed | 5525 | ··-·no_reboot_needed |
| 5526 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5526 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5527 | ··file: | 5527 | ··file: |
| 5528 | ····path:·/boot/grub2/grub.cfg | 5528 | ····path:·/boot/grub2/grub.cfg |
| 5529 | ····group:·'0' | 5529 | ····group:·'0' |
| 5530 | ··when: | 5530 | ··when: |
| 5531 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5532 | ··-·'"grub2"·in·ansible_facts.packages' | 5531 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5532 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5533 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5533 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5534 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5534 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5535 | ··tags: | 5535 | ··tags: |
| 5536 | ··-·CCE-85849-8 | 5536 | ··-·CCE-85849-8 |
| 5537 | ··-·CJIS-5.5.2.2 | 5537 | ··-·CJIS-5.5.2.2 |
| 5538 | ··-·NIST-800-171-3.4.5 | 5538 | ··-·NIST-800-171-3.4.5 |
| 5539 | ··-·NIST-800-53-AC-6(1) | 5539 | ··-·NIST-800-53-AC-6(1) |
| Offset 5547, 15 lines modified | Offset 5547, 15 lines modified | ||
| 5547 | ··-·medium_severity | 5547 | ··-·medium_severity |
| 5548 | ··-·no_reboot_needed | 5548 | ··-·no_reboot_needed |
| 5549 | Remediation_Shell_script_⇲ | 5549 | Remediation_Shell_script_⇲ |
| 5550 | Complexity:·low | 5550 | Complexity:·low |
| 5551 | Disruption:·low | 5551 | Disruption:·low |
| 5552 | Strategy:···configure | 5552 | Strategy:···configure |
| 5553 | #·Remediation·is·applicable·only·in·certain·platforms | 5553 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5554 | if· | 5554 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 5555 | };·then | 5555 | };·then |
| 5556 | chgrp·0·/boot/grub2/grub.cfg | 5556 | chgrp·0·/boot/grub2/grub.cfg |
| 5557 | else | 5557 | else |
| 5558 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5558 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5559 | fi | 5559 | fi |
| Offset 5596, 16 lines modified | Offset 5596, 16 lines modified | ||
| 5596 | ··-·no_reboot_needed | 5596 | ··-·no_reboot_needed |
| 5597 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5597 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5598 | ··stat: | 5598 | ··stat: |
| 5599 | ····path:·/boot/grub2/grub.cfg | 5599 | ····path:·/boot/grub2/grub.cfg |
| 5600 | ··register:·file_exists | 5600 | ··register:·file_exists |
| 5601 | ··when: | 5601 | ··when: |
| 5602 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5603 | ··-·'"grub2"·in·ansible_facts.packages' | 5602 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5603 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5604 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5604 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5605 | ··tags: | 5605 | ··tags: |
| 5606 | ··-·CCE-85848-0 | 5606 | ··-·CCE-85848-0 |
| 5607 | ··-·CJIS-5.5.2.2 | 5607 | ··-·CJIS-5.5.2.2 |
| 5608 | ··-·NIST-800-171-3.4.5 | 5608 | ··-·NIST-800-171-3.4.5 |
| 5609 | ··-·NIST-800-53-AC-6(1) | 5609 | ··-·NIST-800-53-AC-6(1) |
| 5610 | ··-·NIST-800-53-CM-6(a) | 5610 | ··-·NIST-800-53-CM-6(a) |
| Offset 5618, 16 lines modified | Offset 5618, 16 lines modified | ||
| 5618 | ··-·no_reboot_needed | 5618 | ··-·no_reboot_needed |
| 5619 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5619 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5620 | ··file: | 5620 | ··file: |
| 5621 | ····path:·/boot/grub2/grub.cfg | 5621 | ····path:·/boot/grub2/grub.cfg |
| 5622 | ····owner:·'0' | 5622 | ····owner:·'0' |
| 5623 | ··when: | 5623 | ··when: |
| 5624 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5625 | ··-·'"grub2"·in·ansible_facts.packages' | 5624 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5625 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5626 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5626 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5627 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5627 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5628 | ··tags: | 5628 | ··tags: |
| 5629 | ··-·CCE-85848-0 | 5629 | ··-·CCE-85848-0 |
| 5630 | ··-·CJIS-5.5.2.2 | 5630 | ··-·CJIS-5.5.2.2 |
| 5631 | ··-·NIST-800-171-3.4.5 | 5631 | ··-·NIST-800-171-3.4.5 |
| 5632 | ··-·NIST-800-53-AC-6(1) | 5632 | ··-·NIST-800-53-AC-6(1) |
| Offset 5640, 15 lines modified | Offset 5640, 15 lines modified | ||
| 5640 | ··-·medium_severity | 5640 | ··-·medium_severity |
| 5641 | ··-·no_reboot_needed | 5641 | ··-·no_reboot_needed |
| 5642 | Remediation_Shell_script_⇲ | 5642 | Remediation_Shell_script_⇲ |
| 5643 | Complexity:·low | 5643 | Complexity:·low |
| 5644 | Disruption:·low | 5644 | Disruption:·low |
| 5645 | Strategy:···configure | 5645 | Strategy:···configure |
| 5646 | #·Remediation·is·applicable·only·in·certain·platforms | 5646 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5647 | if· | 5647 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 5648 | };·then | 5648 | };·then |
| 5649 | chown·0·/boot/grub2/grub.cfg | 5649 | chown·0·/boot/grub2/grub.cfg |
| 5650 | else | 5650 | else |
| 5651 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5651 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5652 | fi | 5652 | fi |
| Offset 5687, 16 lines modified | Offset 5687, 16 lines modified | ||
| 5687 | ··-·no_reboot_needed | 5687 | ··-·no_reboot_needed |
| 5688 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5688 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5689 | ··stat: | 5689 | ··stat: |
| 5690 | ····path:·/boot/grub2/grub.cfg | 5690 | ····path:·/boot/grub2/grub.cfg |
| 5691 | ··register:·file_exists | 5691 | ··register:·file_exists |
| 5692 | ··when: | 5692 | ··when: |
| 5693 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5694 | ··-·'"grub2"·in·ansible_facts.packages' | 5693 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5694 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5695 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5696 | ··tags: | 5696 | ··tags: |
| 5697 | ··-·CCE-91426-7 | 5697 | ··-·CCE-91426-7 |
| 5698 | ··-·NIST-800-171-3.4.5 | 5698 | ··-·NIST-800-171-3.4.5 |
| 5699 | ··-·NIST-800-53-AC-6(1) | 5699 | ··-·NIST-800-53-AC-6(1) |
| 5700 | ··-·NIST-800-53-CM-6(a) | 5700 | ··-·NIST-800-53-CM-6(a) |
| 5701 | ··-·configure_strategy | 5701 | ··-·configure_strategy |
| Offset 5707, 16 lines modified | Offset 5707, 16 lines modified | ||
| 5707 | ··-·no_reboot_needed | 5707 | ··-·no_reboot_needed |
| 5708 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5708 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5709 | ··file: | 5709 | ··file: |
| 5710 | ····path:·/boot/grub2/grub.cfg | 5710 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 996/5189 bytes (19.19%) of diff not shown. | |||
| Offset 47486, 21 lines modified | Offset 47486, 21 lines modified | ||
| 000b97d0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 000b97d0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 000b97e0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 000b97e0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 000b97f0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 000b97f0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 000b9800:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 000b9800:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 000b9810:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | 000b9810:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | ||
| 000b9820:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 000b9820:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 000b9830:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 000b9830:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 000b9840:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 000b9850:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 000b9860:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 000b9870:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 000b9880:·7374·270a·2020·2d20·2722·6772·7562·3222··st'.··-·'"grub2" | |||
| 000b9890:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 000b98 | 000b9840:·2722·6772·7562·3222·2069·6e20·616e·7369··'"grub2"·in·ansi | ||
| 000b9850:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 000b9860:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 000b9870:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 000b9880:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 000b9890:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 000b98a0:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 000b98b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 000b98b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 000b98c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 000b98c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 000b98d0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 000b98d0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 000b98e0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 000b98e0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 000b98f0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 000b98f0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 000b9900:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 000b9900:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 000b9910:·2d20·4343·452d·3835·3834·392d·380a·2020··-·CCE-85849-8.·· | 000b9910:·2d20·4343·452d·3835·3834·392d·380a·2020··-·CCE-85849-8.·· | ||
| Offset 47522, 21 lines modified | Offset 47522, 21 lines modified | ||
| 000b9a10:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 000b9a10:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 000b9a20:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 000b9a20:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 000b9a30:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 000b9a30:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 000b9a40:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 000b9a40:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 000b9a50:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 000b9a50:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 000b9a60:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | 000b9a60:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | ||
| 000b9a70:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 000b9a70:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 000b9a80:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 000b9a90:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 000b9aa0:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 000b9ab0:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 000b9ac0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 000b9ad0:·6772·7562·3222·2069·6e20·616e·7369·626c··grub2"·in·ansibl | |||
| 000b9a | 000b9a80:·3a0a·2020·2d20·2722·6772·7562·3222·2069··:.··-·'"grub2"·i | ||
| 000b9a90:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 000b9aa0:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 000b9ab0:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 000b9ac0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 000b9ad0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 000b9ae0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 000b9af0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 000b9af0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 000b9b00:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 000b9b00:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 000b9b10:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 000b9b10:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 000b9b20:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 000b9b20:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 000b9b30:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 000b9b30:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 000b9b40:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | 000b9b40:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | ||
| 000b9b50:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | 000b9b50:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | ||
| Offset 47588, 19 lines modified | Offset 47588, 19 lines modified | ||
| 000b9e30:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | 000b9e30:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 000b9e40:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | 000b9e40:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 000b9e50:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | 000b9e50:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 000b9e60:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | 000b9e60:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 000b9e70:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 000b9e70:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 000b9e80:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 000b9e80:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 000b9e90:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 000b9e90:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 000b9ea0:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 000b9eb0:·6574·202d·7120·6772·7562·3220·2661·6d70··et·-q·grub2·& | |||
| 000b9e | 000b9ec0:·3b26·616d·703b·205b·2021·202d·6620·2f73··;&·[·!·-f·/s | ||
| 000b9e | 000b9ed0:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | ||
| 000b9ec0:·5d20·2661·6d70·3b26·616d·703b·2072·706d··]·&&·rpm | |||
| 000b9ed0:·202d·2d71·7569·6574·202d·7120·6772·7562···--quiet·-q·grub | |||
| 000b9ee0:· | 000b9ee0:·5d20·2661·6d70·3b26·616d·703b·207b·205b··]·&&·{·[ | ||
| 000b9ef0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | 000b9ef0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 000b9f00:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | 000b9f00:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 000b9f10:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | 000b9f10:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 000b9f20:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | 000b9f20:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 000b9f30:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | 000b9f30:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | ||
| 000b9f40:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 000b9f40:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 000b9f50:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | 000b9f50:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | ||
| Offset 48097, 22 lines modified | Offset 48097, 22 lines modified | ||
| 000bbe00:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 000bbe00:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 000bbe10:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 000bbe10:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 000bbe20:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 000bbe20:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 000bbe30:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 000bbe30:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 000bbe40:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 000bbe40:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 000bbe50:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 000bbe50:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 000bbe60:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 000bbe60:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 000bbe70:·6865·6e3a·0a20·202d·2027·22 | 000bbe70:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 000bbe80:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 000bbe90:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 000bbea0:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 000bbeb0:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 000bbec0:·2027·2267·7275·6232·2220·696e·2061·6e73···'"grub2"·in·ans | |||
| 000bbe | 000bbe80:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 000bbe90:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 000bbea0:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 000bbeb0:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 000bbec0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 000bbed0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 000bbee0:·6 | 000bbee0:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 000bbef0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 000bbef0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 000bbf00:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 000bbf00:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 000bbf10:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 000bbf10:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 000bbf20:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 000bbf20:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 000bbf30:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 000bbf30:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 000bbf40:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 000bbf40:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 000bbf50:·3538·3438·2d30·0a20·202d·2043·4a49·532d··5848-0.··-·CJIS- | 000bbf50:·3538·3438·2d30·0a20·202d·2043·4a49·532d··5848-0.··-·CJIS- | ||
| Offset 48133, 21 lines modified | Offset 48133, 21 lines modified | ||
| 000bc040:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | 000bc040:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | ||
| 000bc050:·6520·6f77·6e65·7220·3020·6f6e·202f·626f··e·owner·0·on·/bo | 000bc050:·6520·6f77·6e65·7220·3020·6f6e·202f·626f··e·owner·0·on·/bo | ||
| 000bc060:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 000bc060:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 000bc070:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | 000bc070:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | ||
| 000bc080:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 000bc080:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 000bc090:·6772·7562·2e63·6667·0a20·2020·206f·776e··grub.cfg.····own | 000bc090:·6772·7562·2e63·6667·0a20·2020·206f·776e··grub.cfg.····own | ||
| 000bc0a0:·6572·3a20·2730·270a·2020·7768·656e·3a0a··er:·'0'.··when:. | 000bc0a0:·6572·3a20·2730·270a·2020·7768·656e·3a0a··er:·'0'.··when:. | ||
| 000bc0b0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 000bc0c0:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 000bc0d0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 000bc0e0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 000bc0f0:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 000bc100:·7562·3222·2069·6e20·616e·7369·626c·655f··ub2"·in·ansible_ | |||
| 000bc | 000bc0b0:·2020·2d20·2722·6772·7562·3222·2069·6e20····-·'"grub2"·in· | ||
| 000bc0c0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 000bc0d0:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | |||
| 000bc0e0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 000bc0f0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 000bc100:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 000bc110:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 000bc120:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | 000bc120:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| Max diff block lines reached; 7763/17070 bytes (45.48%) of diff not shown. | |||
| Offset 5501, 16 lines modified | Offset 5501, 16 lines modified | ||
| 5501 | ··-·no_reboot_needed | 5501 | ··-·no_reboot_needed |
| 5502 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5502 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5503 | ··stat: | 5503 | ··stat: |
| 5504 | ····path:·/boot/grub2/grub.cfg | 5504 | ····path:·/boot/grub2/grub.cfg |
| 5505 | ··register:·file_exists | 5505 | ··register:·file_exists |
| 5506 | ··when: | 5506 | ··when: |
| 5507 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5508 | ··-·'"grub2"·in·ansible_facts.packages' | 5507 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5508 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5509 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5509 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5510 | ··tags: | 5510 | ··tags: |
| 5511 | ··-·CCE-85849-8 | 5511 | ··-·CCE-85849-8 |
| 5512 | ··-·CJIS-5.5.2.2 | 5512 | ··-·CJIS-5.5.2.2 |
| 5513 | ··-·NIST-800-171-3.4.5 | 5513 | ··-·NIST-800-171-3.4.5 |
| 5514 | ··-·NIST-800-53-AC-6(1) | 5514 | ··-·NIST-800-53-AC-6(1) |
| 5515 | ··-·NIST-800-53-CM-6(a) | 5515 | ··-·NIST-800-53-CM-6(a) |
| Offset 5523, 16 lines modified | Offset 5523, 16 lines modified | ||
| 5523 | ··-·no_reboot_needed | 5523 | ··-·no_reboot_needed |
| 5524 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5524 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5525 | ··file: | 5525 | ··file: |
| 5526 | ····path:·/boot/grub2/grub.cfg | 5526 | ····path:·/boot/grub2/grub.cfg |
| 5527 | ····group:·'0' | 5527 | ····group:·'0' |
| 5528 | ··when: | 5528 | ··when: |
| 5529 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5530 | ··-·'"grub2"·in·ansible_facts.packages' | 5529 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5530 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5531 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5531 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5532 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5532 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5533 | ··tags: | 5533 | ··tags: |
| 5534 | ··-·CCE-85849-8 | 5534 | ··-·CCE-85849-8 |
| 5535 | ··-·CJIS-5.5.2.2 | 5535 | ··-·CJIS-5.5.2.2 |
| 5536 | ··-·NIST-800-171-3.4.5 | 5536 | ··-·NIST-800-171-3.4.5 |
| 5537 | ··-·NIST-800-53-AC-6(1) | 5537 | ··-·NIST-800-53-AC-6(1) |
| Offset 5545, 15 lines modified | Offset 5545, 15 lines modified | ||
| 5545 | ··-·medium_severity | 5545 | ··-·medium_severity |
| 5546 | ··-·no_reboot_needed | 5546 | ··-·no_reboot_needed |
| 5547 | Remediation_Shell_script_⇲ | 5547 | Remediation_Shell_script_⇲ |
| 5548 | Complexity:·low | 5548 | Complexity:·low |
| 5549 | Disruption:·low | 5549 | Disruption:·low |
| 5550 | Strategy:···configure | 5550 | Strategy:···configure |
| 5551 | #·Remediation·is·applicable·only·in·certain·platforms | 5551 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5552 | if· | 5552 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 5553 | };·then | 5553 | };·then |
| 5554 | chgrp·0·/boot/grub2/grub.cfg | 5554 | chgrp·0·/boot/grub2/grub.cfg |
| 5555 | else | 5555 | else |
| 5556 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5556 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5557 | fi | 5557 | fi |
| Offset 5594, 16 lines modified | Offset 5594, 16 lines modified | ||
| 5594 | ··-·no_reboot_needed | 5594 | ··-·no_reboot_needed |
| 5595 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5595 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5596 | ··stat: | 5596 | ··stat: |
| 5597 | ····path:·/boot/grub2/grub.cfg | 5597 | ····path:·/boot/grub2/grub.cfg |
| 5598 | ··register:·file_exists | 5598 | ··register:·file_exists |
| 5599 | ··when: | 5599 | ··when: |
| 5600 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5601 | ··-·'"grub2"·in·ansible_facts.packages' | 5600 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5601 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5602 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5602 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5603 | ··tags: | 5603 | ··tags: |
| 5604 | ··-·CCE-85848-0 | 5604 | ··-·CCE-85848-0 |
| 5605 | ··-·CJIS-5.5.2.2 | 5605 | ··-·CJIS-5.5.2.2 |
| 5606 | ··-·NIST-800-171-3.4.5 | 5606 | ··-·NIST-800-171-3.4.5 |
| 5607 | ··-·NIST-800-53-AC-6(1) | 5607 | ··-·NIST-800-53-AC-6(1) |
| 5608 | ··-·NIST-800-53-CM-6(a) | 5608 | ··-·NIST-800-53-CM-6(a) |
| Offset 5616, 16 lines modified | Offset 5616, 16 lines modified | ||
| 5616 | ··-·no_reboot_needed | 5616 | ··-·no_reboot_needed |
| 5617 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5617 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5618 | ··file: | 5618 | ··file: |
| 5619 | ····path:·/boot/grub2/grub.cfg | 5619 | ····path:·/boot/grub2/grub.cfg |
| 5620 | ····owner:·'0' | 5620 | ····owner:·'0' |
| 5621 | ··when: | 5621 | ··when: |
| 5622 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5623 | ··-·'"grub2"·in·ansible_facts.packages' | 5622 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5623 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5624 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5624 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5625 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5625 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5626 | ··tags: | 5626 | ··tags: |
| 5627 | ··-·CCE-85848-0 | 5627 | ··-·CCE-85848-0 |
| 5628 | ··-·CJIS-5.5.2.2 | 5628 | ··-·CJIS-5.5.2.2 |
| 5629 | ··-·NIST-800-171-3.4.5 | 5629 | ··-·NIST-800-171-3.4.5 |
| 5630 | ··-·NIST-800-53-AC-6(1) | 5630 | ··-·NIST-800-53-AC-6(1) |
| Offset 5638, 15 lines modified | Offset 5638, 15 lines modified | ||
| 5638 | ··-·medium_severity | 5638 | ··-·medium_severity |
| 5639 | ··-·no_reboot_needed | 5639 | ··-·no_reboot_needed |
| 5640 | Remediation_Shell_script_⇲ | 5640 | Remediation_Shell_script_⇲ |
| 5641 | Complexity:·low | 5641 | Complexity:·low |
| 5642 | Disruption:·low | 5642 | Disruption:·low |
| 5643 | Strategy:···configure | 5643 | Strategy:···configure |
| 5644 | #·Remediation·is·applicable·only·in·certain·platforms | 5644 | #·Remediation·is·applicable·only·in·certain·platforms |
| 5645 | if· | 5645 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 5646 | };·then | 5646 | };·then |
| 5647 | chown·0·/boot/grub2/grub.cfg | 5647 | chown·0·/boot/grub2/grub.cfg |
| 5648 | else | 5648 | else |
| 5649 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 5649 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 5650 | fi | 5650 | fi |
| Offset 5685, 16 lines modified | Offset 5685, 16 lines modified | ||
| 5685 | ··-·no_reboot_needed | 5685 | ··-·no_reboot_needed |
| 5686 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 5686 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5687 | ··stat: | 5687 | ··stat: |
| 5688 | ····path:·/boot/grub2/grub.cfg | 5688 | ····path:·/boot/grub2/grub.cfg |
| 5689 | ··register:·file_exists | 5689 | ··register:·file_exists |
| 5690 | ··when: | 5690 | ··when: |
| 5691 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5692 | ··-·'"grub2"·in·ansible_facts.packages' | 5691 | ··-·'"grub2"·in·ansible_facts.packages' |
| 5692 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5693 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5693 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5694 | ··tags: | 5694 | ··tags: |
| 5695 | ··-·CCE-91426-7 | 5695 | ··-·CCE-91426-7 |
| 5696 | ··-·NIST-800-171-3.4.5 | 5696 | ··-·NIST-800-171-3.4.5 |
| 5697 | ··-·NIST-800-53-AC-6(1) | 5697 | ··-·NIST-800-53-AC-6(1) |
| 5698 | ··-·NIST-800-53-CM-6(a) | 5698 | ··-·NIST-800-53-CM-6(a) |
| 5699 | ··-·configure_strategy | 5699 | ··-·configure_strategy |
| Offset 5705, 16 lines modified | Offset 5705, 16 lines modified | ||
| 5705 | ··-·no_reboot_needed | 5705 | ··-·no_reboot_needed |
| 5706 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5706 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5707 | ··file: | 5707 | ··file: |
| 5708 | ····path:·/boot/grub2/grub.cfg | 5708 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 996/5189 bytes (19.19%) of diff not shown. | |||
| Offset 167900, 21 lines modified | Offset 167900, 21 lines modified | ||
| 0028fdb0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | 0028fdb0:·7420·666f·7220·6578·6973·7465·6e63·6520··t·for·existence· | ||
| 0028fdc0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 0028fdc0:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 0028fdd0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | 0028fdd0:·2e63·6667·0a20·2073·7461·743a·0a20·2020··.cfg.··stat:.··· | ||
| 0028fde0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | 0028fde0:·2070·6174·683a·202f·626f·6f74·2f67·7275···path:·/boot/gru | ||
| 0028fdf0:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | 0028fdf0:·6232·2f67·7275·622e·6366·670a·2020·7265··b2/grub.cfg.··re | ||
| 0028fe00:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | 0028fe00:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | ||
| 0028fe10:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | 0028fe10:·7374·730a·2020·7768·656e·3a0a·2020·2d20··sts.··when:.··-· | ||
| 0028fe20:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 0028fe30:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 0028fe40:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 0028fe50:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 0028fe60:·7374·270a·2020·2d20·2722·6772·7562·3222··st'.··-·'"grub2" | |||
| 0028fe70:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0028fe | 0028fe20:·2722·6772·7562·3222·2069·6e20·616e·7369··'"grub2"·in·ansi | ||
| 0028fe30:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0028fe40:·6573·270a·2020·2d20·2722·2f62·6f6f·742f··es'.··-·'"/boot/ | |||
| 0028fe50:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 0028fe60:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 0028fe70:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 0028fe80:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 0028fe90:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | 0028fe90:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 0028fea0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | 0028fea0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 0028feb0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | 0028feb0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 0028fec0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | 0028fec0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 0028fed0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | 0028fed0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 0028fee0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | 0028fee0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 0028fef0:·2d20·4343·452d·3835·3834·392d·380a·2020··-·CCE-85849-8.·· | 0028fef0:·2d20·4343·452d·3835·3834·392d·380a·2020··-·CCE-85849-8.·· | ||
| Offset 167936, 21 lines modified | Offset 167936, 21 lines modified | ||
| 0028fff0:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | 0028fff0:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | ||
| 00290000:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | 00290000:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | ||
| 00290010:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 00290010:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 00290020:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | 00290020:·6366·670a·2020·6669·6c65·3a0a·2020·2020··cfg.··file:.···· | ||
| 00290030:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 00290030:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 00290040:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | 00290040:·322f·6772·7562·2e63·6667·0a20·2020·2067··2/grub.cfg.····g | ||
| 00290050:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | 00290050:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | ||
| 00290060:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 00290070:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 00290080:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 00290090:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002900a0:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 002900b0:·6772·7562·3222·2069·6e20·616e·7369·626c··grub2"·in·ansibl | |||
| 002900 | 00290060:·3a0a·2020·2d20·2722·6772·7562·3222·2069··:.··-·'"grub2"·i | ||
| 00290070:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 00290080:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 00290090:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 002900a0:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002900b0:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002900c0:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002900d0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 002900d0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 002900e0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 002900e0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 002900f0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 002900f0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 00290100:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 00290100:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 00290110:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 00290110:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 00290120:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | 00290120:·636f·6e74·6169·6e65·7222·5d0a·2020·2d20··container"].··-· | ||
| 00290130:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | 00290130:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | ||
| Offset 168002, 19 lines modified | Offset 168002, 19 lines modified | ||
| 00290410:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | 00290410:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 00290420:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | 00290420:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 00290430:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | 00290430:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 00290440:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | 00290440:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 00290450:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | 00290450:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 00290460:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | 00290460:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 00290470:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | 00290470:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 00290480:·726d·730a·6966·2072·706d·202d·2d71·7569··rms.if·rpm·--qui | |||
| 00290490:·6574·202d·7120·6772·7562·3220·2661·6d70··et·-q·grub2·& | |||
| 002904 | 002904a0:·3b26·616d·703b·205b·2021·202d·6620·2f73··;&·[·!·-f·/s | ||
| 002904 | 002904b0:·7973·2f66·6972·6d77·6172·652f·6566·6920··ys/firmware/efi· | ||
| 002904a0:·5d20·2661·6d70·3b26·616d·703b·2072·706d··]·&&·rpm | |||
| 002904b0:·202d·2d71·7569·6574·202d·7120·6772·7562···--quiet·-q·grub | |||
| 002904c0:· | 002904c0:·5d20·2661·6d70·3b26·616d·703b·207b·205b··]·&&·{·[ | ||
| 002904d0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | 002904d0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 002904e0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | 002904e0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 002904f0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | 002904f0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 00290500:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | 00290500:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t | ||
| 00290510:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | 00290510:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo | ||
| 00290520:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 00290520:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 00290530:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | 00290530:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····> | ||
| Offset 168511, 22 lines modified | Offset 168511, 22 lines modified | ||
| 002923e0:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | 002923e0:·6e61·6d65·3a20·5465·7374·2066·6f72·2065··name:·Test·for·e | ||
| 002923f0:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | 002923f0:·7869·7374·656e·6365·202f·626f·6f74·2f67··xistence·/boot/g | ||
| 00292400:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | 00292400:·7275·6232·2f67·7275·622e·6366·670a·2020··rub2/grub.cfg.·· | ||
| 00292410:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | 00292410:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | ||
| 00292420:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | 00292420:·2f62·6f6f·742f·6772·7562·322f·6772·7562··/boot/grub2/grub | ||
| 00292430:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | 00292430:·2e63·6667·0a20·2072·6567·6973·7465·723a··.cfg.··register: | ||
| 00292440:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | 00292440:·2066·696c·655f·6578·6973·7473·0a20·2077···file_exists.··w | ||
| 00292450:·6865·6e3a·0a20·202d·2027·22 | 00292450:·6865·6e3a·0a20·202d·2027·2267·7275·6232··hen:.··-·'"grub2 | ||
| 00292460:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00292470:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00292480:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 00292490:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 002924a0:·2027·2267·7275·6232·2220·696e·2061·6e73···'"grub2"·in·ans | |||
| 002924 | 00292460:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | ||
| 00292470:·7473·2e70·6163·6b61·6765·7327·0a20·202d··ts.packages'.··- | |||
| 00292480:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 00292490:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 002924a0:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 002924b0:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 002924c0:·6 | 002924c0:·6973·7427·0a20·202d·2061·6e73·6962·6c65··ist'.··-·ansible | ||
| 002924d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | 002924d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 002924e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | 002924e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 002924f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | 002924f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 00292500:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | 00292500:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 00292510:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | 00292510:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 00292520:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | 00292520:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | ||
| 00292530:·3538·3438·2d30·0a20·202d·2043·4a49·532d··5848-0.··-·CJIS- | 00292530:·3538·3438·2d30·0a20·202d·2043·4a49·532d··5848-0.··-·CJIS- | ||
| Offset 168547, 21 lines modified | Offset 168547, 21 lines modified | ||
| 00292620:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | 00292620:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | ||
| 00292630:·6520·6f77·6e65·7220·3020·6f6e·202f·626f··e·owner·0·on·/bo | 00292630:·6520·6f77·6e65·7220·3020·6f6e·202f·626f··e·owner·0·on·/bo | ||
| 00292640:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 00292640:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 00292650:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | 00292650:·670a·2020·6669·6c65·3a0a·2020·2020·7061··g.··file:.····pa | ||
| 00292660:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | 00292660:·7468·3a20·2f62·6f6f·742f·6772·7562·322f··th:·/boot/grub2/ | ||
| 00292670:·6772·7562·2e63·6667·0a20·2020·206f·776e··grub.cfg.····own | 00292670:·6772·7562·2e63·6667·0a20·2020·206f·776e··grub.cfg.····own | ||
| 00292680:·6572·3a20·2730·270a·2020·7768·656e·3a0a··er:·'0'.··when:. | 00292680:·6572·3a20·2730·270a·2020·7768·656e·3a0a··er:·'0'.··when:. | ||
| 00292690:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 002926a0:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002926b0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002926c0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002926d0:·7c20·6c69·7374·270a·2020·2d20·2722·6772··|·list'.··-·'"gr | |||
| 002926e0:·7562·3222·2069·6e20·616e·7369·626c·655f··ub2"·in·ansible_ | |||
| 002926 | 00292690:·2020·2d20·2722·6772·7562·3222·2069·6e20····-·'"grub2"·in· | ||
| 002926a0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 002926b0:·636b·6167·6573·270a·2020·2d20·2722·2f62··ckages'.··-·'"/b | |||
| 002926c0:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 002926d0:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 002926e0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 002926f0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 00292700:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | 00292700:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| Max diff block lines reached; 7771/17088 bytes (45.48%) of diff not shown. | |||
| Offset 38060, 16 lines modified | Offset 38060, 16 lines modified | ||
| 38060 | ··-·no_reboot_needed | 38060 | ··-·no_reboot_needed |
| 38061 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 38061 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 38062 | ··stat: | 38062 | ··stat: |
| 38063 | ····path:·/boot/grub2/grub.cfg | 38063 | ····path:·/boot/grub2/grub.cfg |
| 38064 | ··register:·file_exists | 38064 | ··register:·file_exists |
| 38065 | ··when: | 38065 | ··when: |
| 38066 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38067 | ··-·'"grub2"·in·ansible_facts.packages' | 38066 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38067 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38068 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38068 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38069 | ··tags: | 38069 | ··tags: |
| 38070 | ··-·CCE-85849-8 | 38070 | ··-·CCE-85849-8 |
| 38071 | ··-·CJIS-5.5.2.2 | 38071 | ··-·CJIS-5.5.2.2 |
| 38072 | ··-·NIST-800-171-3.4.5 | 38072 | ··-·NIST-800-171-3.4.5 |
| 38073 | ··-·NIST-800-53-AC-6(1) | 38073 | ··-·NIST-800-53-AC-6(1) |
| 38074 | ··-·NIST-800-53-CM-6(a) | 38074 | ··-·NIST-800-53-CM-6(a) |
| Offset 38082, 16 lines modified | Offset 38082, 16 lines modified | ||
| 38082 | ··-·no_reboot_needed | 38082 | ··-·no_reboot_needed |
| 38083 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 38083 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 38084 | ··file: | 38084 | ··file: |
| 38085 | ····path:·/boot/grub2/grub.cfg | 38085 | ····path:·/boot/grub2/grub.cfg |
| 38086 | ····group:·'0' | 38086 | ····group:·'0' |
| 38087 | ··when: | 38087 | ··when: |
| 38088 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38089 | ··-·'"grub2"·in·ansible_facts.packages' | 38088 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38089 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38090 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38090 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38091 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 38091 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 38092 | ··tags: | 38092 | ··tags: |
| 38093 | ··-·CCE-85849-8 | 38093 | ··-·CCE-85849-8 |
| 38094 | ··-·CJIS-5.5.2.2 | 38094 | ··-·CJIS-5.5.2.2 |
| 38095 | ··-·NIST-800-171-3.4.5 | 38095 | ··-·NIST-800-171-3.4.5 |
| 38096 | ··-·NIST-800-53-AC-6(1) | 38096 | ··-·NIST-800-53-AC-6(1) |
| Offset 38104, 15 lines modified | Offset 38104, 15 lines modified | ||
| 38104 | ··-·medium_severity | 38104 | ··-·medium_severity |
| 38105 | ··-·no_reboot_needed | 38105 | ··-·no_reboot_needed |
| 38106 | Remediation_Shell_script_⇲ | 38106 | Remediation_Shell_script_⇲ |
| 38107 | Complexity:·low | 38107 | Complexity:·low |
| 38108 | Disruption:·low | 38108 | Disruption:·low |
| 38109 | Strategy:···configure | 38109 | Strategy:···configure |
| 38110 | #·Remediation·is·applicable·only·in·certain·platforms | 38110 | #·Remediation·is·applicable·only·in·certain·platforms |
| 38111 | if· | 38111 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 38112 | };·then | 38112 | };·then |
| 38113 | chgrp·0·/boot/grub2/grub.cfg | 38113 | chgrp·0·/boot/grub2/grub.cfg |
| 38114 | else | 38114 | else |
| 38115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 38115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 38116 | fi | 38116 | fi |
| Offset 38153, 16 lines modified | Offset 38153, 16 lines modified | ||
| 38153 | ··-·no_reboot_needed | 38153 | ··-·no_reboot_needed |
| 38154 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 38154 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 38155 | ··stat: | 38155 | ··stat: |
| 38156 | ····path:·/boot/grub2/grub.cfg | 38156 | ····path:·/boot/grub2/grub.cfg |
| 38157 | ··register:·file_exists | 38157 | ··register:·file_exists |
| 38158 | ··when: | 38158 | ··when: |
| 38159 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38160 | ··-·'"grub2"·in·ansible_facts.packages' | 38159 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38160 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38161 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38161 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38162 | ··tags: | 38162 | ··tags: |
| 38163 | ··-·CCE-85848-0 | 38163 | ··-·CCE-85848-0 |
| 38164 | ··-·CJIS-5.5.2.2 | 38164 | ··-·CJIS-5.5.2.2 |
| 38165 | ··-·NIST-800-171-3.4.5 | 38165 | ··-·NIST-800-171-3.4.5 |
| 38166 | ··-·NIST-800-53-AC-6(1) | 38166 | ··-·NIST-800-53-AC-6(1) |
| 38167 | ··-·NIST-800-53-CM-6(a) | 38167 | ··-·NIST-800-53-CM-6(a) |
| Offset 38175, 16 lines modified | Offset 38175, 16 lines modified | ||
| 38175 | ··-·no_reboot_needed | 38175 | ··-·no_reboot_needed |
| 38176 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 38176 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 38177 | ··file: | 38177 | ··file: |
| 38178 | ····path:·/boot/grub2/grub.cfg | 38178 | ····path:·/boot/grub2/grub.cfg |
| 38179 | ····owner:·'0' | 38179 | ····owner:·'0' |
| 38180 | ··when: | 38180 | ··when: |
| 38181 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38182 | ··-·'"grub2"·in·ansible_facts.packages' | 38181 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38182 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38183 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38183 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38184 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 38184 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 38185 | ··tags: | 38185 | ··tags: |
| 38186 | ··-·CCE-85848-0 | 38186 | ··-·CCE-85848-0 |
| 38187 | ··-·CJIS-5.5.2.2 | 38187 | ··-·CJIS-5.5.2.2 |
| 38188 | ··-·NIST-800-171-3.4.5 | 38188 | ··-·NIST-800-171-3.4.5 |
| 38189 | ··-·NIST-800-53-AC-6(1) | 38189 | ··-·NIST-800-53-AC-6(1) |
| Offset 38197, 15 lines modified | Offset 38197, 15 lines modified | ||
| 38197 | ··-·medium_severity | 38197 | ··-·medium_severity |
| 38198 | ··-·no_reboot_needed | 38198 | ··-·no_reboot_needed |
| 38199 | Remediation_Shell_script_⇲ | 38199 | Remediation_Shell_script_⇲ |
| 38200 | Complexity:·low | 38200 | Complexity:·low |
| 38201 | Disruption:·low | 38201 | Disruption:·low |
| 38202 | Strategy:···configure | 38202 | Strategy:···configure |
| 38203 | #·Remediation·is·applicable·only·in·certain·platforms | 38203 | #·Remediation·is·applicable·only·in·certain·platforms |
| 38204 | if· | 38204 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]; |
| 38205 | };·then | 38205 | };·then |
| 38206 | chown·0·/boot/grub2/grub.cfg | 38206 | chown·0·/boot/grub2/grub.cfg |
| 38207 | else | 38207 | else |
| 38208 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 38208 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 38209 | fi | 38209 | fi |
| Offset 38244, 16 lines modified | Offset 38244, 16 lines modified | ||
| 38244 | ··-·no_reboot_needed | 38244 | ··-·no_reboot_needed |
| 38245 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 38245 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 38246 | ··stat: | 38246 | ··stat: |
| 38247 | ····path:·/boot/grub2/grub.cfg | 38247 | ····path:·/boot/grub2/grub.cfg |
| 38248 | ··register:·file_exists | 38248 | ··register:·file_exists |
| 38249 | ··when: | 38249 | ··when: |
| 38250 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38251 | ··-·'"grub2"·in·ansible_facts.packages' | 38250 | ··-·'"grub2"·in·ansible_facts.packages' |
| 38251 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 38252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38252 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38253 | ··tags: | 38253 | ··tags: |
| 38254 | ··-·CCE-91426-7 | 38254 | ··-·CCE-91426-7 |
| 38255 | ··-·NIST-800-171-3.4.5 | 38255 | ··-·NIST-800-171-3.4.5 |
| 38256 | ··-·NIST-800-53-AC-6(1) | 38256 | ··-·NIST-800-53-AC-6(1) |
| 38257 | ··-·NIST-800-53-CM-6(a) | 38257 | ··-·NIST-800-53-CM-6(a) |
| 38258 | ··-·configure_strategy | 38258 | ··-·configure_strategy |
| Offset 38264, 16 lines modified | Offset 38264, 16 lines modified | ||
| 38264 | ··-·no_reboot_needed | 38264 | ··-·no_reboot_needed |
| 38265 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 38265 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 38266 | ··file: | 38266 | ··file: |
| 38267 | ····path:·/boot/grub2/grub.cfg | 38267 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 998/5207 bytes (19.17%) of diff not shown. | |||
| Offset 194045, 21 lines modified | Offset 194045, 21 lines modified | ||
| 002f5fc0:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | 002f5fc0:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | ||
| 002f5fd0:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | 002f5fd0:·7465·6e63·6520·2f62·6f6f·742f·6772·7562··tence·/boot/grub | ||
| 002f5fe0:·322f·6772·7562·2e63·6667·0a20·2073·7461··2/grub.cfg.··sta | 002f5fe0:·322f·6772·7562·2e63·6667·0a20·2073·7461··2/grub.cfg.··sta | ||
| 002f5ff0:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | 002f5ff0:·743a·0a20·2020·2070·6174·683a·202f·626f··t:.····path:·/bo | ||
| 002f6000:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | 002f6000:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf | ||
| 002f6010:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | 002f6010:·670a·2020·7265·6769·7374·6572·3a20·6669··g.··register:·fi | ||
| 002f6020:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | 002f6020:·6c65·5f65·7869·7374·730a·2020·7768·656e··le_exists.··when | ||
| 002f6030:·3a0a·2020·2d20·2722·2f62·6f6f·742f·6566··:.··-·'"/boot/ef | |||
| 002f6040:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 002f6050:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 002f6060:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 002f6070:·2920·7c20·6c69·7374·270a·2020·2d20·2722··)·|·list'.··-·'" | |||
| 002f6080:·6772·7562·3222·2069·6e20·616e·7369·626c··grub2"·in·ansibl | |||
| 002f60 | 002f6030:·3a0a·2020·2d20·2722·6772·7562·3222·2069··:.··-·'"grub2"·i | ||
| 002f6040:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 002f6050:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'" | |||
| 002f6060:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 002f6070:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 002f6080:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 002f6090:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 002f60a0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | 002f60a0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi | ||
| 002f60b0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | 002f60b0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | ||
| 002f60c0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | 002f60c0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | ||
| 002f60d0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | 002f60d0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | ||
| 002f60e0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | 002f60e0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | ||
| 002f60f0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | 002f60f0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | ||
| 002f6100:·6773·3a0a·2020·2d20·4343·452d·3835·3834··gs:.··-·CCE-8584 | 002f6100:·6773·3a0a·2020·2d20·4343·452d·3835·3834··gs:.··-·CCE-8584 | ||
| Offset 194081, 22 lines modified | Offset 194081, 22 lines modified | ||
| 002f6200:·6465·640a·0a2d·206e·616d·653a·2045·6e73··ded..-·name:·Ens | 002f6200:·6465·640a·0a2d·206e·616d·653a·2045·6e73··ded..-·name:·Ens | ||
| 002f6210:·7572·6520·6772·6f75·7020·6f77·6e65·7220··ure·group·owner· | 002f6210:·7572·6520·6772·6f75·7020·6f77·6e65·7220··ure·group·owner· | ||
| 002f6220:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 002f6220:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 002f6230:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | 002f6230:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | ||
| 002f6240:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 002f6240:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 002f6250:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 002f6250:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 002f6260:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | 002f6260:·0a20·2020·2067·726f·7570·3a20·2730·270a··.····group:·'0'. | ||
| 002f6270:·2020·7768·656e·3a0a·2020·2d20·2722· | 002f6270:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 002f6280:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 002f6290:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 002f62a0:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 002f62b0:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 002f62c0:·2020·2d20·2722·6772·7562·3222·2069·6e20····-·'"grub2"·in· | |||
| 002f62 | 002f6280:·7562·3222·2069·6e20·616e·7369·626c·655f··ub2"·in·ansible_ | ||
| 002f6290:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 002f62a0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 002f62b0:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 002f62c0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 002f62d0:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 002f62e0:· | 002f62e0:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 002f62f0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 002f62f0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| 002f6300:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | 002f6300:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | ||
| 002f6310:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | 002f6310:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | ||
| 002f6320:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | 002f6320:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | ||
| 002f6330:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | 002f6330:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | ||
| 002f6340:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | 002f6340:·5d0a·2020·2d20·6669·6c65·5f65·7869·7374··].··-·file_exist | ||
| 002f6350:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | 002f6350:·732e·7374·6174·2069·7320·6465·6669·6e65··s.stat·is·define | ||
| Offset 194147, 19 lines modified | Offset 194147, 19 lines modified | ||
| 002f6620:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | 002f6620:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 002f6630:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | 002f6630:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | ||
| 002f6640:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | 002f6640:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | ||
| 002f6650:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | 002f6650:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 002f6660:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | 002f6660:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 002f6670:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | 002f6670:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 002f6680:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | 002f6680:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 002f6690:·706c·6174·666f·726d·730a·6966·20 | 002f6690:·706c·6174·666f·726d·730a·6966·2072·706d··platforms.if·rpm | ||
| 002f66a0:·202d·2d71·7569·6574·202d·7120·6772·7562···--quiet·-q·grub | |||
| 002f66b0:·3220·2661·6d70·3b26·616d·703b·205b·2021··2·&&·[·! | |||
| 002f66 | 002f66c0:·202d·6620·2f73·7973·2f66·6972·6d77·6172···-f·/sys/firmwar | ||
| 002f66 | 002f66d0:·652f·6566·6920·5d20·2661·6d70·3b26·616d··e/efi·]·&&am | ||
| 002f66c0:·703b·2072·706d·202d·2d71·7569·6574·202d··p;·rpm·--quiet·- | |||
| 002f66d0:·7120·6772·7562·3220·2661·6d70·3b26·616d··q·grub2·&&am | |||
| 002f66e0:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | 002f66e0:·703b·207b·205b·2021·202d·6620·2f2e·646f··p;·{·[·!·-f·/.do | ||
| 002f66f0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | 002f66f0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | ||
| 002f6700:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | 002f6700:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | ||
| 002f6710:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | 002f6710:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | ||
| 002f6720:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | 002f6720:·3b20·7d3b·2074·6865·6e0a·0a63·6867·7270··;·};·then..chgrp | ||
| 002f6730:·2030·202f·626f·6f74·2f67·7275·6232·2f67···0·/boot/grub2/g | 002f6730:·2030·202f·626f·6f74·2f67·7275·6232·2f67···0·/boot/grub2/g | ||
| 002f6740:·7275·622e·6366·670a·0a65·6c73·650a·2020··rub.cfg..else.·· | 002f6740:·7275·622e·6366·670a·0a65·6c73·650a·2020··rub.cfg..else.·· | ||
| Offset 194657, 21 lines modified | Offset 194657, 21 lines modified | ||
| 002f8600:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | 002f8600:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | ||
| 002f8610:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 002f8610:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 002f8620:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | 002f8620:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | ||
| 002f8630:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 002f8630:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 002f8640:·322f·6772·7562·2e63·6667·0a20·2072·6567··2/grub.cfg.··reg | 002f8640:·322f·6772·7562·2e63·6667·0a20·2072·6567··2/grub.cfg.··reg | ||
| 002f8650:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 002f8650:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 002f8660:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 002f8660:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 002f8670:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 002f8680:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 002f8690:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 002f86a0:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 002f86b0:·7427·0a20·202d·2027·2267·7275·6232·2220··t'.··-·'"grub2"· | |||
| 002f86c0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 002f86 | 002f8670:·2267·7275·6232·2220·696e·2061·6e73·6962··"grub2"·in·ansib | ||
| 002f8680:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 002f8690:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 002f86a0:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 002f86b0:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 002f86c0:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 002f86d0:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 002f86e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 002f86e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 002f86f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 002f86f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 002f8700:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 002f8700:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 002f8710:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 002f8710:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 002f8720:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 002f8720:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 002f8730:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | 002f8730:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 002f8740:·2043·4345·2d38·3538·3438·2d30·0a20·202d···CCE-85848-0.··- | 002f8740:·2043·4345·2d38·3538·3438·2d30·0a20·202d···CCE-85848-0.··- | ||
| Offset 194692, 22 lines modified | Offset 194692, 22 lines modified | ||
| 002f8830:·5f6e·6565·6465·640a·0a2d·206e·616d·653a··_needed..-·name: | 002f8830:·5f6e·6565·6465·640a·0a2d·206e·616d·653a··_needed..-·name: | ||
| 002f8840:·2045·6e73·7572·6520·6f77·6e65·7220·3020···Ensure·owner·0· | 002f8840:·2045·6e73·7572·6520·6f77·6e65·7220·3020···Ensure·owner·0· | ||
| 002f8850:·6f6e·202f·626f·6f74·2f67·7275·6232·2f67··on·/boot/grub2/g | 002f8850:·6f6e·202f·626f·6f74·2f67·7275·6232·2f67··on·/boot/grub2/g | ||
| 002f8860:·7275·622e·6366·670a·2020·6669·6c65·3a0a··rub.cfg.··file:. | 002f8860:·7275·622e·6366·670a·2020·6669·6c65·3a0a··rub.cfg.··file:. | ||
| 002f8870:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | 002f8870:·2020·2020·7061·7468·3a20·2f62·6f6f·742f······path:·/boot/ | ||
| 002f8880:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | 002f8880:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.· | ||
| 002f8890:·2020·206f·776e·6572·3a20·2730·270a·2020·····owner:·'0'.·· | 002f8890:·2020·206f·776e·6572·3a20·2730·270a·2020·····owner:·'0'.·· | ||
| 002f88a0:·7768·656e·3a0a·2020·2d20·2722· | 002f88a0:·7768·656e·3a0a·2020·2d20·2722·6772·7562··when:.··-·'"grub | ||
| 002f88b0:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an | |||
| 002f88c0:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·|·m | |||
| 002f88d0:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo | |||
| 002f88e0:·756e·7422·2920·7c20·6c69·7374·270a·2020··unt")·|·list'.·· | |||
| 002f88f0:·2d20·2722·6772·7562·3222·2069·6e20·616e··-·'"grub2"·in·an | |||
| 002f8 | 002f88b0:·3222·2069·6e20·616e·7369·626c·655f·6661··2"·in·ansible_fa | ||
| 002f88c0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 002f88d0:·2d20·2722·2f62·6f6f·742f·6566·6922·206e··-·'"/boot/efi"·n | |||
| 002f88e0:·6f74·2069·6e20·616e·7369·626c·655f·6d6f··ot·in·ansible_mo | |||
| 002f88f0:·756e·7473·207c·206d·6170·2861·7474·7269··unts·|·map(attri | |||
| 002f8900:·6275·7465·3d22·6d6f·756e·7422·2920·7c20··bute="mount")·|· | |||
| 002f8910:·6 | 002f8910:·6c69·7374·270a·2020·2d20·616e·7369·626c··list'.··-·ansibl | ||
| 002f8920:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | 002f8920:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| Max diff block lines reached; 7357/16812 bytes (43.76%) of diff not shown. | |||
| Offset 47501, 16 lines modified | Offset 47501, 16 lines modified | ||
| 47501 | ··-·no_reboot_needed | 47501 | ··-·no_reboot_needed |
| 47502 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 47502 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 47503 | ··stat: | 47503 | ··stat: |
| 47504 | ····path:·/boot/grub2/grub.cfg | 47504 | ····path:·/boot/grub2/grub.cfg |
| 47505 | ··register:·file_exists | 47505 | ··register:·file_exists |
| 47506 | ··when: | 47506 | ··when: |
| 47507 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47508 | ··-·'"grub2"·in·ansible_facts.packages' | 47507 | ··-·'"grub2"·in·ansible_facts.packages' |
| 47508 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47509 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 47509 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 47510 | ··tags: | 47510 | ··tags: |
| 47511 | ··-·CCE-85849-8 | 47511 | ··-·CCE-85849-8 |
| 47512 | ··-·CJIS-5.5.2.2 | 47512 | ··-·CJIS-5.5.2.2 |
| 47513 | ··-·NIST-800-171-3.4.5 | 47513 | ··-·NIST-800-171-3.4.5 |
| 47514 | ··-·NIST-800-53-AC-6(1) | 47514 | ··-·NIST-800-53-AC-6(1) |
| 47515 | ··-·NIST-800-53-CM-6(a) | 47515 | ··-·NIST-800-53-CM-6(a) |
| Offset 47523, 16 lines modified | Offset 47523, 16 lines modified | ||
| 47523 | ··-·no_reboot_needed | 47523 | ··-·no_reboot_needed |
| 47524 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 47524 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 47525 | ··file: | 47525 | ··file: |
| 47526 | ····path:·/boot/grub2/grub.cfg | 47526 | ····path:·/boot/grub2/grub.cfg |
| 47527 | ····group:·'0' | 47527 | ····group:·'0' |
| 47528 | ··when: | 47528 | ··when: |
| 47529 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47530 | ··-·'"grub2"·in·ansible_facts.packages' | 47529 | ··-·'"grub2"·in·ansible_facts.packages' |
| 47530 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47531 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 47531 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 47532 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 47532 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 47533 | ··tags: | 47533 | ··tags: |
| 47534 | ··-·CCE-85849-8 | 47534 | ··-·CCE-85849-8 |
| 47535 | ··-·CJIS-5.5.2.2 | 47535 | ··-·CJIS-5.5.2.2 |
| 47536 | ··-·NIST-800-171-3.4.5 | 47536 | ··-·NIST-800-171-3.4.5 |
| 47537 | ··-·NIST-800-53-AC-6(1) | 47537 | ··-·NIST-800-53-AC-6(1) |
| Offset 47545, 15 lines modified | Offset 47545, 15 lines modified | ||
| 47545 | ··-·medium_severity | 47545 | ··-·medium_severity |
| 47546 | ··-·no_reboot_needed | 47546 | ··-·no_reboot_needed |
| 47547 | Remediation_Shell_script_⇲ | 47547 | Remediation_Shell_script_⇲ |
| 47548 | Complexity:·low | 47548 | Complexity:·low |
| 47549 | Disruption:·low | 47549 | Disruption:·low |
| 47550 | Strategy:···configure | 47550 | Strategy:···configure |
| 47551 | #·Remediation·is·applicable·only·in·certain·platforms | 47551 | #·Remediation·is·applicable·only·in·certain·platforms |
| 47552 | if· | 47552 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 47553 | then | 47553 | then |
| 47554 | chgrp·0·/boot/grub2/grub.cfg | 47554 | chgrp·0·/boot/grub2/grub.cfg |
| 47555 | else | 47555 | else |
| 47556 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 47556 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 47557 | fi | 47557 | fi |
| Offset 47593, 16 lines modified | Offset 47593, 16 lines modified | ||
| 47593 | ··-·no_reboot_needed | 47593 | ··-·no_reboot_needed |
| 47594 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 47594 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 47595 | ··stat: | 47595 | ··stat: |
| 47596 | ····path:·/boot/grub2/grub.cfg | 47596 | ····path:·/boot/grub2/grub.cfg |
| 47597 | ··register:·file_exists | 47597 | ··register:·file_exists |
| 47598 | ··when: | 47598 | ··when: |
| 47599 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47600 | ··-·'"grub2"·in·ansible_facts.packages' | 47599 | ··-·'"grub2"·in·ansible_facts.packages' |
| 47600 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47601 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 47601 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 47602 | ··tags: | 47602 | ··tags: |
| 47603 | ··-·CCE-85848-0 | 47603 | ··-·CCE-85848-0 |
| 47604 | ··-·CJIS-5.5.2.2 | 47604 | ··-·CJIS-5.5.2.2 |
| 47605 | ··-·NIST-800-171-3.4.5 | 47605 | ··-·NIST-800-171-3.4.5 |
| 47606 | ··-·NIST-800-53-AC-6(1) | 47606 | ··-·NIST-800-53-AC-6(1) |
| 47607 | ··-·NIST-800-53-CM-6(a) | 47607 | ··-·NIST-800-53-CM-6(a) |
| Offset 47615, 16 lines modified | Offset 47615, 16 lines modified | ||
| 47615 | ··-·no_reboot_needed | 47615 | ··-·no_reboot_needed |
| 47616 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 47616 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 47617 | ··file: | 47617 | ··file: |
| 47618 | ····path:·/boot/grub2/grub.cfg | 47618 | ····path:·/boot/grub2/grub.cfg |
| 47619 | ····owner:·'0' | 47619 | ····owner:·'0' |
| 47620 | ··when: | 47620 | ··when: |
| 47621 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47622 | ··-·'"grub2"·in·ansible_facts.packages' | 47621 | ··-·'"grub2"·in·ansible_facts.packages' |
| 47622 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47623 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 47623 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 47624 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 47624 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 47625 | ··tags: | 47625 | ··tags: |
| 47626 | ··-·CCE-85848-0 | 47626 | ··-·CCE-85848-0 |
| 47627 | ··-·CJIS-5.5.2.2 | 47627 | ··-·CJIS-5.5.2.2 |
| 47628 | ··-·NIST-800-171-3.4.5 | 47628 | ··-·NIST-800-171-3.4.5 |
| 47629 | ··-·NIST-800-53-AC-6(1) | 47629 | ··-·NIST-800-53-AC-6(1) |
| Offset 47637, 15 lines modified | Offset 47637, 15 lines modified | ||
| 47637 | ··-·medium_severity | 47637 | ··-·medium_severity |
| 47638 | ··-·no_reboot_needed | 47638 | ··-·no_reboot_needed |
| 47639 | Remediation_Shell_script_⇲ | 47639 | Remediation_Shell_script_⇲ |
| 47640 | Complexity:·low | 47640 | Complexity:·low |
| 47641 | Disruption:·low | 47641 | Disruption:·low |
| 47642 | Strategy:···configure | 47642 | Strategy:···configure |
| 47643 | #·Remediation·is·applicable·only·in·certain·platforms | 47643 | #·Remediation·is·applicable·only·in·certain·platforms |
| 47644 | if· | 47644 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 47645 | then | 47645 | then |
| 47646 | chown·0·/boot/grub2/grub.cfg | 47646 | chown·0·/boot/grub2/grub.cfg |
| 47647 | else | 47647 | else |
| 47648 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 47648 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 47649 | fi | 47649 | fi |
| Offset 47683, 16 lines modified | Offset 47683, 16 lines modified | ||
| 47683 | ··-·no_reboot_needed | 47683 | ··-·no_reboot_needed |
| 47684 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 47684 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 47685 | ··stat: | 47685 | ··stat: |
| 47686 | ····path:·/boot/grub2/grub.cfg | 47686 | ····path:·/boot/grub2/grub.cfg |
| 47687 | ··register:·file_exists | 47687 | ··register:·file_exists |
| 47688 | ··when: | 47688 | ··when: |
| 47689 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47690 | ··-·'"grub2"·in·ansible_facts.packages' | 47689 | ··-·'"grub2"·in·ansible_facts.packages' |
| 47690 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 47691 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 47691 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 47692 | ··tags: | 47692 | ··tags: |
| 47693 | ··-·CCE-91426-7 | 47693 | ··-·CCE-91426-7 |
| 47694 | ··-·NIST-800-171-3.4.5 | 47694 | ··-·NIST-800-171-3.4.5 |
| 47695 | ··-·NIST-800-53-AC-6(1) | 47695 | ··-·NIST-800-53-AC-6(1) |
| 47696 | ··-·NIST-800-53-CM-6(a) | 47696 | ··-·NIST-800-53-CM-6(a) |
| 47697 | ··-·configure_strategy | 47697 | ··-·configure_strategy |
| Offset 47703, 16 lines modified | Offset 47703, 16 lines modified | ||
| 47703 | ··-·no_reboot_needed | 47703 | ··-·no_reboot_needed |
| 47704 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 47704 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 47705 | ··file: | 47705 | ··file: |
| 47706 | ····path:·/boot/grub2/grub.cfg | 47706 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1020/5235 bytes (19.48%) of diff not shown. | |||
| Offset 231035, 21 lines modified | Offset 231035, 21 lines modified | ||
| 003867a0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | 003867a0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/ | ||
| 003867b0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 003867b0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 003867c0:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | 003867c0:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.···· | ||
| 003867d0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | 003867d0:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub | ||
| 003867e0:·322f·6772·7562·2e63·6667·0a20·2072·6567··2/grub.cfg.··reg | 003867e0:·322f·6772·7562·2e63·6667·0a20·2072·6567··2/grub.cfg.··reg | ||
| 003867f0:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | 003867f0:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis | ||
| 00386800:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | 00386800:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·' | ||
| 00386810:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not· | |||
| 00386820:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount | |||
| 00386830:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·|·map(attribut | |||
| 00386840:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·|·lis | |||
| 00386850:·7427·0a20·202d·2027·2267·7275·6232·2220··t'.··-·'"grub2"· | |||
| 00386860:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 003868 | 00386810:·2267·7275·6232·2220·696e·2061·6e73·6962··"grub2"·in·ansib | ||
| 00386820:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 00386830:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e | |||
| 00386840:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib | |||
| 00386850:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·|·map( | |||
| 00386860:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount | |||
| 00386870:·2229·207c·206c·6973·7427·0a20·202d·2061··")·|·list'.··-·a | |||
| 00386880:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | 00386880:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 00386890:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | 00386890:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 003868a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | 003868a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 003868b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | 003868b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 003868c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | 003868c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 003868d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | 003868d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 003868e0:·2043·4345·2d38·3538·3439·2d38·0a20·202d···CCE-85849-8.··- | 003868e0:·2043·4345·2d38·3538·3439·2d38·0a20·202d···CCE-85849-8.··- | ||
| Offset 231071, 21 lines modified | Offset 231071, 21 lines modified | ||
| 003869e0:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | 003869e0:·6e61·6d65·3a20·456e·7375·7265·2067·726f··name:·Ensure·gro | ||
| 003869f0:·7570·206f·776e·6572·2030·206f·6e20·2f62··up·owner·0·on·/b | 003869f0:·7570·206f·776e·6572·2030·206f·6e20·2f62··up·owner·0·on·/b | ||
| 00386a00:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 00386a00:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 00386a10:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | 00386a10:·6667·0a20·2066·696c·653a·0a20·2020·2070··fg.··file:.····p | ||
| 00386a20:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | 00386a20:·6174·683a·202f·626f·6f74·2f67·7275·6232··ath:·/boot/grub2 | ||
| 00386a30:·2f67·7275·622e·6366·670a·2020·2020·6772··/grub.cfg.····gr | 00386a30:·2f67·7275·622e·6366·670a·2020·2020·6772··/grub.cfg.····gr | ||
| 00386a40:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | 00386a40:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | ||
| 00386a50:·0a20·202d·2027·222f·626f·6f74·2f65·6669··.··-·'"/boot/efi | |||
| 00386a60:·2220·6e6f·7420·696e·2061·6e73·6962·6c65··"·not·in·ansible | |||
| 00386a70:·5f6d·6f75·6e74·7320·7c20·6d61·7028·6174··_mounts·|·map(at | |||
| 00386a80:·7472·6962·7574·653d·226d·6f75·6e74·2229··tribute="mount") | |||
| 00386a90:·207c·206c·6973·7427·0a20·202d·2027·2267···|·list'.··-·'"g | |||
| 00386aa0:·7275·6232·2220·696e·2061·6e73·6962·6c65··rub2"·in·ansible | |||
| 00386a | 00386a50:·0a20·202d·2027·2267·7275·6232·2220·696e··.··-·'"grub2"·in | ||
| 00386a60:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00386a70:·6163·6b61·6765·7327·0a20·202d·2027·222f··ackages'.··-·'"/ | |||
| 00386a80:·626f·6f74·2f65·6669·2220·6e6f·7420·696e··boot/efi"·not·in | |||
| 00386a90:·2061·6e73·6962·6c65·5f6d·6f75·6e74·7320···ansible_mounts· | |||
| 00386aa0:·7c20·6d61·7028·6174·7472·6962·7574·653d··|·map(attribute= | |||
| 00386ab0:·226d·6f75·6e74·2229·207c·206c·6973·7427··"mount")·|·list' | |||
| 00386ac0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | 00386ac0:·0a20·202d·2061·6e73·6962·6c65·5f76·6972··.··-·ansible_vir | ||
| 00386ad0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | 00386ad0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | ||
| 00386ae0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | 00386ae0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | ||
| 00386af0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | 00386af0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | ||
| 00386b00:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | 00386b00:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | ||
| 00386b10:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | 00386b10:·6f6e·7461·696e·6572·225d·0a20·202d·2066··ontainer"].··-·f | ||
| 00386b20:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | 00386b20:·696c·655f·6578·6973·7473·2e73·7461·7420··ile_exists.stat· | ||
| Offset 231137, 18 lines modified | Offset 231137, 18 lines modified | ||
| 00386e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | 00386e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 00386e10:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | 00386e10:·7468·3e3c·7464·3e63·6f6e·6669·6775·7265··th><td>configure | ||
| 00386e20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | 00386e20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00386e30:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | 00386e30:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 00386e40:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | 00386e40:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 00386e50:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | 00386e50:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 00386e60:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | 00386e60:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 00386e70:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 00386e80:·7420·2d71·2067·7275·6232·2026·616d·703b··t·-q·grub2·& | |||
| 00386e | 00386e90:·2661·6d70·3b20·5b20·2120·2d66·202f·7379··&·[·!·-f·/sy | ||
| 00386e | 00386ea0:·732f·6669·726d·7761·7265·2f65·6669·205d··s/firmware/efi·] | ||
| 00386e90:·2026·616d·703b·2661·6d70·3b20·7270·6d20···&&·rpm· | |||
| 00386ea0:·2d2d·7175·6965·7420·2d71·2067·7275·6232··--quiet·-q·grub2 | |||
| 00386eb0:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | 00386eb0:·2026·616d·703b·2661·6d70·3b20·7b20·5b20···&&·{·[· | ||
| 00386ec0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | 00386ec0:·2120·2d66·202f·2e64·6f63·6b65·7265·6e76··!·-f·/.dockerenv | ||
| 00386ed0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | 00386ed0:·205d·2026·616d·703b·2661·6d70·3b20·5b20···]·&&·[· | ||
| 00386ee0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | 00386ee0:·2120·2d66·202f·7275·6e2f·2e63·6f6e·7461··!·-f·/run/.conta | ||
| 00386ef0:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | 00386ef0:·696e·6572·656e·7620·5d3b·207d·3b20·7468··inerenv·];·};·th | ||
| 00386f00:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | 00386f00:·656e·0a0a·6368·6772·7020·3020·2f62·6f6f··en..chgrp·0·/boo | ||
| 00386f10:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00386f10:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| Offset 231646, 22 lines modified | Offset 231646, 22 lines modified | ||
| 00388dd0:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 00388dd0:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 00388de0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 00388de0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 00388df0:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | 00388df0:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | ||
| 00388e00:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 00388e00:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 00388e10:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 00388e10:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 00388e20:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 00388e20:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 00388e30:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 00388e30:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 00388e40:·656e·3a0a·2020·2d20·2722· | 00388e40:·656e·3a0a·2020·2d20·2722·6772·7562·3222··en:.··-·'"grub2" | ||
| 00388e50:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 00388e60:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 00388e70:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 00388e80:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 00388e90:·2722·6772·7562·3222·2069·6e20·616e·7369··'"grub2"·in·ansi | |||
| 00388e | 00388e50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 00388e60:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 00388e70:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 00388e80:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 00388e90:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 00388ea0:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 00388eb0:· | 00388eb0:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 00388ec0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 00388ec0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 00388ed0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 00388ed0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 00388ee0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 00388ee0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 00388ef0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 00388ef0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 00388f00:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 00388f00:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 00388f10:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | 00388f10:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | ||
| 00388f20:·3834·382d·300a·2020·2d20·434a·4953·2d35··848-0.··-·CJIS-5 | 00388f20:·3834·382d·300a·2020·2d20·434a·4953·2d35··848-0.··-·CJIS-5 | ||
| Offset 231682, 21 lines modified | Offset 231682, 21 lines modified | ||
| 00389010:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | 00389010:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | ||
| 00389020:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | 00389020:·206f·776e·6572·2030·206f·6e20·2f62·6f6f···owner·0·on·/boo | ||
| 00389030:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00389030:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 00389040:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | 00389040:·0a20·2066·696c·653a·0a20·2020·2070·6174··.··file:.····pat | ||
| 00389050:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | 00389050:·683a·202f·626f·6f74·2f67·7275·6232·2f67··h:·/boot/grub2/g | ||
| 00389060:·7275·622e·6366·670a·2020·2020·6f77·6e65··rub.cfg.····owne | 00389060:·7275·622e·6366·670a·2020·2020·6f77·6e65··rub.cfg.····owne | ||
| 00389070:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | 00389070:·723a·2027·3027·0a20·2077·6865·6e3a·0a20··r:·'0'.··when:.· | ||
| 00389080:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"· | |||
| 00389090:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m | |||
| 003890a0:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·|·map(attr | |||
| 003890b0:·6962·7574·653d·226d·6f75·6e74·2229·207c··ibute="mount")·| | |||
| 003890c0:·206c·6973·7427·0a20·202d·2027·2267·7275···list'.··-·'"gru | |||
| 003890d0:·6232·2220·696e·2061·6e73·6962·6c65·5f66··b2"·in·ansible_f | |||
| 003890 | 00389080:·202d·2027·2267·7275·6232·2220·696e·2061···-·'"grub2"·in·a | ||
| 00389090:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 003890a0:·6b61·6765·7327·0a20·202d·2027·222f·626f··kages'.··-·'"/bo | |||
| 003890b0:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a | |||
| 003890c0:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·|· | |||
| 003890d0:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m | |||
| 003890e0:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·|·list'.· | |||
| 003890f0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | 003890f0:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 00389100:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | 00389100:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| Max diff block lines reached; 1960/11208 bytes (17.49%) of diff not shown. | |||
| Offset 54978, 16 lines modified | Offset 54978, 16 lines modified | ||
| 54978 | ··-·no_reboot_needed | 54978 | ··-·no_reboot_needed |
| 54979 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 54979 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 54980 | ··stat: | 54980 | ··stat: |
| 54981 | ····path:·/boot/grub2/grub.cfg | 54981 | ····path:·/boot/grub2/grub.cfg |
| 54982 | ··register:·file_exists | 54982 | ··register:·file_exists |
| 54983 | ··when: | 54983 | ··when: |
| 54984 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 54985 | ··-·'"grub2"·in·ansible_facts.packages' | 54984 | ··-·'"grub2"·in·ansible_facts.packages' |
| 54985 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 54986 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 54986 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 54987 | ··tags: | 54987 | ··tags: |
| 54988 | ··-·CCE-85849-8 | 54988 | ··-·CCE-85849-8 |
| 54989 | ··-·CJIS-5.5.2.2 | 54989 | ··-·CJIS-5.5.2.2 |
| 54990 | ··-·NIST-800-171-3.4.5 | 54990 | ··-·NIST-800-171-3.4.5 |
| 54991 | ··-·NIST-800-53-AC-6(1) | 54991 | ··-·NIST-800-53-AC-6(1) |
| 54992 | ··-·NIST-800-53-CM-6(a) | 54992 | ··-·NIST-800-53-CM-6(a) |
| Offset 55000, 16 lines modified | Offset 55000, 16 lines modified | ||
| 55000 | ··-·no_reboot_needed | 55000 | ··-·no_reboot_needed |
| 55001 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 55001 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 55002 | ··file: | 55002 | ··file: |
| 55003 | ····path:·/boot/grub2/grub.cfg | 55003 | ····path:·/boot/grub2/grub.cfg |
| 55004 | ····group:·'0' | 55004 | ····group:·'0' |
| 55005 | ··when: | 55005 | ··when: |
| 55006 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 55007 | ··-·'"grub2"·in·ansible_facts.packages' | 55006 | ··-·'"grub2"·in·ansible_facts.packages' |
| 55007 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 55008 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 55008 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 55009 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 55009 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 55010 | ··tags: | 55010 | ··tags: |
| 55011 | ··-·CCE-85849-8 | 55011 | ··-·CCE-85849-8 |
| 55012 | ··-·CJIS-5.5.2.2 | 55012 | ··-·CJIS-5.5.2.2 |
| 55013 | ··-·NIST-800-171-3.4.5 | 55013 | ··-·NIST-800-171-3.4.5 |
| 55014 | ··-·NIST-800-53-AC-6(1) | 55014 | ··-·NIST-800-53-AC-6(1) |
| Offset 55022, 15 lines modified | Offset 55022, 15 lines modified | ||
| 55022 | ··-·medium_severity | 55022 | ··-·medium_severity |
| 55023 | ··-·no_reboot_needed | 55023 | ··-·no_reboot_needed |
| 55024 | Remediation_Shell_script_⇲ | 55024 | Remediation_Shell_script_⇲ |
| 55025 | Complexity:·low | 55025 | Complexity:·low |
| 55026 | Disruption:·low | 55026 | Disruption:·low |
| 55027 | Strategy:···configure | 55027 | Strategy:···configure |
| 55028 | #·Remediation·is·applicable·only·in·certain·platforms | 55028 | #·Remediation·is·applicable·only·in·certain·platforms |
| 55029 | if· | 55029 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 55030 | then | 55030 | then |
| 55031 | chgrp·0·/boot/grub2/grub.cfg | 55031 | chgrp·0·/boot/grub2/grub.cfg |
| 55032 | else | 55032 | else |
| 55033 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 55033 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 55034 | fi | 55034 | fi |
| Offset 55070, 16 lines modified | Offset 55070, 16 lines modified | ||
| 55070 | ··-·no_reboot_needed | 55070 | ··-·no_reboot_needed |
| 55071 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 55071 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 55072 | ··stat: | 55072 | ··stat: |
| 55073 | ····path:·/boot/grub2/grub.cfg | 55073 | ····path:·/boot/grub2/grub.cfg |
| 55074 | ··register:·file_exists | 55074 | ··register:·file_exists |
| 55075 | ··when: | 55075 | ··when: |
| 55076 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 55077 | ··-·'"grub2"·in·ansible_facts.packages' | 55076 | ··-·'"grub2"·in·ansible_facts.packages' |
| 55077 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 55078 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 55078 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 55079 | ··tags: | 55079 | ··tags: |
| 55080 | ··-·CCE-85848-0 | 55080 | ··-·CCE-85848-0 |
| 55081 | ··-·CJIS-5.5.2.2 | 55081 | ··-·CJIS-5.5.2.2 |
| 55082 | ··-·NIST-800-171-3.4.5 | 55082 | ··-·NIST-800-171-3.4.5 |
| 55083 | ··-·NIST-800-53-AC-6(1) | 55083 | ··-·NIST-800-53-AC-6(1) |
| 55084 | ··-·NIST-800-53-CM-6(a) | 55084 | ··-·NIST-800-53-CM-6(a) |
| Offset 55092, 16 lines modified | Offset 55092, 16 lines modified | ||
| 55092 | ··-·no_reboot_needed | 55092 | ··-·no_reboot_needed |
| 55093 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 55093 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 55094 | ··file: | 55094 | ··file: |
| 55095 | ····path:·/boot/grub2/grub.cfg | 55095 | ····path:·/boot/grub2/grub.cfg |
| 55096 | ····owner:·'0' | 55096 | ····owner:·'0' |
| 55097 | ··when: | 55097 | ··when: |
| 55098 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 55099 | ··-·'"grub2"·in·ansible_facts.packages' | 55098 | ··-·'"grub2"·in·ansible_facts.packages' |
| 55099 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 55100 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 55100 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 55101 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 55101 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 55102 | ··tags: | 55102 | ··tags: |
| 55103 | ··-·CCE-85848-0 | 55103 | ··-·CCE-85848-0 |
| 55104 | ··-·CJIS-5.5.2.2 | 55104 | ··-·CJIS-5.5.2.2 |
| 55105 | ··-·NIST-800-171-3.4.5 | 55105 | ··-·NIST-800-171-3.4.5 |
| 55106 | ··-·NIST-800-53-AC-6(1) | 55106 | ··-·NIST-800-53-AC-6(1) |
| Offset 55114, 15 lines modified | Offset 55114, 15 lines modified | ||
| 55114 | ··-·medium_severity | 55114 | ··-·medium_severity |
| 55115 | ··-·no_reboot_needed | 55115 | ··-·no_reboot_needed |
| 55116 | Remediation_Shell_script_⇲ | 55116 | Remediation_Shell_script_⇲ |
| 55117 | Complexity:·low | 55117 | Complexity:·low |
| 55118 | Disruption:·low | 55118 | Disruption:·low |
| 55119 | Strategy:···configure | 55119 | Strategy:···configure |
| 55120 | #·Remediation·is·applicable·only·in·certain·platforms | 55120 | #·Remediation·is·applicable·only·in·certain·platforms |
| 55121 | if· | 55121 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 55122 | then | 55122 | then |
| 55123 | chown·0·/boot/grub2/grub.cfg | 55123 | chown·0·/boot/grub2/grub.cfg |
| 55124 | else | 55124 | else |
| 55125 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 55125 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 55126 | fi | 55126 | fi |
| Offset 217990, 22 lines modified | Offset 217990, 22 lines modified | ||
| 00353850:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | 00353850:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex | ||
| 00353860:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | 00353860:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr | ||
| 00353870:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | 00353870:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s | ||
| 00353880:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | 00353880:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/ | ||
| 00353890:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | 00353890:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub. | ||
| 003538a0:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | 003538a0:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:· | ||
| 003538b0:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | 003538b0:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh | ||
| 003538c0:·656e·3a0a·2020·2d20·2722· | 003538c0:·656e·3a0a·2020·2d20·2722·6772·7562·3222··en:.··-·'"grub2" | ||
| 003538d0:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi | |||
| 003538e0:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·|·map | |||
| 003538f0:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun | |||
| 00353900:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·|·list'.··-· | |||
| 00353910:·2722·6772·7562·3222·2069·6e20·616e·7369··'"grub2"·in·ansi | |||
| 00353 | 003538d0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | ||
| 003538e0:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-· | |||
| 003538f0:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not | |||
| 00353900:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun | |||
| 00353910:·7473·207c·206d·6170·2861·7474·7269·6275··ts·|·map(attribu | |||
| 00353920:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·|·li | |||
| 00353930:· | 00353930:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_ | ||
| 00353940:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | 00353940:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 00353950:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | 00353950:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 00353960:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | 00353960:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 00353970:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | 00353970:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 00353980:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | 00353980:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 00353990:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | 00353990:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | ||
| 003539a0:·3834·392d·380a·2020·2d20·434a·4953·2d35··849-8.··-·CJIS-5 | 003539a0:·3834·392d·380a·2020·2d20·434a·4953·2d35··849-8.··-·CJIS-5 | ||
| Offset 218027, 21 lines modified | Offset 218027, 21 lines modified | ||
| 00353aa0:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | 00353aa0:·6e73·7572·6520·6772·6f75·7020·6f77·6e65··nsure·group·owne | ||
| 00353ab0:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | 00353ab0:·7220·3020·6f6e·202f·626f·6f74·2f67·7275··r·0·on·/boot/gru | ||
| 00353ac0:·6232·2f67·7275·622e·6366·670a·2020·6669··b2/grub.cfg.··fi | 00353ac0:·6232·2f67·7275·622e·6366·670a·2020·6669··b2/grub.cfg.··fi | ||
| 00353ad0:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | 00353ad0:·6c65·3a0a·2020·2020·7061·7468·3a20·2f62··le:.····path:·/b | ||
| 00353ae0:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | 00353ae0:·6f6f·742f·6772·7562·322f·6772·7562·2e63··oot/grub2/grub.c | ||
| 00353af0:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | 00353af0:·6667·0a20·2020·2067·726f·7570·3a20·2730··fg.····group:·'0 | ||
| 00353b00:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | 00353b00:·270a·2020·7768·656e·3a0a·2020·2d20·2722··'.··when:.··-·'" | ||
| 00353b10:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i | |||
| 00353b20:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts | |||
| 00353b30:·207c·206d·6170·2861·7474·7269·6275·7465···|·map(attribute | |||
| 00353b40:·3d22·6d6f·756e·7422·2920·7c20·6c69·7374··="mount")·|·list | |||
| 00353b50:·270a·2020·2d20·2722·6772·7562·3222·2069··'.··-·'"grub2"·i | |||
| 00353b60:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 00353b | 00353b10:·6772·7562·3222·2069·6e20·616e·7369·626c··grub2"·in·ansibl | ||
| 00353b20:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00353b30:·270a·2020·2d20·2722·2f62·6f6f·742f·6566··'.··-·'"/boot/ef | |||
| 00353b40:·6922·206e·6f74·2069·6e20·616e·7369·626c··i"·not·in·ansibl | |||
| 00353b50:·655f·6d6f·756e·7473·207c·206d·6170·2861··e_mounts·|·map(a | |||
| 00353b60:·7474·7269·6275·7465·3d22·6d6f·756e·7422··ttribute="mount" | |||
| 00353b70:·2920·7c20·6c69·7374·270a·2020·2d20·616e··)·|·list'.··-·an | |||
| 00353b80:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | 00353b80:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 00353b90:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | 00353b90:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 00353ba0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | 00353ba0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 00353bb0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | 00353bb0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 00353bc0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | 00353bc0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 00353bd0:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | 00353bd0:·7222·5d0a·2020·2d20·6669·6c65·5f65·7869··r"].··-·file_exi | ||
| 00353be0:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | 00353be0:·7374·732e·7374·6174·2069·7320·6465·6669··sts.stat·is·defi | ||
| Offset 218092, 19 lines modified | Offset 218092, 19 lines modified | ||
| 00353eb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | 00353eb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 00353ec0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | 00353ec0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 00353ed0:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | 00353ed0:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | ||
| 00353ee0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | 00353ee0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 00353ef0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | 00353ef0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 00353f00:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | 00353f00:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 00353f10:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | 00353f10:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 00353f20:·6e20·706c·6174·666f·726d·730a·6966·20 | 00353f20:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | ||
| 00353f30:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr | |||
| 00353f40:·7562·3220·2661·6d70·3b26·616d·703b·205b··ub2·&&·[ | |||
| 00353f | 00353f50:·2021·202d·6620·2f73·7973·2f66·6972·6d77···!·-f·/sys/firmw | ||
| 00353f | 00353f60:·6172·652f·6566·6920·5d20·2661·6d70·3b26··are/efi·]·&& | ||
| 00353f50:·616d·703b·2072·706d·202d·2d71·7569·6574··amp;·rpm·--quiet | |||
| 00353f60:·202d·7120·6772·7562·3220·2661·6d70·3b26···-q·grub2·&& | |||
| 00353f70:·616d·703b·207b·205b·2021·202d·6620·2f2e··amp;·{·[·!·-f·/. | 00353f70:·616d·703b·207b·205b·2021·202d·6620·2f2e··amp;·{·[·!·-f·/. | ||
| 00353f80:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | 00353f80:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | ||
| 00353f90:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | 00353f90:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | ||
| 00353fa0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | 00353fa0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | ||
| 00353fb0:·205d·3b20·7d3b·2074·6865·6e0a·0a63·6867···];·};·then..chg | 00353fb0:·205d·3b20·7d3b·2074·6865·6e0a·0a63·6867···];·};·then..chg | ||
| 00353fc0:·7270·2030·202f·626f·6f74·2f67·7275·6232··rp·0·/boot/grub2 | 00353fc0:·7270·2030·202f·626f·6f74·2f67·7275·6232··rp·0·/boot/grub2 | ||
| 00353fd0:·2f67·7275·622e·6366·670a·0a65·6c73·650a··/grub.cfg..else. | 00353fd0:·2f67·7275·622e·6366·670a·0a65·6c73·650a··/grub.cfg..else. | ||
| Offset 218602, 21 lines modified | Offset 218602, 21 lines modified | ||
| 00355e90:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | 00355e90:·7374·2066·6f72·2065·7869·7374·656e·6365··st·for·existence | ||
| 00355ea0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | 00355ea0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru | ||
| 00355eb0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | 00355eb0:·622e·6366·670a·2020·7374·6174·3a0a·2020··b.cfg.··stat:.·· | ||
| 00355ec0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | 00355ec0:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr | ||
| 00355ed0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | 00355ed0:·7562·322f·6772·7562·2e63·6667·0a20·2072··ub2/grub.cfg.··r | ||
| 00355ee0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | 00355ee0:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | ||
| 00355ef0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | 00355ef0:·6973·7473·0a20·2077·6865·6e3a·0a20·202d··ists.··when:.··- | ||
| 00355f00:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no | |||
| 00355f10:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou | |||
| 00355f20:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·|·map(attrib | |||
| 00355f30:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·|·l | |||
| 00355f40:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2 | |||
| 00355f50:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 00355f | 00355f00:·2027·2267·7275·6232·2220·696e·2061·6e73···'"grub2"·in·ans | ||
| 00355f10:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00355f20:·6765·7327·0a20·202d·2027·222f·626f·6f74··ges'.··-·'"/boot | |||
| 00355f30:·2f65·6669·2220·6e6f·7420·696e·2061·6e73··/efi"·not·in·ans | |||
| 00355f40:·6962·6c65·5f6d·6f75·6e74·7320·7c20·6d61··ible_mounts·|·ma | |||
| 00355f50:·7028·6174·7472·6962·7574·653d·226d·6f75··p(attribute="mou | |||
| 00355f60:·6e74·2229·207c·206c·6973·7427·0a20·202d··nt")·|·list'.··- | |||
| 00355f70:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | 00355f70:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 00355f80:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | 00355f80:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 00355f90:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | 00355f90:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 00355fa0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | 00355fa0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 00355fb0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | 00355fb0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 00355fc0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | 00355fc0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 00355fd0:·202d·2043·4345·2d38·3538·3438·2d30·0a20···-·CCE-85848-0.· | 00355fd0:·202d·2043·4345·2d38·3538·3438·2d30·0a20···-·CCE-85848-0.· | ||
| Offset 218637, 22 lines modified | Offset 218637, 22 lines modified | ||
| 003560c0:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | 003560c0:·6f74·5f6e·6565·6465·640a·0a2d·206e·616d··ot_needed..-·nam | ||
| 003560d0:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | 003560d0:·653a·2045·6e73·7572·6520·6f77·6e65·7220··e:·Ensure·owner· | ||
| 003560e0:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | 003560e0:·3020·6f6e·202f·626f·6f74·2f67·7275·6232··0·on·/boot/grub2 | ||
| 003560f0:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | 003560f0:·2f67·7275·622e·6366·670a·2020·6669·6c65··/grub.cfg.··file | ||
| 00356100:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | 00356100:·3a0a·2020·2020·7061·7468·3a20·2f62·6f6f··:.····path:·/boo | ||
| 00356110:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | 00356110:·742f·6772·7562·322f·6772·7562·2e63·6667··t/grub2/grub.cfg | ||
| 00356120:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | 00356120:·0a20·2020·206f·776e·6572·3a20·2730·270a··.····owner:·'0'. | ||
| 00356130:·2020·7768·656e·3a0a·2020·2d20·2722· | 00356130:·2020·7768·656e·3a0a·2020·2d20·2722·6772····when:.··-·'"gr | ||
| 00356140:·6f6f·742f·6566·6922·206e·6f74·2069·6e20··oot/efi"·not·in· | |||
| 00356150:·616e·7369·626c·655f·6d6f·756e·7473·207c··ansible_mounts·| | |||
| 00356160:·206d·6170·2861·7474·7269·6275·7465·3d22···map(attribute=" | |||
| 00356170:·6d6f·756e·7422·2920·7c20·6c69·7374·270a··mount")·|·list'. | |||
| 00356180:·2020·2d20·2722·6772·7562·3222·2069·6e20····-·'"grub2"·in· | |||
| 003561 | 00356140:·7562·3222·2069·6e20·616e·7369·626c·655f··ub2"·in·ansible_ | ||
| 00356150:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 00356160:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi" | |||
| 00356170:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_ | |||
| 00356180:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·|·map(att | |||
| 00356190:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")· | |||
| 003561a0:· | 003561a0:·7c20·6c69·7374·270a·2020·2d20·616e·7369··|·list'.··-·ansi | ||
| 003561b0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | 003561b0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | ||
| Max diff block lines reached; 2029/11484 bytes (17.67%) of diff not shown. | |||
| Offset 52526, 16 lines modified | Offset 52526, 16 lines modified | ||
| 52526 | ··-·no_reboot_needed | 52526 | ··-·no_reboot_needed |
| 52527 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 52527 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 52528 | ··stat: | 52528 | ··stat: |
| 52529 | ····path:·/boot/grub2/grub.cfg | 52529 | ····path:·/boot/grub2/grub.cfg |
| 52530 | ··register:·file_exists | 52530 | ··register:·file_exists |
| 52531 | ··when: | 52531 | ··when: |
| 52532 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52533 | ··-·'"grub2"·in·ansible_facts.packages' | 52532 | ··-·'"grub2"·in·ansible_facts.packages' |
| 52533 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52534 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 52534 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 52535 | ··tags: | 52535 | ··tags: |
| 52536 | ··-·CCE-85849-8 | 52536 | ··-·CCE-85849-8 |
| 52537 | ··-·CJIS-5.5.2.2 | 52537 | ··-·CJIS-5.5.2.2 |
| 52538 | ··-·NIST-800-171-3.4.5 | 52538 | ··-·NIST-800-171-3.4.5 |
| 52539 | ··-·NIST-800-53-AC-6(1) | 52539 | ··-·NIST-800-53-AC-6(1) |
| 52540 | ··-·NIST-800-53-CM-6(a) | 52540 | ··-·NIST-800-53-CM-6(a) |
| Offset 52548, 16 lines modified | Offset 52548, 16 lines modified | ||
| 52548 | ··-·no_reboot_needed | 52548 | ··-·no_reboot_needed |
| 52549 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 52549 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 52550 | ··file: | 52550 | ··file: |
| 52551 | ····path:·/boot/grub2/grub.cfg | 52551 | ····path:·/boot/grub2/grub.cfg |
| 52552 | ····group:·'0' | 52552 | ····group:·'0' |
| 52553 | ··when: | 52553 | ··when: |
| 52554 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52555 | ··-·'"grub2"·in·ansible_facts.packages' | 52554 | ··-·'"grub2"·in·ansible_facts.packages' |
| 52555 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52556 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 52556 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 52557 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 52557 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 52558 | ··tags: | 52558 | ··tags: |
| 52559 | ··-·CCE-85849-8 | 52559 | ··-·CCE-85849-8 |
| 52560 | ··-·CJIS-5.5.2.2 | 52560 | ··-·CJIS-5.5.2.2 |
| 52561 | ··-·NIST-800-171-3.4.5 | 52561 | ··-·NIST-800-171-3.4.5 |
| 52562 | ··-·NIST-800-53-AC-6(1) | 52562 | ··-·NIST-800-53-AC-6(1) |
| Offset 52570, 15 lines modified | Offset 52570, 15 lines modified | ||
| 52570 | ··-·medium_severity | 52570 | ··-·medium_severity |
| 52571 | ··-·no_reboot_needed | 52571 | ··-·no_reboot_needed |
| 52572 | Remediation_Shell_script_⇲ | 52572 | Remediation_Shell_script_⇲ |
| 52573 | Complexity:·low | 52573 | Complexity:·low |
| 52574 | Disruption:·low | 52574 | Disruption:·low |
| 52575 | Strategy:···configure | 52575 | Strategy:···configure |
| 52576 | #·Remediation·is·applicable·only·in·certain·platforms | 52576 | #·Remediation·is·applicable·only·in·certain·platforms |
| 52577 | if· | 52577 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 52578 | then | 52578 | then |
| 52579 | chgrp·0·/boot/grub2/grub.cfg | 52579 | chgrp·0·/boot/grub2/grub.cfg |
| 52580 | else | 52580 | else |
| 52581 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 52581 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 52582 | fi | 52582 | fi |
| Offset 52618, 16 lines modified | Offset 52618, 16 lines modified | ||
| 52618 | ··-·no_reboot_needed | 52618 | ··-·no_reboot_needed |
| 52619 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 52619 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 52620 | ··stat: | 52620 | ··stat: |
| 52621 | ····path:·/boot/grub2/grub.cfg | 52621 | ····path:·/boot/grub2/grub.cfg |
| 52622 | ··register:·file_exists | 52622 | ··register:·file_exists |
| 52623 | ··when: | 52623 | ··when: |
| 52624 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52625 | ··-·'"grub2"·in·ansible_facts.packages' | 52624 | ··-·'"grub2"·in·ansible_facts.packages' |
| 52625 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52626 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 52626 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 52627 | ··tags: | 52627 | ··tags: |
| 52628 | ··-·CCE-85848-0 | 52628 | ··-·CCE-85848-0 |
| 52629 | ··-·CJIS-5.5.2.2 | 52629 | ··-·CJIS-5.5.2.2 |
| 52630 | ··-·NIST-800-171-3.4.5 | 52630 | ··-·NIST-800-171-3.4.5 |
| 52631 | ··-·NIST-800-53-AC-6(1) | 52631 | ··-·NIST-800-53-AC-6(1) |
| 52632 | ··-·NIST-800-53-CM-6(a) | 52632 | ··-·NIST-800-53-CM-6(a) |
| Offset 52640, 16 lines modified | Offset 52640, 16 lines modified | ||
| 52640 | ··-·no_reboot_needed | 52640 | ··-·no_reboot_needed |
| 52641 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 52641 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 52642 | ··file: | 52642 | ··file: |
| 52643 | ····path:·/boot/grub2/grub.cfg | 52643 | ····path:·/boot/grub2/grub.cfg |
| 52644 | ····owner:·'0' | 52644 | ····owner:·'0' |
| 52645 | ··when: | 52645 | ··when: |
| 52646 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52647 | ··-·'"grub2"·in·ansible_facts.packages' | 52646 | ··-·'"grub2"·in·ansible_facts.packages' |
| 52647 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 52648 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 52648 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 52649 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 52649 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 52650 | ··tags: | 52650 | ··tags: |
| 52651 | ··-·CCE-85848-0 | 52651 | ··-·CCE-85848-0 |
| 52652 | ··-·CJIS-5.5.2.2 | 52652 | ··-·CJIS-5.5.2.2 |
| 52653 | ··-·NIST-800-171-3.4.5 | 52653 | ··-·NIST-800-171-3.4.5 |
| 52654 | ··-·NIST-800-53-AC-6(1) | 52654 | ··-·NIST-800-53-AC-6(1) |
| Offset 52662, 15 lines modified | Offset 52662, 15 lines modified | ||
| 52662 | ··-·medium_severity | 52662 | ··-·medium_severity |
| 52663 | ··-·no_reboot_needed | 52663 | ··-·no_reboot_needed |
| 52664 | Remediation_Shell_script_⇲ | 52664 | Remediation_Shell_script_⇲ |
| 52665 | Complexity:·low | 52665 | Complexity:·low |
| 52666 | Disruption:·low | 52666 | Disruption:·low |
| 52667 | Strategy:···configure | 52667 | Strategy:···configure |
| 52668 | #·Remediation·is·applicable·only·in·certain·platforms | 52668 | #·Remediation·is·applicable·only·in·certain·platforms |
| 52669 | if· | 52669 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·}; |
| 52670 | then | 52670 | then |
| 52671 | chown·0·/boot/grub2/grub.cfg | 52671 | chown·0·/boot/grub2/grub.cfg |
| 52672 | else | 52672 | else |
| 52673 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 52673 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 52674 | fi | 52674 | fi |
| Offset 4121, 15 lines modified | Offset 4121, 15 lines modified | ||
| 4121 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4121 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4122 | ··</td> | 4122 | ··</td> |
| 4123 | ··<td·xml:lang="en-US"> | 4123 | ··<td·xml:lang="en-US"> |
| 4124 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4124 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4125 | time-based·limit,·effects·of·potential·attacks·against | 4125 | time-based·limit,·effects·of·potential·attacks·against |
| 4126 | encryption·keys·are·limited. | 4126 | encryption·keys·are·limited. |
| 4127 | ··</td> | 4127 | ··</td> |
| 4128 | ··<td>var_rekey_limit_ | 4128 | ··<td>var_rekey_limit_time=1hour<br/>var_rekey_limit_size=1G</td> |
| 4129 | </tr> | 4129 | </tr> |
| 4130 | <tr> | 4130 | <tr> |
| 4131 | ··<td></td> | 4131 | ··<td></td> |
| 4132 | ··<td>N/A</td> | 4132 | ··<td>N/A</td> |
| 4133 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4133 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4134 | ··<td·xml:lang="en-US"> | 4134 | ··<td·xml:lang="en-US"> |
| 4135 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4135 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 1898, 16 lines modified | Offset 1898, 16 lines modified | ||
| 1898 | ········SSH·client·uses··appropriate·shell·environment·variable·is·configured.·The·SSH_USE_STRONG_RNG·environment·which·by·default,·doesn't·use·high-entropy·sources.·Randomness | 1898 | ········SSH·client·uses··appropriate·shell·environment·variable·is·configured.·The·SSH_USE_STRONG_RNG·environment·which·by·default,·doesn't·use·high-entropy·sources.·Randomness |
| 1899 | ·····N/·strong·entropy···variable·determines·how·many·bytes·of·entropy·to·use.·Make·sure·that·the·file·/etc/······is·needed·to·generate·considerably·more·secure·data-encryption | 1899 | ·····N/·strong·entropy···variable·determines·how·many·bytes·of·entropy·to·use.·Make·sure·that·the·file·/etc/······is·needed·to·generate·considerably·more·secure·data-encryption |
| 1900 | ·····A··to·seed·(Bash-···profile.d/cc-ssh-strong-rng.sh·contains·line·············································keys.·Plaintext·padding,·initialization·vectors·in·encryption | 1900 | ·····A··to·seed·(Bash-···profile.d/cc-ssh-strong-rng.sh·contains·line·············································keys.·Plaintext·padding,·initialization·vectors·in·encryption |
| 1901 | ········like·shells)·····export·SSH_USE_STRONG_RNG=32·····························································algorithms,·and·high-quality·entropy·eliminates·the | 1901 | ········like·shells)·····export·SSH_USE_STRONG_RNG=32·····························································algorithms,·and·high-quality·entropy·eliminates·the |
| 1902 | ·························.························································································possibility·that·the·output·of·the·random·number·generator | 1902 | ·························.························································································possibility·that·the·output·of·the·random·number·generator |
| 1903 | ··················································································································used·by·SSH·would·be·known·to·potential·attackers. | 1903 | ··················································································································used·by·SSH·would·be·known·to·potential·attackers. |
| 1904 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated, | 1904 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated, |
| 1905 | ·····N/·Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············By·decreasing·the·limit·based·on·the·amount·of·data·and········var_rekey_limit_ | 1905 | ·····N/·Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············By·decreasing·the·limit·based·on·the·amount·of·data·and········var_rekey_limit_time=1hour |
| 1906 | ·····A··session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·limit,·effects·of·potential·attacks········var_rekey_limit_ | 1906 | ·····A··session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·limit,·effects·of·potential·attacks········var_rekey_limit_size=1G |
| 1907 | ········renegotiation····sshd_config:·············································································against·encryption·keys·are·limited. | 1907 | ········renegotiation····sshd_config:·············································································against·encryption·keys·are·limited. |
| 1908 | ·························RekeyLimit·1G·1hour | 1908 | ·························RekeyLimit·1G·1hour |
| 1909 | ··················································································································SSH·implementation·in·Oracle·Linux·8·uses·the·openssl·library, | 1909 | ··················································································································SSH·implementation·in·Oracle·Linux·8·uses·the·openssl·library, |
| 1910 | ·························To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·/etc/sysconfig/·which·doesn't·use·high-entropy·sources·by·default.·Randomness | 1910 | ·························To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·/etc/sysconfig/·which·doesn't·use·high-entropy·sources·by·default.·Randomness |
| 1911 | ·····N/·SSH·server·uses··sshd·file.·The·SSH_USE_STRONG_RNG·configuration·value·determines·how·many·bytes·of·······is·needed·to·generate·data-encryption·keys,·and·as·plaintext | 1911 | ·····N/·SSH·server·uses··sshd·file.·The·SSH_USE_STRONG_RNG·configuration·value·determines·how·many·bytes·of·······is·needed·to·generate·data-encryption·keys,·and·as·plaintext |
| 1912 | ·····A··strong·entropy···entropy·to·use,·so·make·sure·that·the·file·contains·line·································padding·and·initialization·vectors·in·encryption·algorithms, | 1912 | ·····A··strong·entropy···entropy·to·use,·so·make·sure·that·the·file·contains·line·································padding·and·initialization·vectors·in·encryption·algorithms, |
| 1913 | ········to·seed··········SSH_USE_STRONG_RNG=32····································································and·high-quality·entropy·elliminates·the·possibility·that·the | 1913 | ········to·seed··········SSH_USE_STRONG_RNG=32····································································and·high-quality·entropy·elliminates·the·possibility·that·the |
| Offset 7986, 18 lines modified | Offset 7986, 18 lines modified | ||
| 0001f310:·7573·2070·6173·7377·6f72·6473·2068·656c··us·passwords·hel | 0001f310:·7573·2070·6173·7377·6f72·6473·2068·656c··us·passwords·hel | ||
| 0001f320:·7073·2065·6e73·7572·6520·7468·6174·2061··ps·ensure·that·a | 0001f320:·7073·2065·6e73·7572·6520·7468·6174·2061··ps·ensure·that·a | ||
| 0001f330:·2063·6f6d·7072·6f6d·6973·6564·2070·6173···compromised·pas | 0001f330:·2063·6f6d·7072·6f6d·6973·6564·2070·6173···compromised·pas | ||
| 0001f340:·7377·6f72·6420·6973·206e·6f74·2072·652d··sword·is·not·re- | 0001f340:·7377·6f72·6420·6973·206e·6f74·2072·652d··sword·is·not·re- | ||
| 0001f350:·7573·6564·2062·7920·6120·7573·6572·2e0a··used·by·a·user.. | 0001f350:·7573·6564·2062·7920·6120·7573·6572·2e0a··used·by·a·user.. | ||
| 0001f360:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 0001f360:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 0001f370:·725f·7061·7373·776f·7264·5f70·616d·5f72··r_password_pam_r | 0001f370:·725f·7061·7373·776f·7264·5f70·616d·5f72··r_password_pam_r | ||
| 0001f380:·656d·656d·6265·723d·353c·6272·2f3e·7661··emember=5<br/>va | |||
| 0001f390:·725f·7061·7373·776f·7264·5f70·616d·5f72··r_password_pam_r | |||
| 0001f3 | 0001f3a0:·656d·656d·6265·725f·636f·6e74·726f·6c5f··emember_control_ | ||
| 0001f3 | 0001f3b0:·666c·6167·3d6f·6c38·3c2f·7464·3e0a·3c2f··flag=ol8</td>.</ | ||
| 0001f3a0:·5f70·6173·7377·6f72·645f·7061·6d5f·7265··_password_pam_re | |||
| 0001f3b0:·6d65·6d62·6572·3d35·3c2f·7464·3e0a·3c2f··member=5</td>.</ | |||
| 0001f3c0:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | 0001f3c0:·7472·3e0a·3c74·723e·0a20·203c·7464·3e49··tr>.<tr>.··<td>I | ||
| 0001f3d0:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | 0001f3d0:·412d·3528·6629·3c62·722f·3e49·412d·3528··A-5(f)<br/>IA-5( | ||
| 0001f3e0:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | 0001f3e0:·3129·2865·293c·2f74·643e·0a20·203c·7464··1)(e)</td>.··<td | ||
| 0001f3f0:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | 0001f3f0:·3e4e·2f41·3c2f·7464·3e0a·2020·3c74·643e··>N/A</td>.··<td> | ||
| 0001f400:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | 0001f400:·4c69·6d69·7420·5061·7373·776f·7264·2052··Limit·Password·R | ||
| 0001f410:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | 0001f410:·6575·7365·3a20·7379·7374·656d·2d61·7574··euse:·system-aut | ||
| 0001f420:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | 0001f420:·683c·2f74·643e·0a20·203c·7464·2078·6d6c··h</td>.··<td·xml | ||
| Offset 8042, 18 lines modified | Offset 8042, 18 lines modified | ||
| 0001f690:·2070·6173·7377·6f72·6473·2068·656c·7073···passwords·helps | 0001f690:·2070·6173·7377·6f72·6473·2068·656c·7073···passwords·helps | ||
| 0001f6a0:·2065·6e73·7572·6520·7468·6174·2061·2063···ensure·that·a·c | 0001f6a0:·2065·6e73·7572·6520·7468·6174·2061·2063···ensure·that·a·c | ||
| 0001f6b0:·6f6d·7072·6f6d·6973·6564·2070·6173·7377··ompromised·passw | 0001f6b0:·6f6d·7072·6f6d·6973·6564·2070·6173·7377··ompromised·passw | ||
| 0001f6c0:·6f72·6420·6973·206e·6f74·2072·652d·7573··ord·is·not·re-us | 0001f6c0:·6f72·6420·6973·206e·6f74·2072·652d·7573··ord·is·not·re-us | ||
| 0001f6d0:·6564·2062·7920·6120·7573·6572·2e0a·2020··ed·by·a·user..·· | 0001f6d0:·6564·2062·7920·6120·7573·6572·2e0a·2020··ed·by·a·user..·· | ||
| 0001f6e0:·3c2f·7464·3e0a·2020·3c74·643e·7661·725f··</td>.··<td>var_ | 0001f6e0:·3c2f·7464·3e0a·2020·3c74·643e·7661·725f··</td>.··<td>var_ | ||
| 0001f6f0:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | 0001f6f0:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | ||
| 0001f700:·656d·6265·723d·353c·6272·2f3e·7661·725f··ember=5<br/>var_ | |||
| 0001f710:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | |||
| 0001f7 | 0001f720:·656d·6265·725f·636f·6e74·726f·6c5f·666c··ember_control_fl | ||
| 0001f710:·6167·3d6f·6c38·3c62·722f·3e76·6172·5f70··ag=ol8<br/>var_p | |||
| 0001f720:·6173·7377·6f72·645f·7061·6d5f·7265·6d65··assword_pam_reme | |||
| 0001f730:·6 | 0001f730:·6167·3d6f·6c38·3c2f·7464·3e0a·3c2f·7472··ag=ol8</td>.</tr | ||
| 0001f740:·3e0a·3c74·723e·0a20·203c·7464·3e49·412d··>.<tr>.··<td>IA- | 0001f740:·3e0a·3c74·723e·0a20·203c·7464·3e49·412d··>.<tr>.··<td>IA- | ||
| 0001f750:·3528·6329·3c62·722f·3e49·412d·3528·3129··5(c)<br/>IA-5(1) | 0001f750:·3528·6329·3c62·722f·3e49·412d·3528·3129··5(c)<br/>IA-5(1) | ||
| 0001f760:·2861·293c·6272·2f3e·434d·2d36·2861·293c··(a)<br/>CM-6(a)< | 0001f760:·2861·293c·6272·2f3e·434d·2d36·2861·293c··(a)<br/>CM-6(a)< | ||
| 0001f770:·6272·2f3e·4941·2d35·2834·293c·2f74·643e··br/>IA-5(4)</td> | 0001f770:·6272·2f3e·4941·2d35·2834·293c·2f74·643e··br/>IA-5(4)</td> | ||
| 0001f780:·0a20·203c·7464·3e4e·2f41·3c2f·7464·3e0a··.··<td>N/A</td>. | 0001f780:·0a20·203c·7464·3e4e·2f41·3c2f·7464·3e0a··.··<td>N/A</td>. | ||
| 0001f790:·2020·3c74·643e·456e·7375·7265·2050·414d····<td>Ensure·PAM | 0001f790:·2020·3c74·643e·456e·7375·7265·2050·414d····<td>Ensure·PAM | ||
| 0001f7a0:·2045·6e66·6f72·6365·7320·5061·7373·776f···Enforces·Passwo | 0001f7a0:·2045·6e66·6f72·6365·7320·5061·7373·776f···Enforces·Passwo |
| Offset 1510, 26 lines modified | Offset 1510, 26 lines modified | ||
| 1510 | ·································pwquality.conf·to·equal·1·to·require·use·of·a·special·is·compromised.·Requiring·a·minimum·number·of·special·characters·makes | 1510 | ·································pwquality.conf·to·equal·1·to·require·use·of·a·special·is·compromised.·Requiring·a·minimum·number·of·special·characters·makes |
| 1511 | ·································character·in·passwords.·······························password·guessing·attacks·more·difficult·by·ensuring·a·larger·search | 1511 | ·································character·in·passwords.·······························password·guessing·attacks·more·difficult·by·ensuring·a·larger·search |
| 1512 | ·······················································································space. | 1512 | ·······················································································space. |
| 1513 | ·································Do·not·allow·users·to·reuse·recent·passwords.·This | 1513 | ·································Do·not·allow·users·to·reuse·recent·passwords.·This |
| 1514 | ·································can·be·accomplished·by·using·the·remember·option·for | 1514 | ·································can·be·accomplished·by·using·the·remember·option·for |
| 1515 | ·································the·pam_pwhistory·PAM·module. | 1515 | ·································the·pam_pwhistory·PAM·module. |
| 1516 | IA-5(f) | 1516 | IA-5(f) |
| 1517 | IA-5(1)·N/·Limit·Password·Reuse:·In·the·file·/etc/pam.d/password-auth,·make·sure·the···Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember | 1517 | IA-5(1)·N/·Limit·Password·Reuse:·In·the·file·/etc/pam.d/password-auth,·make·sure·the···Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember=5 |
| 1518 | (e)·····A··password-auth·········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember= | 1518 | (e)·····A··password-auth·········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember_control_flag=ol8 |
| 1519 | ·································equal·to·or·greater·than·5.·For·example: | 1519 | ·································equal·to·or·greater·than·5.·For·example: |
| 1520 | ·································password·control_flag·pam_pwhistory.so | 1520 | ·································password·control_flag·pam_pwhistory.so |
| 1521 | ·································...existing_options...·remember=5·use_authtok | 1521 | ·································...existing_options...·remember=5·use_authtok |
| 1522 | ·································control_flag·should·be·one·of·the·next·values:·ol8 | 1522 | ·································control_flag·should·be·one·of·the·next·values:·ol8 |
| 1523 | ·································Do·not·allow·users·to·reuse·recent·passwords.·This | 1523 | ·································Do·not·allow·users·to·reuse·recent·passwords.·This |
| 1524 | ·································can·be·accomplished·by·using·the·remember·option·for | 1524 | ·································can·be·accomplished·by·using·the·remember·option·for |
| 1525 | ·································the·pam_pwhistory·PAM·module. | 1525 | ·································the·pam_pwhistory·PAM·module. |
| 1526 | IA-5(f) | 1526 | IA-5(f) |
| 1527 | IA-5(1)·N/·Limit·Password·Reuse:·In·the·file·/etc/pam.d/system-auth,·make·sure·the·····Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember | 1527 | IA-5(1)·N/·Limit·Password·Reuse:·In·the·file·/etc/pam.d/system-auth,·make·sure·the·····Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember=5 |
| 1528 | (e)·····A··system-auth···········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember= | 1528 | (e)·····A··system-auth···········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember_control_flag=ol8 |
| 1529 | ·································equal·to·or·greater·than·5·For·example: | 1529 | ·································equal·to·or·greater·than·5·For·example: |
| 1530 | ·································password·control_flag·pam_pwhistory.so | 1530 | ·································password·control_flag·pam_pwhistory.so |
| 1531 | ·································...existing_options...·remember=5·use_authtok | 1531 | ·································...existing_options...·remember=5·use_authtok |
| 1532 | ·································control_flag·should·be·one·of·the·next·values:·ol8 | 1532 | ·································control_flag·should·be·one·of·the·next·values:·ol8 |
| 1533 | ·································The·pam_pwquality·module's·ucredit=·parameter·········Use·of·a·complex·password·helps·to·increase·the·time·and·resources | 1533 | ·································The·pam_pwquality·module's·ucredit=·parameter·········Use·of·a·complex·password·helps·to·increase·the·time·and·resources |
| 1534 | ·································controls·requirements·for·usage·of·uppercase·letters··required·to·compromise·the·password.·Password·complexity,·or·strength,·is | 1534 | ·································controls·requirements·for·usage·of·uppercase·letters··required·to·compromise·the·password.·Password·complexity,·or·strength,·is |
| 1535 | IA-5(c)····Ensure·PAM·Enforces···in·a·password.·When·set·to·a·negative·number,·any·····a·measure·of·the·effectiveness·of·a·password·in·resisting·attempts·at | 1535 | IA-5(c)····Ensure·PAM·Enforces···in·a·password.·When·set·to·a·negative·number,·any·····a·measure·of·the·effectiveness·of·a·password·in·resisting·attempts·at |
| Offset 7676, 19 lines modified | Offset 7676, 19 lines modified | ||
| 0001dfb0:·2070·7265·7669·6f75·7320·7061·7373·776f···previous·passwo | 0001dfb0:·2070·7265·7669·6f75·7320·7061·7373·776f···previous·passwo | ||
| 0001dfc0:·7264·7320·6865·6c70·7320·656e·7375·7265··rds·helps·ensure | 0001dfc0:·7264·7320·6865·6c70·7320·656e·7375·7265··rds·helps·ensure | ||
| 0001dfd0:·2074·6861·7420·6120·636f·6d70·726f·6d69···that·a·compromi | 0001dfd0:·2074·6861·7420·6120·636f·6d70·726f·6d69···that·a·compromi | ||
| 0001dfe0:·7365·6420·7061·7373·776f·7264·2069·7320··sed·password·is· | 0001dfe0:·7365·6420·7061·7373·776f·7264·2069·7320··sed·password·is· | ||
| 0001dff0:·6e6f·7420·7265·2d75·7365·6420·6279·2061··not·re-used·by·a | 0001dff0:·6e6f·7420·7265·2d75·7365·6420·6279·2061··not·re-used·by·a | ||
| 0001e000:·2075·7365·722e·0a20·203c·2f74·643e·0a20···user..··</td>.· | 0001e000:·2075·7365·722e·0a20·203c·2f74·643e·0a20···user..··</td>.· | ||
| 0001e010:·203c·7464·3e76·6172·5f70·6173·7377·6f72···<td>var_passwor | 0001e010:·203c·7464·3e76·6172·5f70·6173·7377·6f72···<td>var_passwor | ||
| 0001e020:·645f·7061·6d5f·7265·6d65·6d62·6572·3d35··d_pam_remember=5 | |||
| 0001e030:·3c62·722f·3e76·6172·5f70·6173·7377·6f72··<br/>var_passwor | |||
| 0001e0 | 0001e020:·645f·7061·6d5f·7265·6d65·6d62·6572·5f63··d_pam_remember_c | ||
| 0001e0 | 0001e030:·6f6e·7472·6f6c·5f66·6c61·673d·7265·7175··ontrol_flag=requ | ||
| 0001e040:·6973·6974·653c·6272·2f3e·7661·725f·7061··isite<br/>var_pa | |||
| 0001e050:·7373·776f·7264·5f70·616d·5f72·656d·656d··ssword_pam_remem | |||
| 0001e060:·6 | 0001e060:·6265·723d·353c·2f74·643e·0a3c·2f74·723e··ber=5</td>.</tr> | ||
| 0001e070:·0a3c·7472·3e0a·2020·3c74·643e·4941·2d35··.<tr>.··<td>IA-5 | 0001e070:·0a3c·7472·3e0a·2020·3c74·643e·4941·2d35··.<tr>.··<td>IA-5 | ||
| 0001e080:·2866·293c·6272·2f3e·4941·2d35·2831·2928··(f)<br/>IA-5(1)( | 0001e080:·2866·293c·6272·2f3e·4941·2d35·2831·2928··(f)<br/>IA-5(1)( | ||
| 0001e090:·6529·3c2f·7464·3e0a·2020·3c74·643e·4343··e)</td>.··<td>CC | 0001e090:·6529·3c2f·7464·3e0a·2020·3c74·643e·4343··e)</td>.··<td>CC | ||
| 0001e0a0:·452d·3833·3437·392d·363c·2f74·643e·0a20··E-83479-6</td>.· | 0001e0a0:·452d·3833·3437·392d·363c·2f74·643e·0a20··E-83479-6</td>.· | ||
| 0001e0b0:·203c·7464·3e4c·696d·6974·2050·6173·7377···<td>Limit·Passw | 0001e0b0:·203c·7464·3e4c·696d·6974·2050·6173·7377···<td>Limit·Passw | ||
| 0001e0c0:·6f72·6420·5265·7573·653a·2073·7973·7465··ord·Reuse:·syste | 0001e0c0:·6f72·6420·5265·7573·653a·2073·7973·7465··ord·Reuse:·syste | ||
| 0001e0d0:·6d2d·6175·7468·3c2f·7464·3e0a·2020·3c74··m-auth</td>.··<t | 0001e0d0:·6d2d·6175·7468·3c2f·7464·3e0a·2020·3c74··m-auth</td>.··<t | ||
| Offset 7734, 18 lines modified | Offset 7734, 18 lines modified | ||
| 0001e350:·776f·7264·7320·6865·6c70·7320·656e·7375··words·helps·ensu | 0001e350:·776f·7264·7320·6865·6c70·7320·656e·7375··words·helps·ensu | ||
| 0001e360:·7265·2074·6861·7420·6120·636f·6d70·726f··re·that·a·compro | 0001e360:·7265·2074·6861·7420·6120·636f·6d70·726f··re·that·a·compro | ||
| 0001e370:·6d69·7365·6420·7061·7373·776f·7264·2069··mised·password·i | 0001e370:·6d69·7365·6420·7061·7373·776f·7264·2069··mised·password·i | ||
| 0001e380:·7320·6e6f·7420·7265·2d75·7365·6420·6279··s·not·re-used·by | 0001e380:·7320·6e6f·7420·7265·2d75·7365·6420·6279··s·not·re-used·by | ||
| 0001e390:·2061·2075·7365·722e·0a20·203c·2f74·643e···a·user..··</td> | 0001e390:·2061·2075·7365·722e·0a20·203c·2f74·643e···a·user..··</td> | ||
| 0001e3a0:·0a20·203c·7464·3e76·6172·5f70·6173·7377··.··<td>var_passw | 0001e3a0:·0a20·203c·7464·3e76·6172·5f70·6173·7377··.··<td>var_passw | ||
| 0001e3b0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | 0001e3b0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | ||
| 0001e3c0:·3d35·3c62·722f·3e76·6172·5f70·6173·7377··=5<br/>var_passw | |||
| 0001e3d0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | |||
| 0001e3 | 0001e3c0:·5f63·6f6e·7472·6f6c·5f66·6c61·673d·7265··_control_flag=re | ||
| 0001e3 | 0001e3d0:·7175·6973·6974·653c·6272·2f3e·7661·725f··quisite<br/>var_ | ||
| 0001e3e0:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | |||
| 0001e3f0:·656d·6265·723d·353c·2f74·643e·0a3c·2f74··ember=5</td>.</t | |||
| 0001e400:·723e·0a3c·7472·3e0a·2020·3c74·643e·4941··r>.<tr>.··<td>IA | 0001e400:·723e·0a3c·7472·3e0a·2020·3c74·643e·4941··r>.<tr>.··<td>IA | ||
| 0001e410:·2d35·2863·293c·6272·2f3e·4941·2d35·2831··-5(c)<br/>IA-5(1 | 0001e410:·2d35·2863·293c·6272·2f3e·4941·2d35·2831··-5(c)<br/>IA-5(1 | ||
| 0001e420:·2928·6129·3c62·722f·3e43·4d2d·3628·6129··)(a)<br/>CM-6(a) | 0001e420:·2928·6129·3c62·722f·3e43·4d2d·3628·6129··)(a)<br/>CM-6(a) | ||
| 0001e430:·3c62·722f·3e49·412d·3528·3429·3c2f·7464··<br/>IA-5(4)</td | 0001e430:·3c62·722f·3e49·412d·3528·3429·3c2f·7464··<br/>IA-5(4)</td | ||
| 0001e440:·3e0a·2020·3c74·643e·4343·452d·3237·3230··>.··<td>CCE-2720 | 0001e440:·3e0a·2020·3c74·643e·4343·452d·3237·3230··>.··<td>CCE-2720 | ||
| 0001e450:·302d·353c·2f74·643e·0a20·203c·7464·3e45··0-5</td>.··<td>E | 0001e450:·302d·353c·2f74·643e·0a20·203c·7464·3e45··0-5</td>.··<td>E | ||
| 0001e460:·6e73·7572·6520·5041·4d20·456e·666f·7263··nsure·PAM·Enforc | 0001e460:·6e73·7572·6520·5041·4d20·456e·666f·7263··nsure·PAM·Enforc | ||
| Offset 8578, 18 lines modified | Offset 8578, 18 lines modified | ||
| 00021810:·7573·6520·7468·6520·696e·666f·726d·6174··use·the·informat | 00021810:·7573·6520·7468·6520·696e·666f·726d·6174··use·the·informat | ||
| 00021820:·696f·6e20·746f·2070·6f74·656e·7469·616c··ion·to·potential | 00021820:·696f·6e20·746f·2070·6f74·656e·7469·616c··ion·to·potential | ||
| 00021830:·6c79·2063·6f6d·7072·6f6d·6973·6520·7468··ly·compromise·th | 00021830:·6c79·2063·6f6d·7072·6f6d·6973·6520·7468··ly·compromise·th | ||
| 00021840:·6520·696e·7465·6772·6974·7920·6f66·2074··e·integrity·of·t | 00021840:·6520·696e·7465·6772·6974·7920·6f66·2074··e·integrity·of·t | ||
| 00021850:·6865·2073·7973·7465·6d20·616e·640a·6e65··he·system·and.ne | 00021850:·6865·2073·7973·7465·6d20·616e·640a·6e65··he·system·and.ne | ||
| 00021860:·7477·6f72·6b28·7329·2e0a·2020·3c2f·7464··twork(s)..··</td | 00021860:·7477·6f72·6b28·7329·2e0a·2020·3c2f·7464··twork(s)..··</td | ||
| 00021870:·3e0a·2020·3c74·643e·7661·725f·736e·6d70··>.··<td>var_snmp | 00021870:·3e0a·2020·3c74·643e·7661·725f·736e·6d70··>.··<td>var_snmp | ||
| 00021880:·645f·72 | 00021880:·645f·7277·5f73·7472·696e·673d·6368·616e··d_rw_string=chan | ||
| 00021890:·6765·6d65·72 | 00021890:·6765·6d65·7277·3c62·722f·3e76·6172·5f73··gemerw<br/>var_s | ||
| 000218a0:·6e6d·7064·5f72· | 000218a0:·6e6d·7064·5f72·6f5f·7374·7269·6e67·3d63··nmpd_ro_string=c | ||
| 000218b0:·6861·6e67·656d·6572· | 000218b0:·6861·6e67·656d·6572·6f3c·2f74·643e·0a3c··hangemero</td>.< | ||
| 000218c0:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | 000218c0:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | ||
| 000218d0:·434d·2d35·2831·293c·6272·2f3e·4155·2d37··CM-5(1)<br/>AU-7 | 000218d0:·434d·2d35·2831·293c·6272·2f3e·4155·2d37··CM-5(1)<br/>AU-7 | ||
| 000218e0:·2861·293c·6272·2f3e·4155·2d37·2862·293c··(a)<br/>AU-7(b)< | 000218e0:·2861·293c·6272·2f3e·4155·2d37·2862·293c··(a)<br/>AU-7(b)< | ||
| 000218f0:·6272·2f3e·4155·2d38·2862·293c·6272·2f3e··br/>AU-8(b)<br/> | 000218f0:·6272·2f3e·4155·2d38·2862·293c·6272·2f3e··br/>AU-8(b)<br/> | ||
| 00021900:·4155·2d31·3228·3329·3c62·722f·3e41·432d··AU-12(3)<br/>AC- | 00021900:·4155·2d31·3228·3329·3c62·722f·3e41·432d··AU-12(3)<br/>AC- | ||
| 00021910:·3628·3929·3c2f·7464·3e0a·2020·3c74·643e··6(9)</td>.··<td> | 00021910:·3628·3929·3c2f·7464·3e0a·2020·3c74·643e··6(9)</td>.··<td> | ||
| 00021920:·4343·452d·3833·3535·352d·333c·2f74·643e··CCE-83555-3</td> | 00021920:·4343·452d·3833·3535·352d·333c·2f74·643e··CCE-83555-3</td> |
| Offset 1669, 30 lines modified | Offset 1669, 30 lines modified | ||
| 1669 | ··················································································search·space. | 1669 | ··················································································search·space. |
| 1670 | ······································Do·not·allow·users·to·reuse·recent | 1670 | ······································Do·not·allow·users·to·reuse·recent |
| 1671 | ······································passwords.·This·can·be·accomplished·by | 1671 | ······································passwords.·This·can·be·accomplished·by |
| 1672 | ······································using·the·remember·option·for·the | 1672 | ······································using·the·remember·option·for·the |
| 1673 | ······································pam_pwhistory·PAM·module. | 1673 | ······································pam_pwhistory·PAM·module. |
| 1674 | IA-5(f)·CCE-··························In·the·file·/etc/pam.d/password-auth,·make | 1674 | IA-5(f)·CCE-··························In·the·file·/etc/pam.d/password-auth,·make |
| 1675 | IA-5(1)·83476-·Limit·Password·Reuse:··sure·the·parameter·remember·is·present·and··Preventing·re-use·of·previous·passwords·helps·ensure·that·a····var_password_pam_remember= | 1675 | IA-5(1)·83476-·Limit·Password·Reuse:··sure·the·parameter·remember·is·present·and··Preventing·re-use·of·previous·passwords·helps·ensure·that·a····var_password_pam_remember_control_flag=requisite |
| 1676 | (e)·····2······password-auth··········it·has·a·value·equal·to·or·greater·than·5.··compromised·password·is·not·re-used·by·a·user.·················var_password_pam_remember | 1676 | (e)·····2······password-auth··········it·has·a·value·equal·to·or·greater·than·5.··compromised·password·is·not·re-used·by·a·user.·················var_password_pam_remember=5 |
| 1677 | ······································For·example: | 1677 | ······································For·example: |
| 1678 | ······································password·control_flag·pam_pwhistory.so | 1678 | ······································password·control_flag·pam_pwhistory.so |
| 1679 | ······································...existing_options...·remember=5 | 1679 | ······································...existing_options...·remember=5 |
| 1680 | ······································use_authtok | 1680 | ······································use_authtok |
| 1681 | ······································control_flag·should·be·one·of·the·next | 1681 | ······································control_flag·should·be·one·of·the·next |
| 1682 | ······································values:·requisite | 1682 | ······································values:·requisite |
| 1683 | ······································Do·not·allow·users·to·reuse·recent | 1683 | ······································Do·not·allow·users·to·reuse·recent |
| 1684 | ······································passwords.·This·can·be·accomplished·by | 1684 | ······································passwords.·This·can·be·accomplished·by |
| 1685 | ······································using·the·remember·option·for·the | 1685 | ······································using·the·remember·option·for·the |
| 1686 | ······································pam_pwhistory·PAM·module. | 1686 | ······································pam_pwhistory·PAM·module. |
| 1687 | IA-5(f)·CCE-··························In·the·file·/etc/pam.d/system-auth,·make | 1687 | IA-5(f)·CCE-··························In·the·file·/etc/pam.d/system-auth,·make |
| 1688 | IA-5(1)·83479-·Limit·Password·Reuse:··sure·the·parameter·remember·is·present·and··Preventing·re-use·of·previous·passwords·helps·ensure·that·a····var_password_pam_remember= | 1688 | IA-5(1)·83479-·Limit·Password·Reuse:··sure·the·parameter·remember·is·present·and··Preventing·re-use·of·previous·passwords·helps·ensure·that·a····var_password_pam_remember_control_flag=requisite |
| 1689 | (e)·····6······system-auth············it·has·a·value·equal·to·or·greater·than·5···compromised·password·is·not·re-used·by·a·user.·················var_password_pam_remember | 1689 | (e)·····6······system-auth············it·has·a·value·equal·to·or·greater·than·5···compromised·password·is·not·re-used·by·a·user.·················var_password_pam_remember=5 |
| 1690 | ······································For·example: | 1690 | ······································For·example: |
| 1691 | ······································password·control_flag·pam_pwhistory.so | 1691 | ······································password·control_flag·pam_pwhistory.so |
| 1692 | ······································...existing_options...·remember=5 | 1692 | ······································...existing_options...·remember=5 |
| 1693 | ······································use_authtok | 1693 | ······································use_authtok |
| 1694 | ······································control_flag·should·be·one·of·the·next | 1694 | ······································control_flag·should·be·one·of·the·next |
| 1695 | ······································values:·requisite | 1695 | ······································values:·requisite |
| 1696 | ······································The·pam_pwquality·module's·ucredit=·········Use·of·a·complex·password·helps·to·increase·the·time·and | 1696 | ······································The·pam_pwquality·module's·ucredit=·········Use·of·a·complex·password·helps·to·increase·the·time·and |
| Offset 1839, 16 lines modified | Offset 1839, 16 lines modified | ||
| 1839 | ······································This·will·help·ensure·when·local·users······configuration·option·ensures·the·use·of·a·strong·hashing | 1839 | ······································This·will·help·ensure·when·local·users······configuration·option·ensures·the·use·of·a·strong·hashing |
| 1840 | ······································change·their·passwords,·hashes·for·the·new··algorithm·that·makes·password·cracking·attacks·more·difficult. | 1840 | ······································change·their·passwords,·hashes·for·the·new··algorithm·that·makes·password·cracking·attacks·more·difficult. |
| 1841 | ······································passwords·will·be·generated·using·the·SHA- | 1841 | ······································passwords·will·be·generated·using·the·SHA- |
| 1842 | ······································512·algorithm.·This·is·the·default. | 1842 | ······································512·algorithm.·This·is·the·default. |
| 1843 | ······································Edit·/etc/snmp/snmpd.conf,·remove·or·change | 1843 | ······································Edit·/etc/snmp/snmpd.conf,·remove·or·change |
| 1844 | ······································the·default·community·strings·of·public·and·Whether·active·or·not,·default·simple·network·management | 1844 | ······································the·default·community·strings·of·public·and·Whether·active·or·not,·default·simple·network·management |
| 1845 | ········CCE-··························private.·This·profile·configures·new·read-··protocol·(SNMP)·community·strings·must·be·changed·to·maintain | 1845 | ········CCE-··························private.·This·profile·configures·new·read-··protocol·(SNMP)·community·strings·must·be·changed·to·maintain |
| 1846 | IA-5(e)·27386-·Ensure·Default·SNMP····only·community·string·to·changemero·and·····security.·If·the·service·is·running·with·the·default···········var_snmpd_r | 1846 | IA-5(e)·27386-·Ensure·Default·SNMP····only·community·string·to·changemero·and·····security.·If·the·service·is·running·with·the·default···········var_snmpd_rw_string=changemerw |
| 1847 | ········2······Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·then·anyone·can·gather·data·about·the·system···var_snmpd_r | 1847 | ········2······Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·then·anyone·can·gather·data·about·the·system···var_snmpd_ro_string=changemero |
| 1848 | ······································Once·the·default·community·strings·have·····and·the·network·and·use·the·information·to·potentially | 1848 | ······································Once·the·default·community·strings·have·····and·the·network·and·use·the·information·to·potentially |
| 1849 | ······································been·changed,·restart·the·SNMP·service:·····compromise·the·integrity·of·the·system·and·network(s). | 1849 | ······································been·changed,·restart·the·SNMP·service:·····compromise·the·integrity·of·the·system·and·network(s). |
| 1850 | ······································$·sudo·service·snmpd·restart | 1850 | ······································$·sudo·service·snmpd·restart |
| 1851 | ······································Verify·the·system·generates·an·audit·record | 1851 | ······································Verify·the·system·generates·an·audit·record |
| 1852 | ······································when·privileged·functions·are·executed.·If | 1852 | ······································when·privileged·functions·are·executed.·If |
| 1853 | ······································audit·is·using·the·"auditctl"·tool·to·load | 1853 | ······································audit·is·using·the·"auditctl"·tool·to·load |
| 1854 | ······································the·rules,·run·the·following·command: | 1854 | ······································the·rules,·run·the·following·command: |
| Offset 4020, 15 lines modified | Offset 4020, 15 lines modified | ||
| 4020 | <tt>RekeyLimit</tt>. | 4020 | <tt>RekeyLimit</tt>. |
| 4021 | ··</td> | 4021 | ··</td> |
| 4022 | ··<td·xml:lang="en-US"> | 4022 | ··<td·xml:lang="en-US"> |
| 4023 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4023 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4024 | time-based·limit,·effects·of·potential·attacks·against | 4024 | time-based·limit,·effects·of·potential·attacks·against |
| 4025 | encryption·keys·are·limited. | 4025 | encryption·keys·are·limited. |
| 4026 | ··</td> | 4026 | ··</td> |
| 4027 | ··<td>var_ssh_client_rekey_limit_ | 4027 | ··<td>var_ssh_client_rekey_limit_size=1G<br/>var_ssh_client_rekey_limit_time=1hour</td> |
| 4028 | </tr> | 4028 | </tr> |
| 4029 | <tr> | 4029 | <tr> |
| 4030 | ··<td></td> | 4030 | ··<td></td> |
| 4031 | ··<td>CCE-83349-1</td> | 4031 | ··<td>CCE-83349-1</td> |
| 4032 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4032 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4033 | ··<td·xml:lang="en-US"> | 4033 | ··<td·xml:lang="en-US"> |
| 4034 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4034 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 4083, 15 lines modified | Offset 4083, 15 lines modified | ||
| 4083 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4083 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4084 | ··</td> | 4084 | ··</td> |
| 4085 | ··<td·xml:lang="en-US"> | 4085 | ··<td·xml:lang="en-US"> |
| 4086 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4086 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4087 | time-based·limit,·effects·of·potential·attacks·against | 4087 | time-based·limit,·effects·of·potential·attacks·against |
| 4088 | encryption·keys·are·limited. | 4088 | encryption·keys·are·limited. |
| 4089 | ··</td> | 4089 | ··</td> |
| 4090 | ··<td>var_rekey_limit_ | 4090 | ··<td>var_rekey_limit_time=1hour<br/>var_rekey_limit_size=1G</td> |
| 4091 | </tr> | 4091 | </tr> |
| 4092 | <tr> | 4092 | <tr> |
| 4093 | ··<td></td> | 4093 | ··<td></td> |
| 4094 | ··<td>CCE-82462-3</td> | 4094 | ··<td>CCE-82462-3</td> |
| 4095 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4095 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4096 | ··<td·xml:lang="en-US"> | 4096 | ··<td·xml:lang="en-US"> |
| 4097 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4097 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 1864, 16 lines modified | Offset 1864, 16 lines modified | ||
| 1864 | ·····CCE-···Ensure·/var/tmp··The·/var/tmp·directory·is·a·world-writable·directory·used·for·temporary·file·storage.····The·/var/tmp·partition·is·used·as·temporary·storage·by·many | 1864 | ·····CCE-···Ensure·/var/tmp··The·/var/tmp·directory·is·a·world-writable·directory·used·for·temporary·file·storage.····The·/var/tmp·partition·is·used·as·temporary·storage·by·many |
| 1865 | ·····82730-·Located·On·······Ensure·it·has·its·own·partition·or·logical·volume·at·installation·time,·or·migrate·it····programs.·Placing·/var/tmp·in·its·own·partition·enables·the | 1865 | ·····82730-·Located·On·······Ensure·it·has·its·own·partition·or·logical·volume·at·installation·time,·or·migrate·it····programs.·Placing·/var/tmp·in·its·own·partition·enables·the |
| 1866 | ·····3······Separate·········using·LVM.···············································································setting·of·more·restrictive·mount·options,·which·can·help | 1866 | ·····3······Separate·········using·LVM.···············································································setting·of·more·restrictive·mount·options,·which·can·help |
| 1867 | ············Partition·································································································protect·programs·which·use·it. | 1867 | ············Partition·································································································protect·programs·which·use·it. |
| 1868 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in | 1868 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in |
| 1869 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the | 1869 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the |
| 1870 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····By·decreasing·the·limit·based·on·the·amount·of·data·and | 1870 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····By·decreasing·the·limit·based·on·the·amount·of·data·and |
| 1871 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·limit,·effects·of·potential·attacks········var_ssh_client_rekey_limit_ | 1871 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·limit,·effects·of·potential·attacks········var_ssh_client_rekey_limit_size=1G |
| 1872 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·against·encryption·keys·are·limited.···························var_ssh_client_rekey_limit_ | 1872 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·against·encryption·keys·are·limited.···························var_ssh_client_rekey_limit_time=1hour |
| 1873 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order | 1873 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order |
| 1874 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf | 1874 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf |
| 1875 | ·····························containing·definition·of·RekeyLimit. | 1875 | ·····························containing·definition·of·RekeyLimit. |
| 1876 | ·····························To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure·that·the·······Some·SSH·implementations·use·the·openssl·library·for·entropy, | 1876 | ·····························To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure·that·the·······Some·SSH·implementations·use·the·openssl·library·for·entropy, |
| 1877 | ············SSH·client·uses··appropriate·shell·environment·variable·is·configured.·The·SSH_USE_STRONG_RNG·environment·which·by·default,·doesn't·use·high-entropy·sources.·Randomness | 1877 | ············SSH·client·uses··appropriate·shell·environment·variable·is·configured.·The·SSH_USE_STRONG_RNG·environment·which·by·default,·doesn't·use·high-entropy·sources.·Randomness |
| 1878 | ·····CCE-···strong·entropy···variable·determines·how·many·bytes·of·entropy·to·use.·Make·sure·that·the·file·/etc/······is·needed·to·generate·considerably·more·secure·data-encryption | 1878 | ·····CCE-···strong·entropy···variable·determines·how·many·bytes·of·entropy·to·use.·Make·sure·that·the·file·/etc/······is·needed·to·generate·considerably·more·secure·data-encryption |
| 1879 | ·····83349-·to·seed·(for·CSH·profile.d/cc-ssh-strong-rng.csh·contains·line············································keys.·Plaintext·padding,·initialization·vectors·in·encryption | 1879 | ·····83349-·to·seed·(for·CSH·profile.d/cc-ssh-strong-rng.csh·contains·line············································keys.·Plaintext·padding,·initialization·vectors·in·encryption |
| Offset 1884, 16 lines modified | Offset 1884, 16 lines modified | ||
| 1884 | ············SSH·client·uses··appropriate·shell·environment·variable·is·configured.·The·SSH_USE_STRONG_RNG·environment·which·by·default,·doesn't·use·high-entropy·sources.·Randomness | 1884 | ············SSH·client·uses··appropriate·shell·environment·variable·is·configured.·The·SSH_USE_STRONG_RNG·environment·which·by·default,·doesn't·use·high-entropy·sources.·Randomness |
| 1885 | ·····CCE-···strong·entropy···variable·determines·how·many·bytes·of·entropy·to·use.·Make·sure·that·the·file·/etc/······is·needed·to·generate·considerably·more·secure·data-encryption | 1885 | ·····CCE-···strong·entropy···variable·determines·how·many·bytes·of·entropy·to·use.·Make·sure·that·the·file·/etc/······is·needed·to·generate·considerably·more·secure·data-encryption |
| 1886 | ·····83346-·to·seed·(Bash-···profile.d/cc-ssh-strong-rng.sh·contains·line·············································keys.·Plaintext·padding,·initialization·vectors·in·encryption | 1886 | ·····83346-·to·seed·(Bash-···profile.d/cc-ssh-strong-rng.sh·contains·line·············································keys.·Plaintext·padding,·initialization·vectors·in·encryption |
| 1887 | ·····7······like·shells)·····export·SSH_USE_STRONG_RNG=32·····························································algorithms,·and·high-quality·entropy·eliminates·the | 1887 | ·····7······like·shells)·····export·SSH_USE_STRONG_RNG=32·····························································algorithms,·and·high-quality·entropy·eliminates·the |
| 1888 | ·····························.························································································possibility·that·the·output·of·the·random·number·generator | 1888 | ·····························.························································································possibility·that·the·output·of·the·random·number·generator |
| 1889 | ······················································································································used·by·SSH·would·be·known·to·potential·attackers. | 1889 | ······················································································································used·by·SSH·would·be·known·to·potential·attackers. |
| 1890 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated, | 1890 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated, |
| 1891 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············By·decreasing·the·limit·based·on·the·amount·of·data·and········var_rekey_limit_ | 1891 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············By·decreasing·the·limit·based·on·the·amount·of·data·and········var_rekey_limit_time=1hour |
| 1892 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·limit,·effects·of·potential·attacks········var_rekey_limit_ | 1892 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·limit,·effects·of·potential·attacks········var_rekey_limit_size=1G |
| 1893 | ·····7······renegotiation····sshd_config:·············································································against·encryption·keys·are·limited. | 1893 | ·····7······renegotiation····sshd_config:·············································································against·encryption·keys·are·limited. |
| 1894 | ·····························RekeyLimit·1G·1hour | 1894 | ·····························RekeyLimit·1G·1hour |
| 1895 | ······················································································································SSH·implementation·in·Red·Hat·Enterprise·Linux·8·uses·the | 1895 | ······················································································································SSH·implementation·in·Red·Hat·Enterprise·Linux·8·uses·the |
| 1896 | ·····························To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·/etc/sysconfig/·openssl·library,·which·doesn't·use·high-entropy·sources·by | 1896 | ·····························To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·/etc/sysconfig/·openssl·library,·which·doesn't·use·high-entropy·sources·by |
| 1897 | ·····CCE-···SSH·server·uses··sshd·file.·The·SSH_USE_STRONG_RNG·configuration·value·determines·how·many·bytes·of·······default.·Randomness·is·needed·to·generate·data-encryption | 1897 | ·····CCE-···SSH·server·uses··sshd·file.·The·SSH_USE_STRONG_RNG·configuration·value·determines·how·many·bytes·of·······default.·Randomness·is·needed·to·generate·data-encryption |
| 1898 | ·····82462-·strong·entropy···entropy·to·use,·so·make·sure·that·the·file·contains·line·································keys,·and·as·plaintext·padding·and·initialization·vectors·in | 1898 | ·····82462-·strong·entropy···entropy·to·use,·so·make·sure·that·the·file·contains·line·································keys,·and·as·plaintext·padding·and·initialization·vectors·in |
| 1899 | ·····3······to·seed··········SSH_USE_STRONG_RNG=32····································································encryption·algorithms,·and·high-quality·entropy·elliminates | 1899 | ·····3······to·seed··········SSH_USE_STRONG_RNG=32····································································encryption·algorithms,·and·high-quality·entropy·elliminates |
| Offset 7842, 18 lines modified | Offset 7842, 18 lines modified | ||
| 0001ea10:·2070·6173·7377·6f72·6473·2068·656c·7073···passwords·helps | 0001ea10:·2070·6173·7377·6f72·6473·2068·656c·7073···passwords·helps | ||
| 0001ea20:·2065·6e73·7572·6520·7468·6174·2061·2063···ensure·that·a·c | 0001ea20:·2065·6e73·7572·6520·7468·6174·2061·2063···ensure·that·a·c | ||
| 0001ea30:·6f6d·7072·6f6d·6973·6564·2070·6173·7377··ompromised·passw | 0001ea30:·6f6d·7072·6f6d·6973·6564·2070·6173·7377··ompromised·passw | ||
| 0001ea40:·6f72·6420·6973·206e·6f74·2072·652d·7573··ord·is·not·re-us | 0001ea40:·6f72·6420·6973·206e·6f74·2072·652d·7573··ord·is·not·re-us | ||
| 0001ea50:·6564·2062·7920·6120·7573·6572·2e0a·2020··ed·by·a·user..·· | 0001ea50:·6564·2062·7920·6120·7573·6572·2e0a·2020··ed·by·a·user..·· | ||
| 0001ea60:·3c2f·7464·3e0a·2020·3c74·643e·7661·725f··</td>.··<td>var_ | 0001ea60:·3c2f·7464·3e0a·2020·3c74·643e·7661·725f··</td>.··<td>var_ | ||
| 0001ea70:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | 0001ea70:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | ||
| 0001ea80:·656d·6265·723d·353c·6272·2f3e·7661·725f··ember=5<br/>var_ | |||
| 0001ea90:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | |||
| 0001ea | 0001eaa0:·656d·6265·725f·636f·6e74·726f·6c5f·666c··ember_control_fl | ||
| 0001ea | 0001eab0:·6167·3d72·6571·7569·7265·643c·2f74·643e··ag=required</td> | ||
| 0001eaa0:·7661·725f·7061·7373·776f·7264·5f70·616d··var_password_pam | |||
| 0001eab0:·5f72·656d·656d·6265·723d·353c·2f74·643e··_remember=5</td> | |||
| 0001eac0:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | 0001eac0:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | ||
| 0001ead0:·643e·4941·2d35·2866·293c·6272·2f3e·4941··d>IA-5(f)<br/>IA | 0001ead0:·643e·4941·2d35·2866·293c·6272·2f3e·4941··d>IA-5(f)<br/>IA | ||
| 0001eae0:·2d35·2831·2928·6529·3c2f·7464·3e0a·2020··-5(1)(e)</td>.·· | 0001eae0:·2d35·2831·2928·6529·3c2f·7464·3e0a·2020··-5(1)(e)</td>.·· | ||
| 0001eaf0:·3c74·643e·4343·452d·3833·3438·302d·343c··<td>CCE-83480-4< | 0001eaf0:·3c74·643e·4343·452d·3833·3438·302d·343c··<td>CCE-83480-4< | ||
| 0001eb00:·2f74·643e·0a20·203c·7464·3e4c·696d·6974··/td>.··<td>Limit | 0001eb00:·2f74·643e·0a20·203c·7464·3e4c·696d·6974··/td>.··<td>Limit | ||
| 0001eb10:·2050·6173·7377·6f72·6420·5265·7573·653a···Password·Reuse: | 0001eb10:·2050·6173·7377·6f72·6420·5265·7573·653a···Password·Reuse: | ||
| 0001eb20:·2073·7973·7465·6d2d·6175·7468·3c2f·7464···system-auth</td | 0001eb20:·2073·7973·7465·6d2d·6175·7468·3c2f·7464···system-auth</td | ||
| Offset 7899, 18 lines modified | Offset 7899, 18 lines modified | ||
| 0001eda0:·2070·6173·7377·6f72·6473·2068·656c·7073···passwords·helps | 0001eda0:·2070·6173·7377·6f72·6473·2068·656c·7073···passwords·helps | ||
| 0001edb0:·2065·6e73·7572·6520·7468·6174·2061·2063···ensure·that·a·c | 0001edb0:·2065·6e73·7572·6520·7468·6174·2061·2063···ensure·that·a·c | ||
| 0001edc0:·6f6d·7072·6f6d·6973·6564·2070·6173·7377··ompromised·passw | 0001edc0:·6f6d·7072·6f6d·6973·6564·2070·6173·7377··ompromised·passw | ||
| 0001edd0:·6f72·6420·6973·206e·6f74·2072·652d·7573··ord·is·not·re-us | 0001edd0:·6f72·6420·6973·206e·6f74·2072·652d·7573··ord·is·not·re-us | ||
| 0001ede0:·6564·2062·7920·6120·7573·6572·2e0a·2020··ed·by·a·user..·· | 0001ede0:·6564·2062·7920·6120·7573·6572·2e0a·2020··ed·by·a·user..·· | ||
| 0001edf0:·3c2f·7464·3e0a·2020·3c74·643e·7661·725f··</td>.··<td>var_ | 0001edf0:·3c2f·7464·3e0a·2020·3c74·643e·7661·725f··</td>.··<td>var_ | ||
| 0001ee00:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | 0001ee00:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | ||
| 0001ee10:·656d·6265·723d·353c·6272·2f3e·7661·725f··ember=5<br/>var_ | |||
| 0001ee20:·7061·7373·776f·7264·5f70·616d·5f72·656d··password_pam_rem | |||
| 0001ee | 0001ee30:·656d·6265·725f·636f·6e74·726f·6c5f·666c··ember_control_fl | ||
| 0001ee | 0001ee40:·6167·3d72·6571·7569·7265·643c·2f74·643e··ag=required</td> | ||
| 0001ee30:·7661·725f·7061·7373·776f·7264·5f70·616d··var_password_pam | |||
| 0001ee40:·5f72·656d·656d·6265·723d·353c·2f74·643e··_remember=5</td> | |||
| 0001ee50:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | 0001ee50:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | ||
| 0001ee60:·643e·4941·2d35·2863·293c·6272·2f3e·4941··d>IA-5(c)<br/>IA | 0001ee60:·643e·4941·2d35·2863·293c·6272·2f3e·4941··d>IA-5(c)<br/>IA | ||
| 0001ee70:·2d35·2831·2928·6129·3c62·722f·3e43·4d2d··-5(1)(a)<br/>CM- | 0001ee70:·2d35·2831·2928·6129·3c62·722f·3e43·4d2d··-5(1)(a)<br/>CM- | ||
| 0001ee80:·3628·6129·3c62·722f·3e49·412d·3528·3429··6(a)<br/>IA-5(4) | 0001ee80:·3628·6129·3c62·722f·3e49·412d·3528·3429··6(a)<br/>IA-5(4) | ||
| 0001ee90:·3c2f·7464·3e0a·2020·3c74·643e·4343·452d··</td>.··<td>CCE- | 0001ee90:·3c2f·7464·3e0a·2020·3c74·643e·4343·452d··</td>.··<td>CCE- | ||
| 0001eea0:·3830·3636·352d·333c·2f74·643e·0a20·203c··80665-3</td>.··< | 0001eea0:·3830·3636·352d·333c·2f74·643e·0a20·203c··80665-3</td>.··< | ||
| 0001eeb0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | 0001eeb0:·7464·3e45·6e73·7572·6520·5041·4d20·456e··td>Ensure·PAM·En | ||
| Offset 23491, 18 lines modified | Offset 23491, 18 lines modified | ||
| 0005bc20:·656e·6162·6c69·6e67·0a74·696d·652d·6261··enabling.time-ba | 0005bc20:·656e·6162·6c69·6e67·0a74·696d·652d·6261··enabling.time-ba | ||
| 0005bc30:·7365·6420·6c69·6d69·742c·2065·6666·6563··sed·limit,·effec | 0005bc30:·7365·6420·6c69·6d69·742c·2065·6666·6563··sed·limit,·effec | ||
| 0005bc40:·7473·206f·6620·706f·7465·6e74·6961·6c20··ts·of·potential· | 0005bc40:·7473·206f·6620·706f·7465·6e74·6961·6c20··ts·of·potential· | ||
| 0005bc50:·6174·7461·636b·7320·6167·6169·6e73·740a··attacks·against. | 0005bc50:·6174·7461·636b·7320·6167·6169·6e73·740a··attacks·against. | ||
| 0005bc60:·656e·6372·7970·7469·6f6e·206b·6579·7320··encryption·keys· | 0005bc60:·656e·6372·7970·7469·6f6e·206b·6579·7320··encryption·keys· | ||
| 0005bc70:·6172·6520·6c69·6d69·7465·642e·0a20·203c··are·limited..··< | 0005bc70:·6172·6520·6c69·6d69·7465·642e·0a20·203c··are·limited..··< | ||
| 0005bc80:·2f74·643e·0a20·203c·7464·3e76·6172·5f72··/td>.··<td>var_r | 0005bc80:·2f74·643e·0a20·203c·7464·3e76·6172·5f72··/td>.··<td>var_r | ||
| 0005bc90:·656b·6579·5f6c·696d·6974·5f7 | 0005bc90:·656b·6579·5f6c·696d·6974·5f74·696d·653d··ekey_limit_time= | ||
| 0005bca0:·3147·3c62·722f·3e76·6172·5f72·656b·6579··1G<br/>var_rekey | |||
| 0005bc | 0005bca0:·3168·6f75·723c·6272·2f3e·7661·725f·7265··1hour<br/>var_re | ||
| 0005bcb0:·6b65·795f·6c69·6d69·745f·7369·7a65·3d31··key_limit_size=1 | |||
| 0005bcc0:· | 0005bcc0:·473c·2f74·643e·0a3c·2f74·723e·0a3c·7472··G</td>.</tr>.<tr | ||
| 0005bcd0:·3e0a·2020·3c74·643e·3c2f·7464·3e0a·2020··>.··<td></td>.·· | 0005bcd0:·3e0a·2020·3c74·643e·3c2f·7464·3e0a·2020··>.··<td></td>.·· | ||
| 0005bce0:·3c74·643e·4343·452d·3832·3436·322d·333c··<td>CCE-82462-3< | 0005bce0:·3c74·643e·4343·452d·3832·3436·322d·333c··<td>CCE-82462-3< | ||
| 0005bcf0:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | 0005bcf0:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | ||
| 0005bd00:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | 0005bd00:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | ||
| 0005bd10:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | 0005bd10:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | ||
| 0005bd20:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | 0005bd20:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | ||
| 0005bd30:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T | 0005bd30:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T |
| Offset 1472, 27 lines modified | Offset 1472, 27 lines modified | ||
| 1472 | ·····································pwquality.conf·to·equal·1·to·require·use·of·a·special·is·compromised.·Requiring·a·minimum·number·of·special·characters·makes | 1472 | ·····································pwquality.conf·to·equal·1·to·require·use·of·a·special·is·compromised.·Requiring·a·minimum·number·of·special·characters·makes |
| 1473 | ·····································character·in·passwords.·······························password·guessing·attacks·more·difficult·by·ensuring·a·larger·search | 1473 | ·····································character·in·passwords.·······························password·guessing·attacks·more·difficult·by·ensuring·a·larger·search |
| 1474 | ···························································································space. | 1474 | ···························································································space. |
| 1475 | ·····································Do·not·allow·users·to·reuse·recent·passwords.·This | 1475 | ·····································Do·not·allow·users·to·reuse·recent·passwords.·This |
| 1476 | ·····································can·be·accomplished·by·using·the·remember·option·for | 1476 | ·····································can·be·accomplished·by·using·the·remember·option·for |
| 1477 | ·····································the·pam_pwhistory·PAM·module. | 1477 | ·····································the·pam_pwhistory·PAM·module. |
| 1478 | IA-5(f)·CCE-···Limit·Password·Reuse:·In·the·file·/etc/pam.d/password-auth,·make·sure·the···Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember | 1478 | IA-5(f)·CCE-···Limit·Password·Reuse:·In·the·file·/etc/pam.d/password-auth,·make·sure·the···Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember=5 |
| 1479 | IA-5(1)·83478-·password-auth·········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember= | 1479 | IA-5(1)·83478-·password-auth·········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember_control_flag=required |
| 1480 | (e)·····8····························equal·to·or·greater·than·5.·For·example: | 1480 | (e)·····8····························equal·to·or·greater·than·5.·For·example: |
| 1481 | ·····································password·control_flag·pam_pwhistory.so | 1481 | ·····································password·control_flag·pam_pwhistory.so |
| 1482 | ·····································...existing_options...·remember=5·use_authtok | 1482 | ·····································...existing_options...·remember=5·use_authtok |
| 1483 | ·····································control_flag·should·be·one·of·the·next·values: | 1483 | ·····································control_flag·should·be·one·of·the·next·values: |
| 1484 | ·····································required | 1484 | ·····································required |
| 1485 | ·····································Do·not·allow·users·to·reuse·recent·passwords.·This | 1485 | ·····································Do·not·allow·users·to·reuse·recent·passwords.·This |
| 1486 | ·····································can·be·accomplished·by·using·the·remember·option·for | 1486 | ·····································can·be·accomplished·by·using·the·remember·option·for |
| 1487 | ·····································the·pam_pwhistory·PAM·module. | 1487 | ·····································the·pam_pwhistory·PAM·module. |
| 1488 | IA-5(f)·CCE-···Limit·Password·Reuse:·In·the·file·/etc/pam.d/system-auth,·make·sure·the·····Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember | 1488 | IA-5(f)·CCE-···Limit·Password·Reuse:·In·the·file·/etc/pam.d/system-auth,·make·sure·the·····Preventing·re-use·of·previous·passwords·helps·ensure·that·a·compromised····var_password_pam_remember=5 |
| 1489 | IA-5(1)·83480-·system-auth···········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember= | 1489 | IA-5(1)·83480-·system-auth···········parameter·remember·is·present·and·it·has·a·value······password·is·not·re-used·by·a·user.·········································var_password_pam_remember_control_flag=required |
| 1490 | (e)·····4····························equal·to·or·greater·than·5·For·example: | 1490 | (e)·····4····························equal·to·or·greater·than·5·For·example: |
| 1491 | ·····································password·control_flag·pam_pwhistory.so | 1491 | ·····································password·control_flag·pam_pwhistory.so |
| 1492 | ·····································...existing_options...·remember=5·use_authtok | 1492 | ·····································...existing_options...·remember=5·use_authtok |
| 1493 | ·····································control_flag·should·be·one·of·the·next·values: | 1493 | ·····································control_flag·should·be·one·of·the·next·values: |
| 1494 | ·····································required | 1494 | ·····································required |
| 1495 | ·····································The·pam_pwquality·module's·ucredit=·parameter·········Use·of·a·complex·password·helps·to·increase·the·time·and·resources | 1495 | ·····································The·pam_pwquality·module's·ucredit=·parameter·········Use·of·a·complex·password·helps·to·increase·the·time·and·resources |
| 1496 | ·····································controls·requirements·for·usage·of·uppercase·letters··required·to·compromise·the·password.·Password·complexity,·or·strength,·is | 1496 | ·····································controls·requirements·for·usage·of·uppercase·letters··required·to·compromise·the·password.·Password·complexity,·or·strength,·is |
| Offset 4103, 16 lines modified | Offset 4103, 16 lines modified | ||
| 4103 | ········89707-·Rounds·in·/etc/·······SHA_CRYPT_MIN_ROUNDS·5000·····························Passwords·that·are·encrypted·with·a·weak·algorithm·are·no·more·protected | 4103 | ········89707-·Rounds·in·/etc/·······SHA_CRYPT_MIN_ROUNDS·5000·····························Passwords·that·are·encrypted·with·a·weak·algorithm·are·no·more·protected |
| 4104 | ········4······login.defs············SHA_CRYPT_MAX_ROUNDS·5000·····························than·if·they·are·kept·in·plain·text. | 4104 | ········4······login.defs············SHA_CRYPT_MAX_ROUNDS·5000·····························than·if·they·are·kept·in·plain·text. |
| 4105 | ·····································Notice·that·if·neither·are·set,·they·already·have·the | 4105 | ·····································Notice·that·if·neither·are·set,·they·already·have·the |
| 4106 | ·····································default·value·of·5000.·If·either·is·set,·they·must····Using·more·hashing·rounds·makes·password·cracking·attacks·more·difficult. | 4106 | ·····································default·value·of·5000.·If·either·is·set,·they·must····Using·more·hashing·rounds·makes·password·cracking·attacks·more·difficult. |
| 4107 | ·····································have·the·minimum·value·of·5000. | 4107 | ·····································have·the·minimum·value·of·5000. |
| 4108 | ·····································The·RekeyLimit·parameter·specifies·how·often·the | 4108 | ·····································The·RekeyLimit·parameter·specifies·how·often·the |
| 4109 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of | 4109 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of |
| 4110 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling·time-·····var_rekey_limit_ | 4110 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling·time-·····var_rekey_limit_time=1hour |
| 4111 | ········82177-·session·key···········elapsed.··············································based·limit,·effects·of·potential·attacks·against·encryption·keys·are······var_rekey_limit_ | 4111 | ········82177-·session·key···········elapsed.··············································based·limit,·effects·of·potential·attacks·against·encryption·keys·are······var_rekey_limit_size=1G |
| 4112 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limited. | 4112 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limited. |
| 4113 | ·····································following·line·in·/etc/ssh/sshd_config: | 4113 | ·····································following·line·in·/etc/ssh/sshd_config: |
| 4114 | ·····································RekeyLimit·1G·1hour | 4114 | ·····································RekeyLimit·1G·1hour |
| 4115 | ·····································To·set·up·SSH·server·to·use·entropy·from·a·high-······SSH·implementation·in·Red·Hat·Enterprise·Linux·8·uses·the·openssl·library, | 4115 | ·····································To·set·up·SSH·server·to·use·entropy·from·a·high-······SSH·implementation·in·Red·Hat·Enterprise·Linux·8·uses·the·openssl·library, |
| 4116 | ········CCE-···SSH·server·uses·······quality·source,·edit·the·/etc/sysconfig/sshd·file.····which·doesn't·use·high-entropy·sources·by·default.·Randomness·is·needed·to | 4116 | ········CCE-···SSH·server·uses·······quality·source,·edit·the·/etc/sysconfig/sshd·file.····which·doesn't·use·high-entropy·sources·by·default.·Randomness·is·needed·to |
| 4117 | ········82462-·strong·entropy·to·····The·SSH_USE_STRONG_RNG·configuration·value·determines·generate·data-encryption·keys,·and·as·plaintext·padding·and·initialization | 4117 | ········82462-·strong·entropy·to·····The·SSH_USE_STRONG_RNG·configuration·value·determines·generate·data-encryption·keys,·and·as·plaintext·padding·and·initialization |
| 4118 | ········3······seed··················how·many·bytes·of·entropy·to·use,·so·make·sure·that···vectors·in·encryption·algorithms,·and·high-quality·entropy·elliminates·the | 4118 | ········3······seed··················how·many·bytes·of·entropy·to·use,·so·make·sure·that···vectors·in·encryption·algorithms,·and·high-quality·entropy·elliminates·the |
| Offset 1124, 16 lines modified | Offset 1124, 16 lines modified | ||
| 1124 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 1124 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 1125 | ······find: | 1125 | ······find: |
| 1126 | ········paths:·/etc/audit/rules.d/ | 1126 | ········paths:·/etc/audit/rules.d/ |
| 1127 | ········patterns:·'*.rules' | 1127 | ········patterns:·'*.rules' |
| 1128 | ······register:·find_rules_d | 1128 | ······register:·find_rules_d |
| 1129 | ······when: | 1129 | ······when: |
| 1130 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1131 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1130 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1131 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1132 | ······tags: | 1132 | ······tags: |
| 1133 | ······-·CJIS-5.4.1.1 | 1133 | ······-·CJIS-5.4.1.1 |
| 1134 | ······-·NIST-800-171-3.3.1 | 1134 | ······-·NIST-800-171-3.3.1 |
| 1135 | ······-·NIST-800-171-3.4.3 | 1135 | ······-·NIST-800-171-3.4.3 |
| 1136 | ······-·NIST-800-53-AC-6(9) | 1136 | ······-·NIST-800-53-AC-6(9) |
| 1137 | ······-·NIST-800-53-CM-6(a) | 1137 | ······-·NIST-800-53-CM-6(a) |
| 1138 | ······-·PCI-DSS-Req-10.5.2 | 1138 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1148, 16 lines modified | Offset 1148, 16 lines modified | ||
| 1148 | ······lineinfile: | 1148 | ······lineinfile: |
| 1149 | ········path:·'{{·item·}}' | 1149 | ········path:·'{{·item·}}' |
| 1150 | ········regexp:·^\s*(?:-e)\s+.*$ | 1150 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 1151 | ········state:·absent | 1151 | ········state:·absent |
| 1152 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 1152 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 1153 | ········}}' | 1153 | ········}}' |
| 1154 | ······when: | 1154 | ······when: |
| 1155 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1156 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1155 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1156 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1157 | ······tags: | 1157 | ······tags: |
| 1158 | ······-·CJIS-5.4.1.1 | 1158 | ······-·CJIS-5.4.1.1 |
| 1159 | ······-·NIST-800-171-3.3.1 | 1159 | ······-·NIST-800-171-3.3.1 |
| 1160 | ······-·NIST-800-171-3.4.3 | 1160 | ······-·NIST-800-171-3.4.3 |
| 1161 | ······-·NIST-800-53-AC-6(9) | 1161 | ······-·NIST-800-53-AC-6(9) |
| 1162 | ······-·NIST-800-53-CM-6(a) | 1162 | ······-·NIST-800-53-CM-6(a) |
| 1163 | ······-·PCI-DSS-Req-10.5.2 | 1163 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1174, 16 lines modified | Offset 1174, 16 lines modified | ||
| 1174 | ········create:·true | 1174 | ········create:·true |
| 1175 | ········line:·-e·2 | 1175 | ········line:·-e·2 |
| 1176 | ········mode:·o-rwx | 1176 | ········mode:·o-rwx |
| 1177 | ······loop: | 1177 | ······loop: |
| 1178 | ······-·/etc/audit/audit.rules | 1178 | ······-·/etc/audit/audit.rules |
| 1179 | ······-·/etc/audit/rules.d/immutable.rules | 1179 | ······-·/etc/audit/rules.d/immutable.rules |
| 1180 | ······when: | 1180 | ······when: |
| 1181 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1182 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1181 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1182 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1183 | ······tags: | 1183 | ······tags: |
| 1184 | ······-·CJIS-5.4.1.1 | 1184 | ······-·CJIS-5.4.1.1 |
| 1185 | ······-·NIST-800-171-3.3.1 | 1185 | ······-·NIST-800-171-3.3.1 |
| 1186 | ······-·NIST-800-171-3.4.3 | 1186 | ······-·NIST-800-171-3.4.3 |
| 1187 | ······-·NIST-800-53-AC-6(9) | 1187 | ······-·NIST-800-53-AC-6(9) |
| 1188 | ······-·NIST-800-53-CM-6(a) | 1188 | ······-·NIST-800-53-CM-6(a) |
| 1189 | ······-·PCI-DSS-Req-10.5.2 | 1189 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1218, 16 lines modified | Offset 1218, 16 lines modified | ||
| 1218 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 1218 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 1219 | ······find: | 1219 | ······find: |
| 1220 | ········paths:·/etc/audit/rules.d | 1220 | ········paths:·/etc/audit/rules.d |
| 1221 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 1221 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 1222 | ········patterns:·'*.rules' | 1222 | ········patterns:·'*.rules' |
| 1223 | ······register:·find_existing_watch_rules_d | 1223 | ······register:·find_existing_watch_rules_d |
| 1224 | ······when: | 1224 | ······when: |
| 1225 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1226 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1225 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1226 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1227 | ······tags: | 1227 | ······tags: |
| 1228 | ······-·CJIS-5.4.1.1 | 1228 | ······-·CJIS-5.4.1.1 |
| 1229 | ······-·NIST-800-171-3.1.7 | 1229 | ······-·NIST-800-171-3.1.7 |
| 1230 | ······-·NIST-800-53-AC-2(7)(b) | 1230 | ······-·NIST-800-53-AC-2(7)(b) |
| 1231 | ······-·NIST-800-53-AC-6(9) | 1231 | ······-·NIST-800-53-AC-6(9) |
| 1232 | ······-·NIST-800-53-AU-12(c) | 1232 | ······-·NIST-800-53-AU-12(c) |
| 1233 | ······-·NIST-800-53-AU-2(d) | 1233 | ······-·NIST-800-53-AU-2(d) |
| Offset 1244, 16 lines modified | Offset 1244, 16 lines modified | ||
| 1244 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 1244 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 1245 | ······find: | 1245 | ······find: |
| 1246 | ········paths:·/etc/audit/rules.d | 1246 | ········paths:·/etc/audit/rules.d |
| 1247 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ | 1247 | ········contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 1248 | ········patterns:·'*.rules' | 1248 | ········patterns:·'*.rules' |
| 1249 | ······register:·find_watch_key | 1249 | ······register:·find_watch_key |
| 1250 | ······when: | 1250 | ······when: |
| 1251 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1252 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1251 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1252 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1253 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1253 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1254 | ········==·0 | 1254 | ········==·0 |
| 1255 | ······tags: | 1255 | ······tags: |
| 1256 | ······-·CJIS-5.4.1.1 | 1256 | ······-·CJIS-5.4.1.1 |
| 1257 | ······-·NIST-800-171-3.1.7 | 1257 | ······-·NIST-800-171-3.1.7 |
| 1258 | ······-·NIST-800-53-AC-2(7)(b) | 1258 | ······-·NIST-800-53-AC-2(7)(b) |
| 1259 | ······-·NIST-800-53-AC-6(9) | 1259 | ······-·NIST-800-53-AC-6(9) |
| Offset 1270, 16 lines modified | Offset 1270, 16 lines modified | ||
| 1270 | ······-·restrict_strategy | 1270 | ······-·restrict_strategy |
| 1271 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 1271 | ····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 1272 | ······set_fact: | 1272 | ······set_fact: |
| 1273 | ········all_files: | 1273 | ········all_files: |
| 1274 | ········-·/etc/audit/rules.d/actions.rules | 1274 | ········-·/etc/audit/rules.d/actions.rules |
| 1275 | ······when: | 1275 | ······when: |
| 1276 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1277 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1276 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1277 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1278 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1278 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1279 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1279 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1280 | ······tags: | 1280 | ······tags: |
| 1281 | ······-·CJIS-5.4.1.1 | 1281 | ······-·CJIS-5.4.1.1 |
| 1282 | ······-·NIST-800-171-3.1.7 | 1282 | ······-·NIST-800-171-3.1.7 |
| 1283 | ······-·NIST-800-53-AC-2(7)(b) | 1283 | ······-·NIST-800-53-AC-2(7)(b) |
| 1284 | ······-·NIST-800-53-AC-6(9) | 1284 | ······-·NIST-800-53-AC-6(9) |
| Offset 1296, 16 lines modified | Offset 1296, 16 lines modified | ||
| 1296 | ······-·restrict_strategy | 1296 | ······-·restrict_strategy |
| 1297 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1297 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1298 | ······set_fact: | 1298 | ······set_fact: |
| 1299 | ········all_files: | 1299 | ········all_files: |
| 1300 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1300 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1301 | ······when: | 1301 | ······when: |
| 1302 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1303 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1302 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1303 | ······-·'"audit"·in·ansible_facts.packages' | ||
| 1304 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1304 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1305 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1305 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1306 | ······tags: | 1306 | ······tags: |
| 1307 | ······-·CJIS-5.4.1.1 | 1307 | ······-·CJIS-5.4.1.1 |
| 1308 | ······-·NIST-800-171-3.1.7 | 1308 | ······-·NIST-800-171-3.1.7 |
| 1309 | ······-·NIST-800-53-AC-2(7)(b) | 1309 | ······-·NIST-800-53-AC-2(7)(b) |
| 1310 | ······-·NIST-800-53-AC-6(9) | 1310 | ······-·NIST-800-53-AC-6(9) |
| Offset 1324, 16 lines modified | Offset 1324, 16 lines modified | ||
| 1324 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 1324 | ····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 20013/24693 bytes (81.05%) of diff not shown. | |||
| Offset 1230, 16 lines modified | Offset 1230, 16 lines modified | ||
| 1230 | ······-·no_reboot_needed | 1230 | ······-·no_reboot_needed |
| 1231 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 1231 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 1232 | ······stat: | 1232 | ······stat: |
| 1233 | ········path:·/boot/grub2/grub.cfg | 1233 | ········path:·/boot/grub2/grub.cfg |
| 1234 | ······register:·file_exists | 1234 | ······register:·file_exists |
| 1235 | ······when: | 1235 | ······when: |
| 1236 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1237 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1236 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1237 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1238 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1238 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1239 | ······tags: | 1239 | ······tags: |
| 1240 | ······-·CJIS-5.5.2.2 | 1240 | ······-·CJIS-5.5.2.2 |
| 1241 | ······-·NIST-800-171-3.4.5 | 1241 | ······-·NIST-800-171-3.4.5 |
| 1242 | ······-·NIST-800-53-AC-6(1) | 1242 | ······-·NIST-800-53-AC-6(1) |
| 1243 | ······-·NIST-800-53-CM-6(a) | 1243 | ······-·NIST-800-53-CM-6(a) |
| 1244 | ······-·PCI-DSS-Req-7.1 | 1244 | ······-·PCI-DSS-Req-7.1 |
| Offset 1251, 16 lines modified | Offset 1251, 16 lines modified | ||
| 1251 | ······-·no_reboot_needed | 1251 | ······-·no_reboot_needed |
| 1252 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 1252 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 1253 | ······file: | 1253 | ······file: |
| 1254 | ········path:·/boot/grub2/grub.cfg | 1254 | ········path:·/boot/grub2/grub.cfg |
| 1255 | ········group:·'0' | 1255 | ········group:·'0' |
| 1256 | ······when: | 1256 | ······when: |
| 1257 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1258 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1257 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1258 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1259 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1259 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1260 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1260 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1261 | ······tags: | 1261 | ······tags: |
| 1262 | ······-·CJIS-5.5.2.2 | 1262 | ······-·CJIS-5.5.2.2 |
| 1263 | ······-·NIST-800-171-3.4.5 | 1263 | ······-·NIST-800-171-3.4.5 |
| 1264 | ······-·NIST-800-53-AC-6(1) | 1264 | ······-·NIST-800-53-AC-6(1) |
| 1265 | ······-·NIST-800-53-CM-6(a) | 1265 | ······-·NIST-800-53-CM-6(a) |
| Offset 1290, 16 lines modified | Offset 1290, 16 lines modified | ||
| 1290 | ······-·no_reboot_needed | 1290 | ······-·no_reboot_needed |
| 1291 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 1291 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 1292 | ······stat: | 1292 | ······stat: |
| 1293 | ········path:·/boot/grub2/grub.cfg | 1293 | ········path:·/boot/grub2/grub.cfg |
| 1294 | ······register:·file_exists | 1294 | ······register:·file_exists |
| 1295 | ······when: | 1295 | ······when: |
| 1296 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1297 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1296 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1297 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1298 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1298 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1299 | ······tags: | 1299 | ······tags: |
| 1300 | ······-·CJIS-5.5.2.2 | 1300 | ······-·CJIS-5.5.2.2 |
| 1301 | ······-·NIST-800-171-3.4.5 | 1301 | ······-·NIST-800-171-3.4.5 |
| 1302 | ······-·NIST-800-53-AC-6(1) | 1302 | ······-·NIST-800-53-AC-6(1) |
| 1303 | ······-·NIST-800-53-CM-6(a) | 1303 | ······-·NIST-800-53-CM-6(a) |
| 1304 | ······-·PCI-DSS-Req-7.1 | 1304 | ······-·PCI-DSS-Req-7.1 |
| Offset 1311, 16 lines modified | Offset 1311, 16 lines modified | ||
| 1311 | ······-·no_reboot_needed | 1311 | ······-·no_reboot_needed |
| 1312 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 1312 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 1313 | ······file: | 1313 | ······file: |
| 1314 | ········path:·/boot/grub2/grub.cfg | 1314 | ········path:·/boot/grub2/grub.cfg |
| 1315 | ········owner:·'0' | 1315 | ········owner:·'0' |
| 1316 | ······when: | 1316 | ······when: |
| 1317 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1318 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1317 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1318 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1319 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1319 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1320 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1320 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1321 | ······tags: | 1321 | ······tags: |
| 1322 | ······-·CJIS-5.5.2.2 | 1322 | ······-·CJIS-5.5.2.2 |
| 1323 | ······-·NIST-800-171-3.4.5 | 1323 | ······-·NIST-800-171-3.4.5 |
| 1324 | ······-·NIST-800-53-AC-6(1) | 1324 | ······-·NIST-800-53-AC-6(1) |
| 1325 | ······-·NIST-800-53-CM-6(a) | 1325 | ······-·NIST-800-53-CM-6(a) |
| Offset 1348, 16 lines modified | Offset 1348, 16 lines modified | ||
| 1348 | ······-·no_reboot_needed | 1348 | ······-·no_reboot_needed |
| 1349 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 1349 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 1350 | ······stat: | 1350 | ······stat: |
| 1351 | ········path:·/boot/grub2/grub.cfg | 1351 | ········path:·/boot/grub2/grub.cfg |
| 1352 | ······register:·file_exists | 1352 | ······register:·file_exists |
| 1353 | ······when: | 1353 | ······when: |
| 1354 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1355 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1354 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1355 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1356 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1356 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1357 | ······tags: | 1357 | ······tags: |
| 1358 | ······-·NIST-800-171-3.4.5 | 1358 | ······-·NIST-800-171-3.4.5 |
| 1359 | ······-·NIST-800-53-AC-6(1) | 1359 | ······-·NIST-800-53-AC-6(1) |
| 1360 | ······-·NIST-800-53-CM-6(a) | 1360 | ······-·NIST-800-53-CM-6(a) |
| 1361 | ······-·configure_strategy | 1361 | ······-·configure_strategy |
| 1362 | ······-·file_permissions_efi_grub2_cfg | 1362 | ······-·file_permissions_efi_grub2_cfg |
| Offset 1367, 16 lines modified | Offset 1367, 16 lines modified | ||
| 1367 | ······-·no_reboot_needed | 1367 | ······-·no_reboot_needed |
| 1368 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 1368 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 1369 | ······file: | 1369 | ······file: |
| 1370 | ········path:·/boot/grub2/grub.cfg | 1370 | ········path:·/boot/grub2/grub.cfg |
| 1371 | ········mode:·u-s,g-xwrs,o-xwrt | 1371 | ········mode:·u-s,g-xwrs,o-xwrt |
| 1372 | ······when: | 1372 | ······when: |
| 1373 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1374 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 1373 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 1374 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 1375 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1375 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1376 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1376 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1377 | ······tags: | 1377 | ······tags: |
| 1378 | ······-·NIST-800-171-3.4.5 | 1378 | ······-·NIST-800-171-3.4.5 |
| 1379 | ······-·NIST-800-53-AC-6(1) | 1379 | ······-·NIST-800-53-AC-6(1) |
| 1380 | ······-·NIST-800-53-CM-6(a) | 1380 | ······-·NIST-800-53-CM-6(a) |
| 1381 | ······-·configure_strategy | 1381 | ······-·configure_strategy |
| Offset 2766, 16 lines modified | Offset 2766, 16 lines modified | ||
| 2766 | ······-·no_reboot_needed | 2766 | ······-·no_reboot_needed |
| 2767 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2767 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2768 | ······stat: | 2768 | ······stat: |
| 2769 | ········path:·/boot/grub2/grub.cfg | 2769 | ········path:·/boot/grub2/grub.cfg |
| 2770 | ······register:·file_exists | 2770 | ······register:·file_exists |
| 2771 | ······when: | 2771 | ······when: |
| 2772 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2773 | ······-·'"grub2-common"·in·ansible_facts.packages' | 2772 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 2773 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2774 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2774 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2775 | ······tags: | 2775 | ······tags: |
| 2776 | ······-·CJIS-5.5.2.2 | 2776 | ······-·CJIS-5.5.2.2 |
| 2777 | ······-·NIST-800-171-3.4.5 | 2777 | ······-·NIST-800-171-3.4.5 |
| 2778 | ······-·NIST-800-53-AC-6(1) | 2778 | ······-·NIST-800-53-AC-6(1) |
| 2779 | ······-·NIST-800-53-CM-6(a) | 2779 | ······-·NIST-800-53-CM-6(a) |
| 2780 | ······-·PCI-DSS-Req-7.1 | 2780 | ······-·PCI-DSS-Req-7.1 |
| Offset 2787, 16 lines modified | Offset 2787, 16 lines modified | ||
| 2787 | ······-·no_reboot_needed | 2787 | ······-·no_reboot_needed |
| 2788 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 2788 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 2789 | ······file: | 2789 | ······file: |
| 2790 | ········path:·/boot/grub2/grub.cfg | 2790 | ········path:·/boot/grub2/grub.cfg |
| 2791 | ········group:·'0' | 2791 | ········group:·'0' |
| 2792 | ······when: | 2792 | ······when: |
| 2793 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2794 | ······-·'"grub2-common"·in·ansible_facts.packages' | 2793 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 2794 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2795 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2795 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2796 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2796 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2797 | ······tags: | 2797 | ······tags: |
| 2798 | ······-·CJIS-5.5.2.2 | 2798 | ······-·CJIS-5.5.2.2 |
| 2799 | ······-·NIST-800-171-3.4.5 | 2799 | ······-·NIST-800-171-3.4.5 |
| 2800 | ······-·NIST-800-53-AC-6(1) | 2800 | ······-·NIST-800-53-AC-6(1) |
| 2801 | ······-·NIST-800-53-CM-6(a) | 2801 | ······-·NIST-800-53-CM-6(a) |
| Offset 2826, 16 lines modified | Offset 2826, 16 lines modified | ||
| 2826 | ······-·no_reboot_needed | 2826 | ······-·no_reboot_needed |
| 2827 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2827 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2828 | ······stat: | 2828 | ······stat: |
| 2829 | ········path:·/boot/grub2/grub.cfg | 2829 | ········path:·/boot/grub2/grub.cfg |
| 2830 | ······register:·file_exists | 2830 | ······register:·file_exists |
| 2831 | ······when: | 2831 | ······when: |
| 2832 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2833 | ······-·'"grub2-common"·in·ansible_facts.packages' | 2832 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 2833 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2834 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2834 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2835 | ······tags: | 2835 | ······tags: |
| 2836 | ······-·CJIS-5.5.2.2 | 2836 | ······-·CJIS-5.5.2.2 |
| 2837 | ······-·NIST-800-171-3.4.5 | 2837 | ······-·NIST-800-171-3.4.5 |
| 2838 | ······-·NIST-800-53-AC-6(1) | 2838 | ······-·NIST-800-53-AC-6(1) |
| 2839 | ······-·NIST-800-53-CM-6(a) | 2839 | ······-·NIST-800-53-CM-6(a) |
| 2840 | ······-·PCI-DSS-Req-7.1 | 2840 | ······-·PCI-DSS-Req-7.1 |
| Offset 2847, 16 lines modified | Offset 2847, 16 lines modified | ||
| 2847 | ······-·no_reboot_needed | 2847 | ······-·no_reboot_needed |
| 2848 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 2848 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 2849 | ······file: | 2849 | ······file: |
| 2850 | ········path:·/boot/grub2/grub.cfg | 2850 | ········path:·/boot/grub2/grub.cfg |
| 2851 | ········owner:·'0' | 2851 | ········owner:·'0' |
| 2852 | ······when: | 2852 | ······when: |
| 2853 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2854 | ······-·'"grub2-common"·in·ansible_facts.packages' | 2853 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 2854 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2855 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2855 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2856 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2856 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2857 | ······tags: | 2857 | ······tags: |
| 2858 | ······-·CJIS-5.5.2.2 | 2858 | ······-·CJIS-5.5.2.2 |
| 2859 | ······-·NIST-800-171-3.4.5 | 2859 | ······-·NIST-800-171-3.4.5 |
| 2860 | ······-·NIST-800-53-AC-6(1) | 2860 | ······-·NIST-800-53-AC-6(1) |
| 2861 | ······-·NIST-800-53-CM-6(a) | 2861 | ······-·NIST-800-53-CM-6(a) |
| Offset 2884, 16 lines modified | Offset 2884, 16 lines modified | ||
| 2884 | ······-·no_reboot_needed | 2884 | ······-·no_reboot_needed |
| 2885 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2885 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2886 | ······stat: | 2886 | ······stat: |
| 2887 | ········path:·/boot/grub2/grub.cfg | 2887 | ········path:·/boot/grub2/grub.cfg |
| 2888 | ······register:·file_exists | 2888 | ······register:·file_exists |
| 2889 | ······when: | 2889 | ······when: |
| 2890 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2891 | ······-·'"grub2-common"·in·ansible_facts.packages' | 2890 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 2891 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2892 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2892 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2893 | ······tags: | 2893 | ······tags: |
| 2894 | ······-·NIST-800-171-3.4.5 | 2894 | ······-·NIST-800-171-3.4.5 |
| 2895 | ······-·NIST-800-53-AC-6(1) | 2895 | ······-·NIST-800-53-AC-6(1) |
| 2896 | ······-·NIST-800-53-CM-6(a) | 2896 | ······-·NIST-800-53-CM-6(a) |
| 2897 | ······-·configure_strategy | 2897 | ······-·configure_strategy |
| 2898 | ······-·file_permissions_efi_grub2_cfg | 2898 | ······-·file_permissions_efi_grub2_cfg |
| Offset 2903, 16 lines modified | Offset 2903, 16 lines modified | ||
| 2903 | ······-·no_reboot_needed | 2903 | ······-·no_reboot_needed |
| 2904 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 2904 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 2905 | ······file: | 2905 | ······file: |
| 2906 | ········path:·/boot/grub2/grub.cfg | 2906 | ········path:·/boot/grub2/grub.cfg |
| 2907 | ········mode:·u-s,g-xwrs,o-xwrt | 2907 | ········mode:·u-s,g-xwrs,o-xwrt |
| 2908 | ······when: | 2908 | ······when: |
| 2909 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2910 | ······-·'"grub2-common"·in·ansible_facts.packages' | 2909 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 2910 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2911 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2911 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2912 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2912 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2913 | ······tags: | 2913 | ······tags: |
| 2914 | ······-·NIST-800-171-3.4.5 | 2914 | ······-·NIST-800-171-3.4.5 |
| 2915 | ······-·NIST-800-53-AC-6(1) | 2915 | ······-·NIST-800-53-AC-6(1) |
| 2916 | ······-·NIST-800-53-CM-6(a) | 2916 | ······-·NIST-800-53-CM-6(a) |
| 2917 | ······-·configure_strategy | 2917 | ······-·configure_strategy |
| Offset 1199, 16 lines modified | Offset 1199, 16 lines modified | ||
| 1199 | ······-·no_reboot_needed | 1199 | ······-·no_reboot_needed |
| 1200 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 1200 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 1201 | ······stat: | 1201 | ······stat: |
| 1202 | ········path:·/boot/grub2/grub.cfg | 1202 | ········path:·/boot/grub2/grub.cfg |
| 1203 | ······register:·file_exists | 1203 | ······register:·file_exists |
| 1204 | ······when: | 1204 | ······when: |
| 1205 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1206 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1205 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1206 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1207 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1207 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1208 | ······tags: | 1208 | ······tags: |
| 1209 | ······-·CJIS-5.5.2.2 | 1209 | ······-·CJIS-5.5.2.2 |
| 1210 | ······-·NIST-800-171-3.4.5 | 1210 | ······-·NIST-800-171-3.4.5 |
| 1211 | ······-·NIST-800-53-AC-6(1) | 1211 | ······-·NIST-800-53-AC-6(1) |
| 1212 | ······-·NIST-800-53-CM-6(a) | 1212 | ······-·NIST-800-53-CM-6(a) |
| 1213 | ······-·PCI-DSS-Req-7.1 | 1213 | ······-·PCI-DSS-Req-7.1 |
| Offset 1220, 16 lines modified | Offset 1220, 16 lines modified | ||
| 1220 | ······-·no_reboot_needed | 1220 | ······-·no_reboot_needed |
| 1221 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 1221 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 1222 | ······file: | 1222 | ······file: |
| 1223 | ········path:·/boot/grub2/grub.cfg | 1223 | ········path:·/boot/grub2/grub.cfg |
| 1224 | ········group:·'0' | 1224 | ········group:·'0' |
| 1225 | ······when: | 1225 | ······when: |
| 1226 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1227 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1226 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1227 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1228 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1228 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1229 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1229 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1230 | ······tags: | 1230 | ······tags: |
| 1231 | ······-·CJIS-5.5.2.2 | 1231 | ······-·CJIS-5.5.2.2 |
| 1232 | ······-·NIST-800-171-3.4.5 | 1232 | ······-·NIST-800-171-3.4.5 |
| 1233 | ······-·NIST-800-53-AC-6(1) | 1233 | ······-·NIST-800-53-AC-6(1) |
| 1234 | ······-·NIST-800-53-CM-6(a) | 1234 | ······-·NIST-800-53-CM-6(a) |
| Offset 1259, 16 lines modified | Offset 1259, 16 lines modified | ||
| 1259 | ······-·no_reboot_needed | 1259 | ······-·no_reboot_needed |
| 1260 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 1260 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 1261 | ······stat: | 1261 | ······stat: |
| 1262 | ········path:·/boot/grub2/grub.cfg | 1262 | ········path:·/boot/grub2/grub.cfg |
| 1263 | ······register:·file_exists | 1263 | ······register:·file_exists |
| 1264 | ······when: | 1264 | ······when: |
| 1265 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1266 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1265 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1266 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1267 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1267 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1268 | ······tags: | 1268 | ······tags: |
| 1269 | ······-·CJIS-5.5.2.2 | 1269 | ······-·CJIS-5.5.2.2 |
| 1270 | ······-·NIST-800-171-3.4.5 | 1270 | ······-·NIST-800-171-3.4.5 |
| 1271 | ······-·NIST-800-53-AC-6(1) | 1271 | ······-·NIST-800-53-AC-6(1) |
| 1272 | ······-·NIST-800-53-CM-6(a) | 1272 | ······-·NIST-800-53-CM-6(a) |
| 1273 | ······-·PCI-DSS-Req-7.1 | 1273 | ······-·PCI-DSS-Req-7.1 |
| Offset 1280, 16 lines modified | Offset 1280, 16 lines modified | ||
| 1280 | ······-·no_reboot_needed | 1280 | ······-·no_reboot_needed |
| 1281 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 1281 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 1282 | ······file: | 1282 | ······file: |
| 1283 | ········path:·/boot/grub2/grub.cfg | 1283 | ········path:·/boot/grub2/grub.cfg |
| 1284 | ········owner:·'0' | 1284 | ········owner:·'0' |
| 1285 | ······when: | 1285 | ······when: |
| 1286 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1287 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1286 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1287 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1288 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1288 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1289 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1289 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1290 | ······tags: | 1290 | ······tags: |
| 1291 | ······-·CJIS-5.5.2.2 | 1291 | ······-·CJIS-5.5.2.2 |
| 1292 | ······-·NIST-800-171-3.4.5 | 1292 | ······-·NIST-800-171-3.4.5 |
| 1293 | ······-·NIST-800-53-AC-6(1) | 1293 | ······-·NIST-800-53-AC-6(1) |
| 1294 | ······-·NIST-800-53-CM-6(a) | 1294 | ······-·NIST-800-53-CM-6(a) |
| Offset 1317, 16 lines modified | Offset 1317, 16 lines modified | ||
| 1317 | ······-·no_reboot_needed | 1317 | ······-·no_reboot_needed |
| 1318 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 1318 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 1319 | ······stat: | 1319 | ······stat: |
| 1320 | ········path:·/boot/grub2/grub.cfg | 1320 | ········path:·/boot/grub2/grub.cfg |
| 1321 | ······register:·file_exists | 1321 | ······register:·file_exists |
| 1322 | ······when: | 1322 | ······when: |
| 1323 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1324 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1323 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1324 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1325 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1325 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1326 | ······tags: | 1326 | ······tags: |
| 1327 | ······-·NIST-800-171-3.4.5 | 1327 | ······-·NIST-800-171-3.4.5 |
| 1328 | ······-·NIST-800-53-AC-6(1) | 1328 | ······-·NIST-800-53-AC-6(1) |
| 1329 | ······-·NIST-800-53-CM-6(a) | 1329 | ······-·NIST-800-53-CM-6(a) |
| 1330 | ······-·configure_strategy | 1330 | ······-·configure_strategy |
| 1331 | ······-·file_permissions_efi_grub2_cfg | 1331 | ······-·file_permissions_efi_grub2_cfg |
| Offset 1336, 16 lines modified | Offset 1336, 16 lines modified | ||
| 1336 | ······-·no_reboot_needed | 1336 | ······-·no_reboot_needed |
| 1337 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 1337 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 1338 | ······file: | 1338 | ······file: |
| 1339 | ········path:·/boot/grub2/grub.cfg | 1339 | ········path:·/boot/grub2/grub.cfg |
| 1340 | ········mode:·u-s,g-xwrs,o-xwrt | 1340 | ········mode:·u-s,g-xwrs,o-xwrt |
| 1341 | ······when: | 1341 | ······when: |
| 1342 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1343 | ······-·'"grub2-common"·in·ansible_facts.packages' | 1342 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 1343 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 1344 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1344 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1345 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 1345 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 1346 | ······tags: | 1346 | ······tags: |
| 1347 | ······-·NIST-800-171-3.4.5 | 1347 | ······-·NIST-800-171-3.4.5 |
| 1348 | ······-·NIST-800-53-AC-6(1) | 1348 | ······-·NIST-800-53-AC-6(1) |
| 1349 | ······-·NIST-800-53-CM-6(a) | 1349 | ······-·NIST-800-53-CM-6(a) |
| 1350 | ······-·configure_strategy | 1350 | ······-·configure_strategy |
| Offset 21830, 16 lines modified | Offset 21830, 16 lines modified | ||
| 21830 | ······-·no_reboot_needed | 21830 | ······-·no_reboot_needed |
| 21831 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21831 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21832 | ······stat: | 21832 | ······stat: |
| 21833 | ········path:·/boot/grub2/grub.cfg | 21833 | ········path:·/boot/grub2/grub.cfg |
| 21834 | ······register:·file_exists | 21834 | ······register:·file_exists |
| 21835 | ······when: | 21835 | ······when: |
| 21836 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21837 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21836 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21837 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21838 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21838 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21839 | ······tags: | 21839 | ······tags: |
| 21840 | ······-·CJIS-5.5.2.2 | 21840 | ······-·CJIS-5.5.2.2 |
| 21841 | ······-·NIST-800-171-3.4.5 | 21841 | ······-·NIST-800-171-3.4.5 |
| 21842 | ······-·NIST-800-53-AC-6(1) | 21842 | ······-·NIST-800-53-AC-6(1) |
| 21843 | ······-·NIST-800-53-CM-6(a) | 21843 | ······-·NIST-800-53-CM-6(a) |
| 21844 | ······-·PCI-DSS-Req-7.1 | 21844 | ······-·PCI-DSS-Req-7.1 |
| Offset 21851, 16 lines modified | Offset 21851, 16 lines modified | ||
| 21851 | ······-·no_reboot_needed | 21851 | ······-·no_reboot_needed |
| 21852 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 21852 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 21853 | ······file: | 21853 | ······file: |
| 21854 | ········path:·/boot/grub2/grub.cfg | 21854 | ········path:·/boot/grub2/grub.cfg |
| 21855 | ········group:·'0' | 21855 | ········group:·'0' |
| 21856 | ······when: | 21856 | ······when: |
| 21857 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21858 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21857 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21858 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21859 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21859 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21860 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21860 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21861 | ······tags: | 21861 | ······tags: |
| 21862 | ······-·CJIS-5.5.2.2 | 21862 | ······-·CJIS-5.5.2.2 |
| 21863 | ······-·NIST-800-171-3.4.5 | 21863 | ······-·NIST-800-171-3.4.5 |
| 21864 | ······-·NIST-800-53-AC-6(1) | 21864 | ······-·NIST-800-53-AC-6(1) |
| 21865 | ······-·NIST-800-53-CM-6(a) | 21865 | ······-·NIST-800-53-CM-6(a) |
| Offset 21890, 16 lines modified | Offset 21890, 16 lines modified | ||
| 21890 | ······-·no_reboot_needed | 21890 | ······-·no_reboot_needed |
| 21891 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21891 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21892 | ······stat: | 21892 | ······stat: |
| 21893 | ········path:·/boot/grub2/user.cfg | 21893 | ········path:·/boot/grub2/user.cfg |
| 21894 | ······register:·file_exists | 21894 | ······register:·file_exists |
| 21895 | ······when: | 21895 | ······when: |
| 21896 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21897 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21896 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21897 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21898 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21898 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21899 | ······tags: | 21899 | ······tags: |
| 21900 | ······-·CJIS-5.5.2.2 | 21900 | ······-·CJIS-5.5.2.2 |
| 21901 | ······-·NIST-800-171-3.4.5 | 21901 | ······-·NIST-800-171-3.4.5 |
| 21902 | ······-·NIST-800-53-AC-6(1) | 21902 | ······-·NIST-800-53-AC-6(1) |
| 21903 | ······-·NIST-800-53-CM-6(a) | 21903 | ······-·NIST-800-53-CM-6(a) |
| 21904 | ······-·PCI-DSS-Req-7.1 | 21904 | ······-·PCI-DSS-Req-7.1 |
| Offset 21911, 16 lines modified | Offset 21911, 16 lines modified | ||
| 21911 | ······-·no_reboot_needed | 21911 | ······-·no_reboot_needed |
| 21912 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 21912 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 21913 | ······file: | 21913 | ······file: |
| 21914 | ········path:·/boot/grub2/user.cfg | 21914 | ········path:·/boot/grub2/user.cfg |
| 21915 | ········group:·'0' | 21915 | ········group:·'0' |
| 21916 | ······when: | 21916 | ······when: |
| 21917 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21918 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21917 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21918 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21919 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21919 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21920 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21920 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21921 | ······tags: | 21921 | ······tags: |
| 21922 | ······-·CJIS-5.5.2.2 | 21922 | ······-·CJIS-5.5.2.2 |
| 21923 | ······-·NIST-800-171-3.4.5 | 21923 | ······-·NIST-800-171-3.4.5 |
| 21924 | ······-·NIST-800-53-AC-6(1) | 21924 | ······-·NIST-800-53-AC-6(1) |
| 21925 | ······-·NIST-800-53-CM-6(a) | 21925 | ······-·NIST-800-53-CM-6(a) |
| Offset 21950, 16 lines modified | Offset 21950, 16 lines modified | ||
| 21950 | ······-·no_reboot_needed | 21950 | ······-·no_reboot_needed |
| 21951 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21951 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21952 | ······stat: | 21952 | ······stat: |
| 21953 | ········path:·/boot/grub2/grub.cfg | 21953 | ········path:·/boot/grub2/grub.cfg |
| 21954 | ······register:·file_exists | 21954 | ······register:·file_exists |
| 21955 | ······when: | 21955 | ······when: |
| 21956 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21957 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21956 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21957 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21958 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21958 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21959 | ······tags: | 21959 | ······tags: |
| 21960 | ······-·CJIS-5.5.2.2 | 21960 | ······-·CJIS-5.5.2.2 |
| 21961 | ······-·NIST-800-171-3.4.5 | 21961 | ······-·NIST-800-171-3.4.5 |
| 21962 | ······-·NIST-800-53-AC-6(1) | 21962 | ······-·NIST-800-53-AC-6(1) |
| 21963 | ······-·NIST-800-53-CM-6(a) | 21963 | ······-·NIST-800-53-CM-6(a) |
| 21964 | ······-·PCI-DSS-Req-7.1 | 21964 | ······-·PCI-DSS-Req-7.1 |
| Offset 21971, 16 lines modified | Offset 21971, 16 lines modified | ||
| 21971 | ······-·no_reboot_needed | 21971 | ······-·no_reboot_needed |
| 21972 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 21972 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 21973 | ······file: | 21973 | ······file: |
| 21974 | ········path:·/boot/grub2/grub.cfg | 21974 | ········path:·/boot/grub2/grub.cfg |
| 21975 | ········owner:·'0' | 21975 | ········owner:·'0' |
| 21976 | ······when: | 21976 | ······when: |
| 21977 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21978 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21977 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21978 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21979 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21979 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21980 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21980 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21981 | ······tags: | 21981 | ······tags: |
| 21982 | ······-·CJIS-5.5.2.2 | 21982 | ······-·CJIS-5.5.2.2 |
| 21983 | ······-·NIST-800-171-3.4.5 | 21983 | ······-·NIST-800-171-3.4.5 |
| 21984 | ······-·NIST-800-53-AC-6(1) | 21984 | ······-·NIST-800-53-AC-6(1) |
| 21985 | ······-·NIST-800-53-CM-6(a) | 21985 | ······-·NIST-800-53-CM-6(a) |
| Offset 22010, 16 lines modified | Offset 22010, 16 lines modified | ||
| 22010 | ······-·no_reboot_needed | 22010 | ······-·no_reboot_needed |
| 22011 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22011 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22012 | ······stat: | 22012 | ······stat: |
| 22013 | ········path:·/boot/grub2/user.cfg | 22013 | ········path:·/boot/grub2/user.cfg |
| 22014 | ······register:·file_exists | 22014 | ······register:·file_exists |
| 22015 | ······when: | 22015 | ······when: |
| 22016 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22017 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22016 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22017 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22018 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22018 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22019 | ······tags: | 22019 | ······tags: |
| 22020 | ······-·CJIS-5.5.2.2 | 22020 | ······-·CJIS-5.5.2.2 |
| 22021 | ······-·NIST-800-171-3.4.5 | 22021 | ······-·NIST-800-171-3.4.5 |
| 22022 | ······-·NIST-800-53-AC-6(1) | 22022 | ······-·NIST-800-53-AC-6(1) |
| 22023 | ······-·NIST-800-53-CM-6(a) | 22023 | ······-·NIST-800-53-CM-6(a) |
| 22024 | ······-·PCI-DSS-Req-7.1 | 22024 | ······-·PCI-DSS-Req-7.1 |
| Offset 22031, 16 lines modified | Offset 22031, 16 lines modified | ||
| 22031 | ······-·no_reboot_needed | 22031 | ······-·no_reboot_needed |
| Max diff block lines reached; 11553/16224 bytes (71.21%) of diff not shown. | |||
| Offset 5312, 16 lines modified | Offset 5312, 16 lines modified | ||
| 5312 | ······-·no_reboot_needed | 5312 | ······-·no_reboot_needed |
| 5313 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5313 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5314 | ······stat: | 5314 | ······stat: |
| 5315 | ········path:·/boot/grub2/grub.cfg | 5315 | ········path:·/boot/grub2/grub.cfg |
| 5316 | ······register:·file_exists | 5316 | ······register:·file_exists |
| 5317 | ······when: | 5317 | ······when: |
| 5318 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5319 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5318 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5319 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5320 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5320 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5321 | ······tags: | 5321 | ······tags: |
| 5322 | ······-·CJIS-5.5.2.2 | 5322 | ······-·CJIS-5.5.2.2 |
| 5323 | ······-·NIST-800-171-3.4.5 | 5323 | ······-·NIST-800-171-3.4.5 |
| 5324 | ······-·NIST-800-53-AC-6(1) | 5324 | ······-·NIST-800-53-AC-6(1) |
| 5325 | ······-·NIST-800-53-CM-6(a) | 5325 | ······-·NIST-800-53-CM-6(a) |
| 5326 | ······-·PCI-DSS-Req-7.1 | 5326 | ······-·PCI-DSS-Req-7.1 |
| Offset 5333, 16 lines modified | Offset 5333, 16 lines modified | ||
| 5333 | ······-·no_reboot_needed | 5333 | ······-·no_reboot_needed |
| 5334 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5334 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5335 | ······file: | 5335 | ······file: |
| 5336 | ········path:·/boot/grub2/grub.cfg | 5336 | ········path:·/boot/grub2/grub.cfg |
| 5337 | ········group:·'0' | 5337 | ········group:·'0' |
| 5338 | ······when: | 5338 | ······when: |
| 5339 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5340 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5339 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5340 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5341 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5341 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5342 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5342 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5343 | ······tags: | 5343 | ······tags: |
| 5344 | ······-·CJIS-5.5.2.2 | 5344 | ······-·CJIS-5.5.2.2 |
| 5345 | ······-·NIST-800-171-3.4.5 | 5345 | ······-·NIST-800-171-3.4.5 |
| 5346 | ······-·NIST-800-53-AC-6(1) | 5346 | ······-·NIST-800-53-AC-6(1) |
| 5347 | ······-·NIST-800-53-CM-6(a) | 5347 | ······-·NIST-800-53-CM-6(a) |
| Offset 5372, 16 lines modified | Offset 5372, 16 lines modified | ||
| 5372 | ······-·no_reboot_needed | 5372 | ······-·no_reboot_needed |
| 5373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5374 | ······stat: | 5374 | ······stat: |
| 5375 | ········path:·/boot/grub2/user.cfg | 5375 | ········path:·/boot/grub2/user.cfg |
| 5376 | ······register:·file_exists | 5376 | ······register:·file_exists |
| 5377 | ······when: | 5377 | ······when: |
| 5378 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5379 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5378 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5379 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5381 | ······tags: | 5381 | ······tags: |
| 5382 | ······-·CJIS-5.5.2.2 | 5382 | ······-·CJIS-5.5.2.2 |
| 5383 | ······-·NIST-800-171-3.4.5 | 5383 | ······-·NIST-800-171-3.4.5 |
| 5384 | ······-·NIST-800-53-AC-6(1) | 5384 | ······-·NIST-800-53-AC-6(1) |
| 5385 | ······-·NIST-800-53-CM-6(a) | 5385 | ······-·NIST-800-53-CM-6(a) |
| 5386 | ······-·PCI-DSS-Req-7.1 | 5386 | ······-·PCI-DSS-Req-7.1 |
| Offset 5393, 16 lines modified | Offset 5393, 16 lines modified | ||
| 5393 | ······-·no_reboot_needed | 5393 | ······-·no_reboot_needed |
| 5394 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5394 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5395 | ······file: | 5395 | ······file: |
| 5396 | ········path:·/boot/grub2/user.cfg | 5396 | ········path:·/boot/grub2/user.cfg |
| 5397 | ········group:·'0' | 5397 | ········group:·'0' |
| 5398 | ······when: | 5398 | ······when: |
| 5399 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5400 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5399 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5400 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5401 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5401 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5402 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5402 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5403 | ······tags: | 5403 | ······tags: |
| 5404 | ······-·CJIS-5.5.2.2 | 5404 | ······-·CJIS-5.5.2.2 |
| 5405 | ······-·NIST-800-171-3.4.5 | 5405 | ······-·NIST-800-171-3.4.5 |
| 5406 | ······-·NIST-800-53-AC-6(1) | 5406 | ······-·NIST-800-53-AC-6(1) |
| 5407 | ······-·NIST-800-53-CM-6(a) | 5407 | ······-·NIST-800-53-CM-6(a) |
| Offset 5432, 16 lines modified | Offset 5432, 16 lines modified | ||
| 5432 | ······-·no_reboot_needed | 5432 | ······-·no_reboot_needed |
| 5433 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5433 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5434 | ······stat: | 5434 | ······stat: |
| 5435 | ········path:·/boot/grub2/grub.cfg | 5435 | ········path:·/boot/grub2/grub.cfg |
| 5436 | ······register:·file_exists | 5436 | ······register:·file_exists |
| 5437 | ······when: | 5437 | ······when: |
| 5438 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5439 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5438 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5439 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5440 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5440 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5441 | ······tags: | 5441 | ······tags: |
| 5442 | ······-·CJIS-5.5.2.2 | 5442 | ······-·CJIS-5.5.2.2 |
| 5443 | ······-·NIST-800-171-3.4.5 | 5443 | ······-·NIST-800-171-3.4.5 |
| 5444 | ······-·NIST-800-53-AC-6(1) | 5444 | ······-·NIST-800-53-AC-6(1) |
| 5445 | ······-·NIST-800-53-CM-6(a) | 5445 | ······-·NIST-800-53-CM-6(a) |
| 5446 | ······-·PCI-DSS-Req-7.1 | 5446 | ······-·PCI-DSS-Req-7.1 |
| Offset 5453, 16 lines modified | Offset 5453, 16 lines modified | ||
| 5453 | ······-·no_reboot_needed | 5453 | ······-·no_reboot_needed |
| 5454 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5454 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5455 | ······file: | 5455 | ······file: |
| 5456 | ········path:·/boot/grub2/grub.cfg | 5456 | ········path:·/boot/grub2/grub.cfg |
| 5457 | ········owner:·'0' | 5457 | ········owner:·'0' |
| 5458 | ······when: | 5458 | ······when: |
| 5459 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5460 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5459 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5460 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5461 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5461 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5462 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5462 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5463 | ······tags: | 5463 | ······tags: |
| 5464 | ······-·CJIS-5.5.2.2 | 5464 | ······-·CJIS-5.5.2.2 |
| 5465 | ······-·NIST-800-171-3.4.5 | 5465 | ······-·NIST-800-171-3.4.5 |
| 5466 | ······-·NIST-800-53-AC-6(1) | 5466 | ······-·NIST-800-53-AC-6(1) |
| 5467 | ······-·NIST-800-53-CM-6(a) | 5467 | ······-·NIST-800-53-CM-6(a) |
| Offset 5492, 16 lines modified | Offset 5492, 16 lines modified | ||
| 5492 | ······-·no_reboot_needed | 5492 | ······-·no_reboot_needed |
| 5493 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5493 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5494 | ······stat: | 5494 | ······stat: |
| 5495 | ········path:·/boot/grub2/user.cfg | 5495 | ········path:·/boot/grub2/user.cfg |
| 5496 | ······register:·file_exists | 5496 | ······register:·file_exists |
| 5497 | ······when: | 5497 | ······when: |
| 5498 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5499 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5498 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5499 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5500 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5500 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5501 | ······tags: | 5501 | ······tags: |
| 5502 | ······-·CJIS-5.5.2.2 | 5502 | ······-·CJIS-5.5.2.2 |
| 5503 | ······-·NIST-800-171-3.4.5 | 5503 | ······-·NIST-800-171-3.4.5 |
| 5504 | ······-·NIST-800-53-AC-6(1) | 5504 | ······-·NIST-800-53-AC-6(1) |
| 5505 | ······-·NIST-800-53-CM-6(a) | 5505 | ······-·NIST-800-53-CM-6(a) |
| 5506 | ······-·PCI-DSS-Req-7.1 | 5506 | ······-·PCI-DSS-Req-7.1 |
| Offset 5513, 16 lines modified | Offset 5513, 16 lines modified | ||
| 5513 | ······-·no_reboot_needed | 5513 | ······-·no_reboot_needed |
| Max diff block lines reached; 11521/16176 bytes (71.22%) of diff not shown. | |||
| Offset 5312, 16 lines modified | Offset 5312, 16 lines modified | ||
| 5312 | ······-·no_reboot_needed | 5312 | ······-·no_reboot_needed |
| 5313 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5313 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5314 | ······stat: | 5314 | ······stat: |
| 5315 | ········path:·/boot/grub2/grub.cfg | 5315 | ········path:·/boot/grub2/grub.cfg |
| 5316 | ······register:·file_exists | 5316 | ······register:·file_exists |
| 5317 | ······when: | 5317 | ······when: |
| 5318 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5319 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5318 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5319 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5320 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5320 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5321 | ······tags: | 5321 | ······tags: |
| 5322 | ······-·CJIS-5.5.2.2 | 5322 | ······-·CJIS-5.5.2.2 |
| 5323 | ······-·NIST-800-171-3.4.5 | 5323 | ······-·NIST-800-171-3.4.5 |
| 5324 | ······-·NIST-800-53-AC-6(1) | 5324 | ······-·NIST-800-53-AC-6(1) |
| 5325 | ······-·NIST-800-53-CM-6(a) | 5325 | ······-·NIST-800-53-CM-6(a) |
| 5326 | ······-·PCI-DSS-Req-7.1 | 5326 | ······-·PCI-DSS-Req-7.1 |
| Offset 5333, 16 lines modified | Offset 5333, 16 lines modified | ||
| 5333 | ······-·no_reboot_needed | 5333 | ······-·no_reboot_needed |
| 5334 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5334 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5335 | ······file: | 5335 | ······file: |
| 5336 | ········path:·/boot/grub2/grub.cfg | 5336 | ········path:·/boot/grub2/grub.cfg |
| 5337 | ········group:·'0' | 5337 | ········group:·'0' |
| 5338 | ······when: | 5338 | ······when: |
| 5339 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5340 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5339 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5340 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5341 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5341 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5342 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5342 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5343 | ······tags: | 5343 | ······tags: |
| 5344 | ······-·CJIS-5.5.2.2 | 5344 | ······-·CJIS-5.5.2.2 |
| 5345 | ······-·NIST-800-171-3.4.5 | 5345 | ······-·NIST-800-171-3.4.5 |
| 5346 | ······-·NIST-800-53-AC-6(1) | 5346 | ······-·NIST-800-53-AC-6(1) |
| 5347 | ······-·NIST-800-53-CM-6(a) | 5347 | ······-·NIST-800-53-CM-6(a) |
| Offset 5372, 16 lines modified | Offset 5372, 16 lines modified | ||
| 5372 | ······-·no_reboot_needed | 5372 | ······-·no_reboot_needed |
| 5373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5374 | ······stat: | 5374 | ······stat: |
| 5375 | ········path:·/boot/grub2/user.cfg | 5375 | ········path:·/boot/grub2/user.cfg |
| 5376 | ······register:·file_exists | 5376 | ······register:·file_exists |
| 5377 | ······when: | 5377 | ······when: |
| 5378 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5379 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5378 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5379 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5381 | ······tags: | 5381 | ······tags: |
| 5382 | ······-·CJIS-5.5.2.2 | 5382 | ······-·CJIS-5.5.2.2 |
| 5383 | ······-·NIST-800-171-3.4.5 | 5383 | ······-·NIST-800-171-3.4.5 |
| 5384 | ······-·NIST-800-53-AC-6(1) | 5384 | ······-·NIST-800-53-AC-6(1) |
| 5385 | ······-·NIST-800-53-CM-6(a) | 5385 | ······-·NIST-800-53-CM-6(a) |
| 5386 | ······-·PCI-DSS-Req-7.1 | 5386 | ······-·PCI-DSS-Req-7.1 |
| Offset 5393, 16 lines modified | Offset 5393, 16 lines modified | ||
| 5393 | ······-·no_reboot_needed | 5393 | ······-·no_reboot_needed |
| 5394 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5394 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5395 | ······file: | 5395 | ······file: |
| 5396 | ········path:·/boot/grub2/user.cfg | 5396 | ········path:·/boot/grub2/user.cfg |
| 5397 | ········group:·'0' | 5397 | ········group:·'0' |
| 5398 | ······when: | 5398 | ······when: |
| 5399 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5400 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5399 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5400 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5401 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5401 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5402 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5402 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5403 | ······tags: | 5403 | ······tags: |
| 5404 | ······-·CJIS-5.5.2.2 | 5404 | ······-·CJIS-5.5.2.2 |
| 5405 | ······-·NIST-800-171-3.4.5 | 5405 | ······-·NIST-800-171-3.4.5 |
| 5406 | ······-·NIST-800-53-AC-6(1) | 5406 | ······-·NIST-800-53-AC-6(1) |
| 5407 | ······-·NIST-800-53-CM-6(a) | 5407 | ······-·NIST-800-53-CM-6(a) |
| Offset 5432, 16 lines modified | Offset 5432, 16 lines modified | ||
| 5432 | ······-·no_reboot_needed | 5432 | ······-·no_reboot_needed |
| 5433 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5433 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5434 | ······stat: | 5434 | ······stat: |
| 5435 | ········path:·/boot/grub2/grub.cfg | 5435 | ········path:·/boot/grub2/grub.cfg |
| 5436 | ······register:·file_exists | 5436 | ······register:·file_exists |
| 5437 | ······when: | 5437 | ······when: |
| 5438 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5439 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5438 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5439 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5440 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5440 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5441 | ······tags: | 5441 | ······tags: |
| 5442 | ······-·CJIS-5.5.2.2 | 5442 | ······-·CJIS-5.5.2.2 |
| 5443 | ······-·NIST-800-171-3.4.5 | 5443 | ······-·NIST-800-171-3.4.5 |
| 5444 | ······-·NIST-800-53-AC-6(1) | 5444 | ······-·NIST-800-53-AC-6(1) |
| 5445 | ······-·NIST-800-53-CM-6(a) | 5445 | ······-·NIST-800-53-CM-6(a) |
| 5446 | ······-·PCI-DSS-Req-7.1 | 5446 | ······-·PCI-DSS-Req-7.1 |
| Offset 5453, 16 lines modified | Offset 5453, 16 lines modified | ||
| 5453 | ······-·no_reboot_needed | 5453 | ······-·no_reboot_needed |
| 5454 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5454 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5455 | ······file: | 5455 | ······file: |
| 5456 | ········path:·/boot/grub2/grub.cfg | 5456 | ········path:·/boot/grub2/grub.cfg |
| 5457 | ········owner:·'0' | 5457 | ········owner:·'0' |
| 5458 | ······when: | 5458 | ······when: |
| 5459 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5460 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5459 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5460 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5461 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5461 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5462 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5462 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5463 | ······tags: | 5463 | ······tags: |
| 5464 | ······-·CJIS-5.5.2.2 | 5464 | ······-·CJIS-5.5.2.2 |
| 5465 | ······-·NIST-800-171-3.4.5 | 5465 | ······-·NIST-800-171-3.4.5 |
| 5466 | ······-·NIST-800-53-AC-6(1) | 5466 | ······-·NIST-800-53-AC-6(1) |
| 5467 | ······-·NIST-800-53-CM-6(a) | 5467 | ······-·NIST-800-53-CM-6(a) |
| Offset 5492, 16 lines modified | Offset 5492, 16 lines modified | ||
| 5492 | ······-·no_reboot_needed | 5492 | ······-·no_reboot_needed |
| 5493 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5493 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5494 | ······stat: | 5494 | ······stat: |
| 5495 | ········path:·/boot/grub2/user.cfg | 5495 | ········path:·/boot/grub2/user.cfg |
| 5496 | ······register:·file_exists | 5496 | ······register:·file_exists |
| 5497 | ······when: | 5497 | ······when: |
| 5498 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5499 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5498 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5499 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5500 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5500 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5501 | ······tags: | 5501 | ······tags: |
| 5502 | ······-·CJIS-5.5.2.2 | 5502 | ······-·CJIS-5.5.2.2 |
| 5503 | ······-·NIST-800-171-3.4.5 | 5503 | ······-·NIST-800-171-3.4.5 |
| 5504 | ······-·NIST-800-53-AC-6(1) | 5504 | ······-·NIST-800-53-AC-6(1) |
| 5505 | ······-·NIST-800-53-CM-6(a) | 5505 | ······-·NIST-800-53-CM-6(a) |
| 5506 | ······-·PCI-DSS-Req-7.1 | 5506 | ······-·PCI-DSS-Req-7.1 |
| Offset 5513, 16 lines modified | Offset 5513, 16 lines modified | ||
| 5513 | ······-·no_reboot_needed | 5513 | ······-·no_reboot_needed |
| Max diff block lines reached; 11521/16176 bytes (71.22%) of diff not shown. | |||
| Offset 21830, 16 lines modified | Offset 21830, 16 lines modified | ||
| 21830 | ······-·no_reboot_needed | 21830 | ······-·no_reboot_needed |
| 21831 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21831 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21832 | ······stat: | 21832 | ······stat: |
| 21833 | ········path:·/boot/grub2/grub.cfg | 21833 | ········path:·/boot/grub2/grub.cfg |
| 21834 | ······register:·file_exists | 21834 | ······register:·file_exists |
| 21835 | ······when: | 21835 | ······when: |
| 21836 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21837 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21836 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21837 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21838 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21838 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21839 | ······tags: | 21839 | ······tags: |
| 21840 | ······-·CJIS-5.5.2.2 | 21840 | ······-·CJIS-5.5.2.2 |
| 21841 | ······-·NIST-800-171-3.4.5 | 21841 | ······-·NIST-800-171-3.4.5 |
| 21842 | ······-·NIST-800-53-AC-6(1) | 21842 | ······-·NIST-800-53-AC-6(1) |
| 21843 | ······-·NIST-800-53-CM-6(a) | 21843 | ······-·NIST-800-53-CM-6(a) |
| 21844 | ······-·PCI-DSS-Req-7.1 | 21844 | ······-·PCI-DSS-Req-7.1 |
| Offset 21851, 16 lines modified | Offset 21851, 16 lines modified | ||
| 21851 | ······-·no_reboot_needed | 21851 | ······-·no_reboot_needed |
| 21852 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 21852 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 21853 | ······file: | 21853 | ······file: |
| 21854 | ········path:·/boot/grub2/grub.cfg | 21854 | ········path:·/boot/grub2/grub.cfg |
| 21855 | ········group:·'0' | 21855 | ········group:·'0' |
| 21856 | ······when: | 21856 | ······when: |
| 21857 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21858 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21857 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21858 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21859 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21859 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21860 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21860 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21861 | ······tags: | 21861 | ······tags: |
| 21862 | ······-·CJIS-5.5.2.2 | 21862 | ······-·CJIS-5.5.2.2 |
| 21863 | ······-·NIST-800-171-3.4.5 | 21863 | ······-·NIST-800-171-3.4.5 |
| 21864 | ······-·NIST-800-53-AC-6(1) | 21864 | ······-·NIST-800-53-AC-6(1) |
| 21865 | ······-·NIST-800-53-CM-6(a) | 21865 | ······-·NIST-800-53-CM-6(a) |
| Offset 21890, 16 lines modified | Offset 21890, 16 lines modified | ||
| 21890 | ······-·no_reboot_needed | 21890 | ······-·no_reboot_needed |
| 21891 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21891 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21892 | ······stat: | 21892 | ······stat: |
| 21893 | ········path:·/boot/grub2/user.cfg | 21893 | ········path:·/boot/grub2/user.cfg |
| 21894 | ······register:·file_exists | 21894 | ······register:·file_exists |
| 21895 | ······when: | 21895 | ······when: |
| 21896 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21897 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21896 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21897 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21898 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21898 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21899 | ······tags: | 21899 | ······tags: |
| 21900 | ······-·CJIS-5.5.2.2 | 21900 | ······-·CJIS-5.5.2.2 |
| 21901 | ······-·NIST-800-171-3.4.5 | 21901 | ······-·NIST-800-171-3.4.5 |
| 21902 | ······-·NIST-800-53-AC-6(1) | 21902 | ······-·NIST-800-53-AC-6(1) |
| 21903 | ······-·NIST-800-53-CM-6(a) | 21903 | ······-·NIST-800-53-CM-6(a) |
| 21904 | ······-·PCI-DSS-Req-7.1 | 21904 | ······-·PCI-DSS-Req-7.1 |
| Offset 21911, 16 lines modified | Offset 21911, 16 lines modified | ||
| 21911 | ······-·no_reboot_needed | 21911 | ······-·no_reboot_needed |
| 21912 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 21912 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 21913 | ······file: | 21913 | ······file: |
| 21914 | ········path:·/boot/grub2/user.cfg | 21914 | ········path:·/boot/grub2/user.cfg |
| 21915 | ········group:·'0' | 21915 | ········group:·'0' |
| 21916 | ······when: | 21916 | ······when: |
| 21917 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21918 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21917 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21918 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21919 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21919 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21920 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21920 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21921 | ······tags: | 21921 | ······tags: |
| 21922 | ······-·CJIS-5.5.2.2 | 21922 | ······-·CJIS-5.5.2.2 |
| 21923 | ······-·NIST-800-171-3.4.5 | 21923 | ······-·NIST-800-171-3.4.5 |
| 21924 | ······-·NIST-800-53-AC-6(1) | 21924 | ······-·NIST-800-53-AC-6(1) |
| 21925 | ······-·NIST-800-53-CM-6(a) | 21925 | ······-·NIST-800-53-CM-6(a) |
| Offset 21950, 16 lines modified | Offset 21950, 16 lines modified | ||
| 21950 | ······-·no_reboot_needed | 21950 | ······-·no_reboot_needed |
| 21951 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21951 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21952 | ······stat: | 21952 | ······stat: |
| 21953 | ········path:·/boot/grub2/grub.cfg | 21953 | ········path:·/boot/grub2/grub.cfg |
| 21954 | ······register:·file_exists | 21954 | ······register:·file_exists |
| 21955 | ······when: | 21955 | ······when: |
| 21956 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21957 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21956 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21957 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21958 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21958 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21959 | ······tags: | 21959 | ······tags: |
| 21960 | ······-·CJIS-5.5.2.2 | 21960 | ······-·CJIS-5.5.2.2 |
| 21961 | ······-·NIST-800-171-3.4.5 | 21961 | ······-·NIST-800-171-3.4.5 |
| 21962 | ······-·NIST-800-53-AC-6(1) | 21962 | ······-·NIST-800-53-AC-6(1) |
| 21963 | ······-·NIST-800-53-CM-6(a) | 21963 | ······-·NIST-800-53-CM-6(a) |
| 21964 | ······-·PCI-DSS-Req-7.1 | 21964 | ······-·PCI-DSS-Req-7.1 |
| Offset 21971, 16 lines modified | Offset 21971, 16 lines modified | ||
| 21971 | ······-·no_reboot_needed | 21971 | ······-·no_reboot_needed |
| 21972 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 21972 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 21973 | ······file: | 21973 | ······file: |
| 21974 | ········path:·/boot/grub2/grub.cfg | 21974 | ········path:·/boot/grub2/grub.cfg |
| 21975 | ········owner:·'0' | 21975 | ········owner:·'0' |
| 21976 | ······when: | 21976 | ······when: |
| 21977 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21978 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21977 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21978 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21979 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21979 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21980 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21980 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21981 | ······tags: | 21981 | ······tags: |
| 21982 | ······-·CJIS-5.5.2.2 | 21982 | ······-·CJIS-5.5.2.2 |
| 21983 | ······-·NIST-800-171-3.4.5 | 21983 | ······-·NIST-800-171-3.4.5 |
| 21984 | ······-·NIST-800-53-AC-6(1) | 21984 | ······-·NIST-800-53-AC-6(1) |
| 21985 | ······-·NIST-800-53-CM-6(a) | 21985 | ······-·NIST-800-53-CM-6(a) |
| Offset 22010, 16 lines modified | Offset 22010, 16 lines modified | ||
| 22010 | ······-·no_reboot_needed | 22010 | ······-·no_reboot_needed |
| 22011 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22011 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22012 | ······stat: | 22012 | ······stat: |
| 22013 | ········path:·/boot/grub2/user.cfg | 22013 | ········path:·/boot/grub2/user.cfg |
| 22014 | ······register:·file_exists | 22014 | ······register:·file_exists |
| 22015 | ······when: | 22015 | ······when: |
| 22016 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22017 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22016 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22017 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22018 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22018 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22019 | ······tags: | 22019 | ······tags: |
| 22020 | ······-·CJIS-5.5.2.2 | 22020 | ······-·CJIS-5.5.2.2 |
| 22021 | ······-·NIST-800-171-3.4.5 | 22021 | ······-·NIST-800-171-3.4.5 |
| 22022 | ······-·NIST-800-53-AC-6(1) | 22022 | ······-·NIST-800-53-AC-6(1) |
| 22023 | ······-·NIST-800-53-CM-6(a) | 22023 | ······-·NIST-800-53-CM-6(a) |
| 22024 | ······-·PCI-DSS-Req-7.1 | 22024 | ······-·PCI-DSS-Req-7.1 |
| Offset 22031, 16 lines modified | Offset 22031, 16 lines modified | ||
| 22031 | ······-·no_reboot_needed | 22031 | ······-·no_reboot_needed |
| Max diff block lines reached; 11553/16224 bytes (71.21%) of diff not shown. | |||
| Offset 13554, 16 lines modified | Offset 13554, 16 lines modified | ||
| 13554 | ······-·no_reboot_needed | 13554 | ······-·no_reboot_needed |
| 13555 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 13555 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 13556 | ······stat: | 13556 | ······stat: |
| 13557 | ········path:·/boot/grub2/grub.cfg | 13557 | ········path:·/boot/grub2/grub.cfg |
| 13558 | ······register:·file_exists | 13558 | ······register:·file_exists |
| 13559 | ······when: | 13559 | ······when: |
| 13560 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13561 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13560 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13561 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13562 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13562 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13563 | ······tags: | 13563 | ······tags: |
| 13564 | ······-·CJIS-5.5.2.2 | 13564 | ······-·CJIS-5.5.2.2 |
| 13565 | ······-·NIST-800-171-3.4.5 | 13565 | ······-·NIST-800-171-3.4.5 |
| 13566 | ······-·NIST-800-53-AC-6(1) | 13566 | ······-·NIST-800-53-AC-6(1) |
| 13567 | ······-·NIST-800-53-CM-6(a) | 13567 | ······-·NIST-800-53-CM-6(a) |
| 13568 | ······-·PCI-DSS-Req-7.1 | 13568 | ······-·PCI-DSS-Req-7.1 |
| Offset 13575, 16 lines modified | Offset 13575, 16 lines modified | ||
| 13575 | ······-·no_reboot_needed | 13575 | ······-·no_reboot_needed |
| 13576 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 13576 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 13577 | ······file: | 13577 | ······file: |
| 13578 | ········path:·/boot/grub2/grub.cfg | 13578 | ········path:·/boot/grub2/grub.cfg |
| 13579 | ········group:·'0' | 13579 | ········group:·'0' |
| 13580 | ······when: | 13580 | ······when: |
| 13581 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13582 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13581 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13582 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13583 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13583 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13584 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 13584 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 13585 | ······tags: | 13585 | ······tags: |
| 13586 | ······-·CJIS-5.5.2.2 | 13586 | ······-·CJIS-5.5.2.2 |
| 13587 | ······-·NIST-800-171-3.4.5 | 13587 | ······-·NIST-800-171-3.4.5 |
| 13588 | ······-·NIST-800-53-AC-6(1) | 13588 | ······-·NIST-800-53-AC-6(1) |
| 13589 | ······-·NIST-800-53-CM-6(a) | 13589 | ······-·NIST-800-53-CM-6(a) |
| Offset 13614, 16 lines modified | Offset 13614, 16 lines modified | ||
| 13614 | ······-·no_reboot_needed | 13614 | ······-·no_reboot_needed |
| 13615 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 13615 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 13616 | ······stat: | 13616 | ······stat: |
| 13617 | ········path:·/boot/grub2/grub.cfg | 13617 | ········path:·/boot/grub2/grub.cfg |
| 13618 | ······register:·file_exists | 13618 | ······register:·file_exists |
| 13619 | ······when: | 13619 | ······when: |
| 13620 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13621 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13620 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13621 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13622 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13622 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13623 | ······tags: | 13623 | ······tags: |
| 13624 | ······-·CJIS-5.5.2.2 | 13624 | ······-·CJIS-5.5.2.2 |
| 13625 | ······-·NIST-800-171-3.4.5 | 13625 | ······-·NIST-800-171-3.4.5 |
| 13626 | ······-·NIST-800-53-AC-6(1) | 13626 | ······-·NIST-800-53-AC-6(1) |
| 13627 | ······-·NIST-800-53-CM-6(a) | 13627 | ······-·NIST-800-53-CM-6(a) |
| 13628 | ······-·PCI-DSS-Req-7.1 | 13628 | ······-·PCI-DSS-Req-7.1 |
| Offset 13635, 16 lines modified | Offset 13635, 16 lines modified | ||
| 13635 | ······-·no_reboot_needed | 13635 | ······-·no_reboot_needed |
| 13636 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 13636 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 13637 | ······file: | 13637 | ······file: |
| 13638 | ········path:·/boot/grub2/grub.cfg | 13638 | ········path:·/boot/grub2/grub.cfg |
| 13639 | ········owner:·'0' | 13639 | ········owner:·'0' |
| 13640 | ······when: | 13640 | ······when: |
| 13641 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13642 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13641 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13642 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13643 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13643 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13644 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 13644 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 13645 | ······tags: | 13645 | ······tags: |
| 13646 | ······-·CJIS-5.5.2.2 | 13646 | ······-·CJIS-5.5.2.2 |
| 13647 | ······-·NIST-800-171-3.4.5 | 13647 | ······-·NIST-800-171-3.4.5 |
| 13648 | ······-·NIST-800-53-AC-6(1) | 13648 | ······-·NIST-800-53-AC-6(1) |
| 13649 | ······-·NIST-800-53-CM-6(a) | 13649 | ······-·NIST-800-53-CM-6(a) |
| Offset 22210, 16 lines modified | Offset 22210, 16 lines modified | ||
| 22210 | ······-·no_reboot_needed | 22210 | ······-·no_reboot_needed |
| 22211 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22211 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22212 | ······stat: | 22212 | ······stat: |
| 22213 | ········path:·/boot/grub2/grub.cfg | 22213 | ········path:·/boot/grub2/grub.cfg |
| 22214 | ······register:·file_exists | 22214 | ······register:·file_exists |
| 22215 | ······when: | 22215 | ······when: |
| 22216 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22217 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22216 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22217 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22218 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22218 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22219 | ······tags: | 22219 | ······tags: |
| 22220 | ······-·CJIS-5.5.2.2 | 22220 | ······-·CJIS-5.5.2.2 |
| 22221 | ······-·NIST-800-171-3.4.5 | 22221 | ······-·NIST-800-171-3.4.5 |
| 22222 | ······-·NIST-800-53-AC-6(1) | 22222 | ······-·NIST-800-53-AC-6(1) |
| 22223 | ······-·NIST-800-53-CM-6(a) | 22223 | ······-·NIST-800-53-CM-6(a) |
| 22224 | ······-·PCI-DSS-Req-7.1 | 22224 | ······-·PCI-DSS-Req-7.1 |
| Offset 22231, 16 lines modified | Offset 22231, 16 lines modified | ||
| 22231 | ······-·no_reboot_needed | 22231 | ······-·no_reboot_needed |
| 22232 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 22232 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 22233 | ······file: | 22233 | ······file: |
| 22234 | ········path:·/boot/grub2/grub.cfg | 22234 | ········path:·/boot/grub2/grub.cfg |
| 22235 | ········group:·'0' | 22235 | ········group:·'0' |
| 22236 | ······when: | 22236 | ······when: |
| 22237 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22238 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22237 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22238 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22241 | ······tags: | 22241 | ······tags: |
| 22242 | ······-·CJIS-5.5.2.2 | 22242 | ······-·CJIS-5.5.2.2 |
| 22243 | ······-·NIST-800-171-3.4.5 | 22243 | ······-·NIST-800-171-3.4.5 |
| 22244 | ······-·NIST-800-53-AC-6(1) | 22244 | ······-·NIST-800-53-AC-6(1) |
| 22245 | ······-·NIST-800-53-CM-6(a) | 22245 | ······-·NIST-800-53-CM-6(a) |
| Offset 22270, 16 lines modified | Offset 22270, 16 lines modified | ||
| 22270 | ······-·no_reboot_needed | 22270 | ······-·no_reboot_needed |
| 22271 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22271 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22272 | ······stat: | 22272 | ······stat: |
| 22273 | ········path:·/boot/grub2/grub.cfg | 22273 | ········path:·/boot/grub2/grub.cfg |
| 22274 | ······register:·file_exists | 22274 | ······register:·file_exists |
| 22275 | ······when: | 22275 | ······when: |
| 22276 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22277 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22276 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22277 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22278 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22278 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22279 | ······tags: | 22279 | ······tags: |
| 22280 | ······-·CJIS-5.5.2.2 | 22280 | ······-·CJIS-5.5.2.2 |
| 22281 | ······-·NIST-800-171-3.4.5 | 22281 | ······-·NIST-800-171-3.4.5 |
| 22282 | ······-·NIST-800-53-AC-6(1) | 22282 | ······-·NIST-800-53-AC-6(1) |
| 22283 | ······-·NIST-800-53-CM-6(a) | 22283 | ······-·NIST-800-53-CM-6(a) |
| 22284 | ······-·PCI-DSS-Req-7.1 | 22284 | ······-·PCI-DSS-Req-7.1 |
| Offset 22291, 16 lines modified | Offset 22291, 16 lines modified | ||
| 22291 | ······-·no_reboot_needed | 22291 | ······-·no_reboot_needed |
| 22292 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 22292 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 22293 | ······file: | 22293 | ······file: |
| 22294 | ········path:·/boot/grub2/grub.cfg | 22294 | ········path:·/boot/grub2/grub.cfg |
| 22295 | ········owner:·'0' | 22295 | ········owner:·'0' |
| 22296 | ······when: | 22296 | ······when: |
| 22297 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22298 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22297 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22298 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22299 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22299 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22300 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22300 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22301 | ······tags: | 22301 | ······tags: |
| 22302 | ······-·CJIS-5.5.2.2 | 22302 | ······-·CJIS-5.5.2.2 |
| 22303 | ······-·NIST-800-171-3.4.5 | 22303 | ······-·NIST-800-171-3.4.5 |
| 22304 | ······-·NIST-800-53-AC-6(1) | 22304 | ······-·NIST-800-53-AC-6(1) |
| 22305 | ······-·NIST-800-53-CM-6(a) | 22305 | ······-·NIST-800-53-CM-6(a) |
| Offset 22991, 16 lines modified | Offset 22991, 16 lines modified | ||
| 22991 | ······-·no_reboot_needed | 22991 | ······-·no_reboot_needed |
| 22992 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22992 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22993 | ······stat: | 22993 | ······stat: |
| 22994 | ········path:·/boot/grub2/grub.cfg | 22994 | ········path:·/boot/grub2/grub.cfg |
| 22995 | ······register:·file_exists | 22995 | ······register:·file_exists |
| 22996 | ······when: | 22996 | ······when: |
| 22997 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22998 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22997 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22998 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22999 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22999 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23000 | ······tags: | 23000 | ······tags: |
| 23001 | ······-·CJIS-5.5.2.2 | 23001 | ······-·CJIS-5.5.2.2 |
| 23002 | ······-·NIST-800-171-3.4.5 | 23002 | ······-·NIST-800-171-3.4.5 |
| 23003 | ······-·NIST-800-53-AC-6(1) | 23003 | ······-·NIST-800-53-AC-6(1) |
| 23004 | ······-·NIST-800-53-CM-6(a) | 23004 | ······-·NIST-800-53-CM-6(a) |
| 23005 | ······-·PCI-DSS-Req-7.1 | 23005 | ······-·PCI-DSS-Req-7.1 |
| Offset 23012, 16 lines modified | Offset 23012, 16 lines modified | ||
| 23012 | ······-·no_reboot_needed | 23012 | ······-·no_reboot_needed |
| 23013 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 23013 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 23014 | ······file: | 23014 | ······file: |
| 23015 | ········path:·/boot/grub2/grub.cfg | 23015 | ········path:·/boot/grub2/grub.cfg |
| 23016 | ········group:·'0' | 23016 | ········group:·'0' |
| 23017 | ······when: | 23017 | ······when: |
| 23018 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23019 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23018 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23019 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23020 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23020 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23021 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 23021 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 23022 | ······tags: | 23022 | ······tags: |
| 23023 | ······-·CJIS-5.5.2.2 | 23023 | ······-·CJIS-5.5.2.2 |
| 23024 | ······-·NIST-800-171-3.4.5 | 23024 | ······-·NIST-800-171-3.4.5 |
| 23025 | ······-·NIST-800-53-AC-6(1) | 23025 | ······-·NIST-800-53-AC-6(1) |
| 23026 | ······-·NIST-800-53-CM-6(a) | 23026 | ······-·NIST-800-53-CM-6(a) |
| Offset 23051, 16 lines modified | Offset 23051, 16 lines modified | ||
| 23051 | ······-·no_reboot_needed | 23051 | ······-·no_reboot_needed |
| 23052 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 23052 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 23053 | ······stat: | 23053 | ······stat: |
| 23054 | ········path:·/boot/grub2/grub.cfg | 23054 | ········path:·/boot/grub2/grub.cfg |
| 23055 | ······register:·file_exists | 23055 | ······register:·file_exists |
| 23056 | ······when: | 23056 | ······when: |
| 23057 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23058 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23057 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23058 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23059 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23059 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23060 | ······tags: | 23060 | ······tags: |
| 23061 | ······-·CJIS-5.5.2.2 | 23061 | ······-·CJIS-5.5.2.2 |
| 23062 | ······-·NIST-800-171-3.4.5 | 23062 | ······-·NIST-800-171-3.4.5 |
| 23063 | ······-·NIST-800-53-AC-6(1) | 23063 | ······-·NIST-800-53-AC-6(1) |
| 23064 | ······-·NIST-800-53-CM-6(a) | 23064 | ······-·NIST-800-53-CM-6(a) |
| 23065 | ······-·PCI-DSS-Req-7.1 | 23065 | ······-·PCI-DSS-Req-7.1 |
| Offset 23072, 16 lines modified | Offset 23072, 16 lines modified | ||
| 23072 | ······-·no_reboot_needed | 23072 | ······-·no_reboot_needed |
| 23073 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 23073 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 23074 | ······file: | 23074 | ······file: |
| 23075 | ········path:·/boot/grub2/grub.cfg | 23075 | ········path:·/boot/grub2/grub.cfg |
| 23076 | ········owner:·'0' | 23076 | ········owner:·'0' |
| 23077 | ······when: | 23077 | ······when: |
| 23078 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23079 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23078 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23079 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23080 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23080 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23081 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 23081 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 23082 | ······tags: | 23082 | ······tags: |
| 23083 | ······-·CJIS-5.5.2.2 | 23083 | ······-·CJIS-5.5.2.2 |
| 23084 | ······-·NIST-800-171-3.4.5 | 23084 | ······-·NIST-800-171-3.4.5 |
| 23085 | ······-·NIST-800-53-AC-6(1) | 23085 | ······-·NIST-800-53-AC-6(1) |
| 23086 | ······-·NIST-800-53-CM-6(a) | 23086 | ······-·NIST-800-53-CM-6(a) |
| Offset 3210, 16 lines modified | Offset 3210, 16 lines modified | ||
| 3210 | ······-·no_reboot_needed | 3210 | ······-·no_reboot_needed |
| 3211 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 3211 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3212 | ······stat: | 3212 | ······stat: |
| 3213 | ········path:·/boot/grub2/grub.cfg | 3213 | ········path:·/boot/grub2/grub.cfg |
| 3214 | ······register:·file_exists | 3214 | ······register:·file_exists |
| 3215 | ······when: | 3215 | ······when: |
| 3216 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3217 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3216 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3217 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3218 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3218 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3219 | ······tags: | 3219 | ······tags: |
| 3220 | ······-·CJIS-5.5.2.2 | 3220 | ······-·CJIS-5.5.2.2 |
| 3221 | ······-·NIST-800-171-3.4.5 | 3221 | ······-·NIST-800-171-3.4.5 |
| 3222 | ······-·NIST-800-53-AC-6(1) | 3222 | ······-·NIST-800-53-AC-6(1) |
| 3223 | ······-·NIST-800-53-CM-6(a) | 3223 | ······-·NIST-800-53-CM-6(a) |
| 3224 | ······-·PCI-DSS-Req-7.1 | 3224 | ······-·PCI-DSS-Req-7.1 |
| Offset 3231, 16 lines modified | Offset 3231, 16 lines modified | ||
| 3231 | ······-·no_reboot_needed | 3231 | ······-·no_reboot_needed |
| 3232 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 3232 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 3233 | ······file: | 3233 | ······file: |
| 3234 | ········path:·/boot/grub2/grub.cfg | 3234 | ········path:·/boot/grub2/grub.cfg |
| 3235 | ········group:·'0' | 3235 | ········group:·'0' |
| 3236 | ······when: | 3236 | ······when: |
| 3237 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3238 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3237 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3238 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3241 | ······tags: | 3241 | ······tags: |
| 3242 | ······-·CJIS-5.5.2.2 | 3242 | ······-·CJIS-5.5.2.2 |
| 3243 | ······-·NIST-800-171-3.4.5 | 3243 | ······-·NIST-800-171-3.4.5 |
| 3244 | ······-·NIST-800-53-AC-6(1) | 3244 | ······-·NIST-800-53-AC-6(1) |
| 3245 | ······-·NIST-800-53-CM-6(a) | 3245 | ······-·NIST-800-53-CM-6(a) |
| Offset 3270, 16 lines modified | Offset 3270, 16 lines modified | ||
| 3270 | ······-·no_reboot_needed | 3270 | ······-·no_reboot_needed |
| 3271 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 3271 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3272 | ······stat: | 3272 | ······stat: |
| 3273 | ········path:·/boot/grub2/grub.cfg | 3273 | ········path:·/boot/grub2/grub.cfg |
| 3274 | ······register:·file_exists | 3274 | ······register:·file_exists |
| 3275 | ······when: | 3275 | ······when: |
| 3276 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3277 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3276 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3277 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3278 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3278 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3279 | ······tags: | 3279 | ······tags: |
| 3280 | ······-·CJIS-5.5.2.2 | 3280 | ······-·CJIS-5.5.2.2 |
| 3281 | ······-·NIST-800-171-3.4.5 | 3281 | ······-·NIST-800-171-3.4.5 |
| 3282 | ······-·NIST-800-53-AC-6(1) | 3282 | ······-·NIST-800-53-AC-6(1) |
| 3283 | ······-·NIST-800-53-CM-6(a) | 3283 | ······-·NIST-800-53-CM-6(a) |
| 3284 | ······-·PCI-DSS-Req-7.1 | 3284 | ······-·PCI-DSS-Req-7.1 |
| Offset 3291, 16 lines modified | Offset 3291, 16 lines modified | ||
| 3291 | ······-·no_reboot_needed | 3291 | ······-·no_reboot_needed |
| 3292 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 3292 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 3293 | ······file: | 3293 | ······file: |
| 3294 | ········path:·/boot/grub2/grub.cfg | 3294 | ········path:·/boot/grub2/grub.cfg |
| 3295 | ········owner:·'0' | 3295 | ········owner:·'0' |
| 3296 | ······when: | 3296 | ······when: |
| 3297 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3298 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3297 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3298 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3299 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3299 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3300 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3300 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3301 | ······tags: | 3301 | ······tags: |
| 3302 | ······-·CJIS-5.5.2.2 | 3302 | ······-·CJIS-5.5.2.2 |
| 3303 | ······-·NIST-800-171-3.4.5 | 3303 | ······-·NIST-800-171-3.4.5 |
| 3304 | ······-·NIST-800-53-AC-6(1) | 3304 | ······-·NIST-800-53-AC-6(1) |
| 3305 | ······-·NIST-800-53-CM-6(a) | 3305 | ······-·NIST-800-53-CM-6(a) |
| Offset 3328, 16 lines modified | Offset 3328, 16 lines modified | ||
| 3328 | ······-·no_reboot_needed | 3328 | ······-·no_reboot_needed |
| 3329 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 3329 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3330 | ······stat: | 3330 | ······stat: |
| 3331 | ········path:·/boot/grub2/grub.cfg | 3331 | ········path:·/boot/grub2/grub.cfg |
| 3332 | ······register:·file_exists | 3332 | ······register:·file_exists |
| 3333 | ······when: | 3333 | ······when: |
| 3334 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3335 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3334 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3335 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3336 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3336 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3337 | ······tags: | 3337 | ······tags: |
| 3338 | ······-·NIST-800-171-3.4.5 | 3338 | ······-·NIST-800-171-3.4.5 |
| 3339 | ······-·NIST-800-53-AC-6(1) | 3339 | ······-·NIST-800-53-AC-6(1) |
| 3340 | ······-·NIST-800-53-CM-6(a) | 3340 | ······-·NIST-800-53-CM-6(a) |
| 3341 | ······-·configure_strategy | 3341 | ······-·configure_strategy |
| 3342 | ······-·file_permissions_grub2_cfg | 3342 | ······-·file_permissions_grub2_cfg |
| Offset 3347, 16 lines modified | Offset 3347, 16 lines modified | ||
| 3347 | ······-·no_reboot_needed | 3347 | ······-·no_reboot_needed |
| 3348 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 3348 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 3349 | ······file: | 3349 | ······file: |
| 3350 | ········path:·/boot/grub2/grub.cfg | 3350 | ········path:·/boot/grub2/grub.cfg |
| 3351 | ········mode:·u-xs,g-xwrs,o-xwrt | 3351 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 3352 | ······when: | 3352 | ······when: |
| 3353 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3354 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3353 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3354 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3355 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3355 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3356 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3356 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3357 | ······tags: | 3357 | ······tags: |
| 3358 | ······-·NIST-800-171-3.4.5 | 3358 | ······-·NIST-800-171-3.4.5 |
| 3359 | ······-·NIST-800-53-AC-6(1) | 3359 | ······-·NIST-800-53-AC-6(1) |
| 3360 | ······-·NIST-800-53-CM-6(a) | 3360 | ······-·NIST-800-53-CM-6(a) |
| 3361 | ······-·configure_strategy | 3361 | ······-·configure_strategy |
| Offset 37476, 16 lines modified | Offset 37476, 16 lines modified | ||
| 37476 | ········lineinfile: | 37476 | ········lineinfile: |
| 37477 | ··········path:·/etc/postfix/main.cf | 37477 | ··········path:·/etc/postfix/main.cf |
| 37478 | ··········create:·true | 37478 | ··········create:·true |
| 37479 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 37479 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 37480 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 37480 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 37481 | ··········state:·present | 37481 | ··········state:·present |
| 37482 | ······when: | 37482 | ······when: |
| 37483 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 37484 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37483 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37484 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 37485 | ······tags: | 37485 | ······tags: |
| 37486 | ······-·DISA-STIG-RHEL-08-040290 | 37486 | ······-·DISA-STIG-RHEL-08-040290 |
| 37487 | ······-·low_complexity | 37487 | ······-·low_complexity |
| 37488 | ······-·low_disruption | 37488 | ······-·low_disruption |
| 37489 | ······-·medium_severity | 37489 | ······-·medium_severity |
| 37490 | ······-·no_reboot_needed | 37490 | ······-·no_reboot_needed |
| 37491 | ······-·postfix_prevent_unrestricted_relay | 37491 | ······-·postfix_prevent_unrestricted_relay |
| Offset 37467, 16 lines modified | Offset 37467, 16 lines modified | ||
| 37467 | ········lineinfile: | 37467 | ········lineinfile: |
| 37468 | ··········path:·/etc/postfix/main.cf | 37468 | ··········path:·/etc/postfix/main.cf |
| 37469 | ··········create:·true | 37469 | ··········create:·true |
| 37470 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 37470 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 37471 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 37471 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 37472 | ··········state:·present | 37472 | ··········state:·present |
| 37473 | ······when: | 37473 | ······when: |
| 37474 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 37475 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 37474 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 37475 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 37476 | ······tags: | 37476 | ······tags: |
| 37477 | ······-·DISA-STIG-RHEL-08-040290 | 37477 | ······-·DISA-STIG-RHEL-08-040290 |
| 37478 | ······-·low_complexity | 37478 | ······-·low_complexity |
| 37479 | ······-·low_disruption | 37479 | ······-·low_disruption |
| 37480 | ······-·medium_severity | 37480 | ······-·medium_severity |
| 37481 | ······-·no_reboot_needed | 37481 | ······-·no_reboot_needed |
| 37482 | ······-·postfix_prevent_unrestricted_relay | 37482 | ······-·postfix_prevent_unrestricted_relay |
| Offset 21742, 16 lines modified | Offset 21742, 16 lines modified | ||
| 21742 | ······-·no_reboot_needed | 21742 | ······-·no_reboot_needed |
| 21743 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21743 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21744 | ······stat: | 21744 | ······stat: |
| 21745 | ········path:·/boot/grub2/user.cfg | 21745 | ········path:·/boot/grub2/user.cfg |
| 21746 | ······register:·file_exists | 21746 | ······register:·file_exists |
| 21747 | ······when: | 21747 | ······when: |
| 21748 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21749 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21748 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21749 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21750 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21750 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21751 | ······tags: | 21751 | ······tags: |
| 21752 | ······-·CJIS-5.5.2.2 | 21752 | ······-·CJIS-5.5.2.2 |
| 21753 | ······-·NIST-800-171-3.4.5 | 21753 | ······-·NIST-800-171-3.4.5 |
| 21754 | ······-·NIST-800-53-AC-6(1) | 21754 | ······-·NIST-800-53-AC-6(1) |
| 21755 | ······-·NIST-800-53-CM-6(a) | 21755 | ······-·NIST-800-53-CM-6(a) |
| 21756 | ······-·PCI-DSS-Req-7.1 | 21756 | ······-·PCI-DSS-Req-7.1 |
| Offset 21763, 16 lines modified | Offset 21763, 16 lines modified | ||
| 21763 | ······-·no_reboot_needed | 21763 | ······-·no_reboot_needed |
| 21764 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 21764 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 21765 | ······file: | 21765 | ······file: |
| 21766 | ········path:·/boot/grub2/user.cfg | 21766 | ········path:·/boot/grub2/user.cfg |
| 21767 | ········group:·'0' | 21767 | ········group:·'0' |
| 21768 | ······when: | 21768 | ······when: |
| 21769 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21770 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21769 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21770 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21771 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21771 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21772 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21772 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21773 | ······tags: | 21773 | ······tags: |
| 21774 | ······-·CJIS-5.5.2.2 | 21774 | ······-·CJIS-5.5.2.2 |
| 21775 | ······-·NIST-800-171-3.4.5 | 21775 | ······-·NIST-800-171-3.4.5 |
| 21776 | ······-·NIST-800-53-AC-6(1) | 21776 | ······-·NIST-800-53-AC-6(1) |
| 21777 | ······-·NIST-800-53-CM-6(a) | 21777 | ······-·NIST-800-53-CM-6(a) |
| Offset 21802, 16 lines modified | Offset 21802, 16 lines modified | ||
| 21802 | ······-·no_reboot_needed | 21802 | ······-·no_reboot_needed |
| 21803 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21803 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21804 | ······stat: | 21804 | ······stat: |
| 21805 | ········path:·/boot/grub2/user.cfg | 21805 | ········path:·/boot/grub2/user.cfg |
| 21806 | ······register:·file_exists | 21806 | ······register:·file_exists |
| 21807 | ······when: | 21807 | ······when: |
| 21808 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21809 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21808 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21809 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21810 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21810 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21811 | ······tags: | 21811 | ······tags: |
| 21812 | ······-·CJIS-5.5.2.2 | 21812 | ······-·CJIS-5.5.2.2 |
| 21813 | ······-·NIST-800-171-3.4.5 | 21813 | ······-·NIST-800-171-3.4.5 |
| 21814 | ······-·NIST-800-53-AC-6(1) | 21814 | ······-·NIST-800-53-AC-6(1) |
| 21815 | ······-·NIST-800-53-CM-6(a) | 21815 | ······-·NIST-800-53-CM-6(a) |
| 21816 | ······-·PCI-DSS-Req-7.1 | 21816 | ······-·PCI-DSS-Req-7.1 |
| Offset 21823, 16 lines modified | Offset 21823, 16 lines modified | ||
| 21823 | ······-·no_reboot_needed | 21823 | ······-·no_reboot_needed |
| 21824 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 21824 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 21825 | ······file: | 21825 | ······file: |
| 21826 | ········path:·/boot/grub2/user.cfg | 21826 | ········path:·/boot/grub2/user.cfg |
| 21827 | ········owner:·'0' | 21827 | ········owner:·'0' |
| 21828 | ······when: | 21828 | ······when: |
| 21829 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21830 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21829 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21830 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21831 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21831 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21832 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21832 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21833 | ······tags: | 21833 | ······tags: |
| 21834 | ······-·CJIS-5.5.2.2 | 21834 | ······-·CJIS-5.5.2.2 |
| 21835 | ······-·NIST-800-171-3.4.5 | 21835 | ······-·NIST-800-171-3.4.5 |
| 21836 | ······-·NIST-800-53-AC-6(1) | 21836 | ······-·NIST-800-53-AC-6(1) |
| 21837 | ······-·NIST-800-53-CM-6(a) | 21837 | ······-·NIST-800-53-CM-6(a) |
| Offset 21860, 16 lines modified | Offset 21860, 16 lines modified | ||
| 21860 | ······-·no_reboot_needed | 21860 | ······-·no_reboot_needed |
| 21861 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21861 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21862 | ······stat: | 21862 | ······stat: |
| 21863 | ········path:·/boot/grub2/grub.cfg | 21863 | ········path:·/boot/grub2/grub.cfg |
| 21864 | ······register:·file_exists | 21864 | ······register:·file_exists |
| 21865 | ······when: | 21865 | ······when: |
| 21866 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21867 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21866 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21867 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21868 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21868 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21869 | ······tags: | 21869 | ······tags: |
| 21870 | ······-·NIST-800-171-3.4.5 | 21870 | ······-·NIST-800-171-3.4.5 |
| 21871 | ······-·NIST-800-53-AC-6(1) | 21871 | ······-·NIST-800-53-AC-6(1) |
| 21872 | ······-·NIST-800-53-CM-6(a) | 21872 | ······-·NIST-800-53-CM-6(a) |
| 21873 | ······-·configure_strategy | 21873 | ······-·configure_strategy |
| 21874 | ······-·file_permissions_efi_grub2_cfg | 21874 | ······-·file_permissions_efi_grub2_cfg |
| Offset 21879, 16 lines modified | Offset 21879, 16 lines modified | ||
| 21879 | ······-·no_reboot_needed | 21879 | ······-·no_reboot_needed |
| 21880 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 21880 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 21881 | ······file: | 21881 | ······file: |
| 21882 | ········path:·/boot/grub2/grub.cfg | 21882 | ········path:·/boot/grub2/grub.cfg |
| 21883 | ········mode:·u-s,g-xwrs,o-xwrt | 21883 | ········mode:·u-s,g-xwrs,o-xwrt |
| 21884 | ······when: | 21884 | ······when: |
| 21885 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21886 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21885 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21886 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21889 | ······tags: | 21889 | ······tags: |
| 21890 | ······-·NIST-800-171-3.4.5 | 21890 | ······-·NIST-800-171-3.4.5 |
| 21891 | ······-·NIST-800-53-AC-6(1) | 21891 | ······-·NIST-800-53-AC-6(1) |
| 21892 | ······-·NIST-800-53-CM-6(a) | 21892 | ······-·NIST-800-53-CM-6(a) |
| 21893 | ······-·configure_strategy | 21893 | ······-·configure_strategy |
| Offset 21914, 16 lines modified | Offset 21914, 16 lines modified | ||
| 21914 | ······-·no_reboot_needed | 21914 | ······-·no_reboot_needed |
| 21915 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21915 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21916 | ······stat: | 21916 | ······stat: |
| 21917 | ········path:·/boot/grub2/user.cfg | 21917 | ········path:·/boot/grub2/user.cfg |
| 21918 | ······register:·file_exists | 21918 | ······register:·file_exists |
| 21919 | ······when: | 21919 | ······when: |
| 21920 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21921 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21920 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21921 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21922 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21922 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21923 | ······tags: | 21923 | ······tags: |
| 21924 | ······-·NIST-800-171-3.4.5 | 21924 | ······-·NIST-800-171-3.4.5 |
| 21925 | ······-·NIST-800-53-AC-6(1) | 21925 | ······-·NIST-800-53-AC-6(1) |
| 21926 | ······-·NIST-800-53-CM-6(a) | 21926 | ······-·NIST-800-53-CM-6(a) |
| 21927 | ······-·configure_strategy | 21927 | ······-·configure_strategy |
| 21928 | ······-·file_permissions_efi_user_cfg | 21928 | ······-·file_permissions_efi_user_cfg |
| Offset 21933, 16 lines modified | Offset 21933, 16 lines modified | ||
| 21933 | ······-·no_reboot_needed | 21933 | ······-·no_reboot_needed |
| Max diff block lines reached; 655/5345 bytes (12.25%) of diff not shown. | |||
| Offset 5405, 16 lines modified | Offset 5405, 16 lines modified | ||
| 5405 | ······-·no_reboot_needed | 5405 | ······-·no_reboot_needed |
| 5406 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5406 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5407 | ······stat: | 5407 | ······stat: |
| 5408 | ········path:·/boot/grub2/user.cfg | 5408 | ········path:·/boot/grub2/user.cfg |
| 5409 | ······register:·file_exists | 5409 | ······register:·file_exists |
| 5410 | ······when: | 5410 | ······when: |
| 5411 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5412 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5411 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5412 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5413 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5413 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5414 | ······tags: | 5414 | ······tags: |
| 5415 | ······-·CJIS-5.5.2.2 | 5415 | ······-·CJIS-5.5.2.2 |
| 5416 | ······-·NIST-800-171-3.4.5 | 5416 | ······-·NIST-800-171-3.4.5 |
| 5417 | ······-·NIST-800-53-AC-6(1) | 5417 | ······-·NIST-800-53-AC-6(1) |
| 5418 | ······-·NIST-800-53-CM-6(a) | 5418 | ······-·NIST-800-53-CM-6(a) |
| 5419 | ······-·PCI-DSS-Req-7.1 | 5419 | ······-·PCI-DSS-Req-7.1 |
| Offset 5426, 16 lines modified | Offset 5426, 16 lines modified | ||
| 5426 | ······-·no_reboot_needed | 5426 | ······-·no_reboot_needed |
| 5427 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5427 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5428 | ······file: | 5428 | ······file: |
| 5429 | ········path:·/boot/grub2/user.cfg | 5429 | ········path:·/boot/grub2/user.cfg |
| 5430 | ········group:·'0' | 5430 | ········group:·'0' |
| 5431 | ······when: | 5431 | ······when: |
| 5432 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5433 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5432 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5433 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5434 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5434 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5435 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5435 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5436 | ······tags: | 5436 | ······tags: |
| 5437 | ······-·CJIS-5.5.2.2 | 5437 | ······-·CJIS-5.5.2.2 |
| 5438 | ······-·NIST-800-171-3.4.5 | 5438 | ······-·NIST-800-171-3.4.5 |
| 5439 | ······-·NIST-800-53-AC-6(1) | 5439 | ······-·NIST-800-53-AC-6(1) |
| 5440 | ······-·NIST-800-53-CM-6(a) | 5440 | ······-·NIST-800-53-CM-6(a) |
| Offset 5465, 16 lines modified | Offset 5465, 16 lines modified | ||
| 5465 | ······-·no_reboot_needed | 5465 | ······-·no_reboot_needed |
| 5466 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5466 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5467 | ······stat: | 5467 | ······stat: |
| 5468 | ········path:·/boot/grub2/user.cfg | 5468 | ········path:·/boot/grub2/user.cfg |
| 5469 | ······register:·file_exists | 5469 | ······register:·file_exists |
| 5470 | ······when: | 5470 | ······when: |
| 5471 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5472 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5471 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5472 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5473 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5473 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5474 | ······tags: | 5474 | ······tags: |
| 5475 | ······-·CJIS-5.5.2.2 | 5475 | ······-·CJIS-5.5.2.2 |
| 5476 | ······-·NIST-800-171-3.4.5 | 5476 | ······-·NIST-800-171-3.4.5 |
| 5477 | ······-·NIST-800-53-AC-6(1) | 5477 | ······-·NIST-800-53-AC-6(1) |
| 5478 | ······-·NIST-800-53-CM-6(a) | 5478 | ······-·NIST-800-53-CM-6(a) |
| 5479 | ······-·PCI-DSS-Req-7.1 | 5479 | ······-·PCI-DSS-Req-7.1 |
| Offset 5486, 16 lines modified | Offset 5486, 16 lines modified | ||
| 5486 | ······-·no_reboot_needed | 5486 | ······-·no_reboot_needed |
| 5487 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 5487 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 5488 | ······file: | 5488 | ······file: |
| 5489 | ········path:·/boot/grub2/user.cfg | 5489 | ········path:·/boot/grub2/user.cfg |
| 5490 | ········owner:·'0' | 5490 | ········owner:·'0' |
| 5491 | ······when: | 5491 | ······when: |
| 5492 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5493 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5492 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5493 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5494 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5494 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5495 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5495 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5496 | ······tags: | 5496 | ······tags: |
| 5497 | ······-·CJIS-5.5.2.2 | 5497 | ······-·CJIS-5.5.2.2 |
| 5498 | ······-·NIST-800-171-3.4.5 | 5498 | ······-·NIST-800-171-3.4.5 |
| 5499 | ······-·NIST-800-53-AC-6(1) | 5499 | ······-·NIST-800-53-AC-6(1) |
| 5500 | ······-·NIST-800-53-CM-6(a) | 5500 | ······-·NIST-800-53-CM-6(a) |
| Offset 5523, 16 lines modified | Offset 5523, 16 lines modified | ||
| 5523 | ······-·no_reboot_needed | 5523 | ······-·no_reboot_needed |
| 5524 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5524 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5525 | ······stat: | 5525 | ······stat: |
| 5526 | ········path:·/boot/grub2/grub.cfg | 5526 | ········path:·/boot/grub2/grub.cfg |
| 5527 | ······register:·file_exists | 5527 | ······register:·file_exists |
| 5528 | ······when: | 5528 | ······when: |
| 5529 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5530 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5529 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5530 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5531 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5531 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5532 | ······tags: | 5532 | ······tags: |
| 5533 | ······-·NIST-800-171-3.4.5 | 5533 | ······-·NIST-800-171-3.4.5 |
| 5534 | ······-·NIST-800-53-AC-6(1) | 5534 | ······-·NIST-800-53-AC-6(1) |
| 5535 | ······-·NIST-800-53-CM-6(a) | 5535 | ······-·NIST-800-53-CM-6(a) |
| 5536 | ······-·configure_strategy | 5536 | ······-·configure_strategy |
| 5537 | ······-·file_permissions_efi_grub2_cfg | 5537 | ······-·file_permissions_efi_grub2_cfg |
| Offset 5542, 16 lines modified | Offset 5542, 16 lines modified | ||
| 5542 | ······-·no_reboot_needed | 5542 | ······-·no_reboot_needed |
| 5543 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5543 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5544 | ······file: | 5544 | ······file: |
| 5545 | ········path:·/boot/grub2/grub.cfg | 5545 | ········path:·/boot/grub2/grub.cfg |
| 5546 | ········mode:·u-s,g-xwrs,o-xwrt | 5546 | ········mode:·u-s,g-xwrs,o-xwrt |
| 5547 | ······when: | 5547 | ······when: |
| 5548 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5549 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5548 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5549 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5550 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5550 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5551 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5551 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5552 | ······tags: | 5552 | ······tags: |
| 5553 | ······-·NIST-800-171-3.4.5 | 5553 | ······-·NIST-800-171-3.4.5 |
| 5554 | ······-·NIST-800-53-AC-6(1) | 5554 | ······-·NIST-800-53-AC-6(1) |
| 5555 | ······-·NIST-800-53-CM-6(a) | 5555 | ······-·NIST-800-53-CM-6(a) |
| 5556 | ······-·configure_strategy | 5556 | ······-·configure_strategy |
| Offset 5577, 16 lines modified | Offset 5577, 16 lines modified | ||
| 5577 | ······-·no_reboot_needed | 5577 | ······-·no_reboot_needed |
| 5578 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5578 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5579 | ······stat: | 5579 | ······stat: |
| 5580 | ········path:·/boot/grub2/user.cfg | 5580 | ········path:·/boot/grub2/user.cfg |
| 5581 | ······register:·file_exists | 5581 | ······register:·file_exists |
| 5582 | ······when: | 5582 | ······when: |
| 5583 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5584 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5583 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5584 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5585 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5585 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5586 | ······tags: | 5586 | ······tags: |
| 5587 | ······-·NIST-800-171-3.4.5 | 5587 | ······-·NIST-800-171-3.4.5 |
| 5588 | ······-·NIST-800-53-AC-6(1) | 5588 | ······-·NIST-800-53-AC-6(1) |
| 5589 | ······-·NIST-800-53-CM-6(a) | 5589 | ······-·NIST-800-53-CM-6(a) |
| 5590 | ······-·configure_strategy | 5590 | ······-·configure_strategy |
| 5591 | ······-·file_permissions_efi_user_cfg | 5591 | ······-·file_permissions_efi_user_cfg |
| Offset 5596, 16 lines modified | Offset 5596, 16 lines modified | ||
| 5596 | ······-·no_reboot_needed | 5596 | ······-·no_reboot_needed |
| Max diff block lines reached; 655/5329 bytes (12.29%) of diff not shown. | |||
| Offset 5405, 16 lines modified | Offset 5405, 16 lines modified | ||
| 5405 | ······-·no_reboot_needed | 5405 | ······-·no_reboot_needed |
| 5406 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5406 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5407 | ······stat: | 5407 | ······stat: |
| 5408 | ········path:·/boot/grub2/user.cfg | 5408 | ········path:·/boot/grub2/user.cfg |
| 5409 | ······register:·file_exists | 5409 | ······register:·file_exists |
| 5410 | ······when: | 5410 | ······when: |
| 5411 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5412 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5411 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5412 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5413 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5413 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5414 | ······tags: | 5414 | ······tags: |
| 5415 | ······-·CJIS-5.5.2.2 | 5415 | ······-·CJIS-5.5.2.2 |
| 5416 | ······-·NIST-800-171-3.4.5 | 5416 | ······-·NIST-800-171-3.4.5 |
| 5417 | ······-·NIST-800-53-AC-6(1) | 5417 | ······-·NIST-800-53-AC-6(1) |
| 5418 | ······-·NIST-800-53-CM-6(a) | 5418 | ······-·NIST-800-53-CM-6(a) |
| 5419 | ······-·PCI-DSS-Req-7.1 | 5419 | ······-·PCI-DSS-Req-7.1 |
| Offset 5426, 16 lines modified | Offset 5426, 16 lines modified | ||
| 5426 | ······-·no_reboot_needed | 5426 | ······-·no_reboot_needed |
| 5427 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5427 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5428 | ······file: | 5428 | ······file: |
| 5429 | ········path:·/boot/grub2/user.cfg | 5429 | ········path:·/boot/grub2/user.cfg |
| 5430 | ········group:·'0' | 5430 | ········group:·'0' |
| 5431 | ······when: | 5431 | ······when: |
| 5432 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5433 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5432 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5433 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5434 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5434 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5435 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5435 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5436 | ······tags: | 5436 | ······tags: |
| 5437 | ······-·CJIS-5.5.2.2 | 5437 | ······-·CJIS-5.5.2.2 |
| 5438 | ······-·NIST-800-171-3.4.5 | 5438 | ······-·NIST-800-171-3.4.5 |
| 5439 | ······-·NIST-800-53-AC-6(1) | 5439 | ······-·NIST-800-53-AC-6(1) |
| 5440 | ······-·NIST-800-53-CM-6(a) | 5440 | ······-·NIST-800-53-CM-6(a) |
| Offset 5465, 16 lines modified | Offset 5465, 16 lines modified | ||
| 5465 | ······-·no_reboot_needed | 5465 | ······-·no_reboot_needed |
| 5466 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5466 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5467 | ······stat: | 5467 | ······stat: |
| 5468 | ········path:·/boot/grub2/user.cfg | 5468 | ········path:·/boot/grub2/user.cfg |
| 5469 | ······register:·file_exists | 5469 | ······register:·file_exists |
| 5470 | ······when: | 5470 | ······when: |
| 5471 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5472 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5471 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5472 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5473 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5473 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5474 | ······tags: | 5474 | ······tags: |
| 5475 | ······-·CJIS-5.5.2.2 | 5475 | ······-·CJIS-5.5.2.2 |
| 5476 | ······-·NIST-800-171-3.4.5 | 5476 | ······-·NIST-800-171-3.4.5 |
| 5477 | ······-·NIST-800-53-AC-6(1) | 5477 | ······-·NIST-800-53-AC-6(1) |
| 5478 | ······-·NIST-800-53-CM-6(a) | 5478 | ······-·NIST-800-53-CM-6(a) |
| 5479 | ······-·PCI-DSS-Req-7.1 | 5479 | ······-·PCI-DSS-Req-7.1 |
| Offset 5486, 16 lines modified | Offset 5486, 16 lines modified | ||
| 5486 | ······-·no_reboot_needed | 5486 | ······-·no_reboot_needed |
| 5487 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 5487 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 5488 | ······file: | 5488 | ······file: |
| 5489 | ········path:·/boot/grub2/user.cfg | 5489 | ········path:·/boot/grub2/user.cfg |
| 5490 | ········owner:·'0' | 5490 | ········owner:·'0' |
| 5491 | ······when: | 5491 | ······when: |
| 5492 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5493 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5492 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5493 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5494 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5494 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5495 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5495 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5496 | ······tags: | 5496 | ······tags: |
| 5497 | ······-·CJIS-5.5.2.2 | 5497 | ······-·CJIS-5.5.2.2 |
| 5498 | ······-·NIST-800-171-3.4.5 | 5498 | ······-·NIST-800-171-3.4.5 |
| 5499 | ······-·NIST-800-53-AC-6(1) | 5499 | ······-·NIST-800-53-AC-6(1) |
| 5500 | ······-·NIST-800-53-CM-6(a) | 5500 | ······-·NIST-800-53-CM-6(a) |
| Offset 5523, 16 lines modified | Offset 5523, 16 lines modified | ||
| 5523 | ······-·no_reboot_needed | 5523 | ······-·no_reboot_needed |
| 5524 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5524 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5525 | ······stat: | 5525 | ······stat: |
| 5526 | ········path:·/boot/grub2/grub.cfg | 5526 | ········path:·/boot/grub2/grub.cfg |
| 5527 | ······register:·file_exists | 5527 | ······register:·file_exists |
| 5528 | ······when: | 5528 | ······when: |
| 5529 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5530 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5529 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5530 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5531 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5531 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5532 | ······tags: | 5532 | ······tags: |
| 5533 | ······-·NIST-800-171-3.4.5 | 5533 | ······-·NIST-800-171-3.4.5 |
| 5534 | ······-·NIST-800-53-AC-6(1) | 5534 | ······-·NIST-800-53-AC-6(1) |
| 5535 | ······-·NIST-800-53-CM-6(a) | 5535 | ······-·NIST-800-53-CM-6(a) |
| 5536 | ······-·configure_strategy | 5536 | ······-·configure_strategy |
| 5537 | ······-·file_permissions_efi_grub2_cfg | 5537 | ······-·file_permissions_efi_grub2_cfg |
| Offset 5542, 16 lines modified | Offset 5542, 16 lines modified | ||
| 5542 | ······-·no_reboot_needed | 5542 | ······-·no_reboot_needed |
| 5543 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5543 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5544 | ······file: | 5544 | ······file: |
| 5545 | ········path:·/boot/grub2/grub.cfg | 5545 | ········path:·/boot/grub2/grub.cfg |
| 5546 | ········mode:·u-s,g-xwrs,o-xwrt | 5546 | ········mode:·u-s,g-xwrs,o-xwrt |
| 5547 | ······when: | 5547 | ······when: |
| 5548 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5549 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5548 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5549 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5550 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5550 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5551 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5551 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5552 | ······tags: | 5552 | ······tags: |
| 5553 | ······-·NIST-800-171-3.4.5 | 5553 | ······-·NIST-800-171-3.4.5 |
| 5554 | ······-·NIST-800-53-AC-6(1) | 5554 | ······-·NIST-800-53-AC-6(1) |
| 5555 | ······-·NIST-800-53-CM-6(a) | 5555 | ······-·NIST-800-53-CM-6(a) |
| 5556 | ······-·configure_strategy | 5556 | ······-·configure_strategy |
| Offset 5577, 16 lines modified | Offset 5577, 16 lines modified | ||
| 5577 | ······-·no_reboot_needed | 5577 | ······-·no_reboot_needed |
| 5578 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5578 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5579 | ······stat: | 5579 | ······stat: |
| 5580 | ········path:·/boot/grub2/user.cfg | 5580 | ········path:·/boot/grub2/user.cfg |
| 5581 | ······register:·file_exists | 5581 | ······register:·file_exists |
| 5582 | ······when: | 5582 | ······when: |
| 5583 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5584 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5583 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5584 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5585 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5585 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5586 | ······tags: | 5586 | ······tags: |
| 5587 | ······-·NIST-800-171-3.4.5 | 5587 | ······-·NIST-800-171-3.4.5 |
| 5588 | ······-·NIST-800-53-AC-6(1) | 5588 | ······-·NIST-800-53-AC-6(1) |
| 5589 | ······-·NIST-800-53-CM-6(a) | 5589 | ······-·NIST-800-53-CM-6(a) |
| 5590 | ······-·configure_strategy | 5590 | ······-·configure_strategy |
| 5591 | ······-·file_permissions_efi_user_cfg | 5591 | ······-·file_permissions_efi_user_cfg |
| Offset 5596, 16 lines modified | Offset 5596, 16 lines modified | ||
| 5596 | ······-·no_reboot_needed | 5596 | ······-·no_reboot_needed |
| Max diff block lines reached; 655/5329 bytes (12.29%) of diff not shown. | |||
| Offset 21742, 16 lines modified | Offset 21742, 16 lines modified | ||
| 21742 | ······-·no_reboot_needed | 21742 | ······-·no_reboot_needed |
| 21743 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21743 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21744 | ······stat: | 21744 | ······stat: |
| 21745 | ········path:·/boot/grub2/user.cfg | 21745 | ········path:·/boot/grub2/user.cfg |
| 21746 | ······register:·file_exists | 21746 | ······register:·file_exists |
| 21747 | ······when: | 21747 | ······when: |
| 21748 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21749 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21748 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21749 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21750 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21750 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21751 | ······tags: | 21751 | ······tags: |
| 21752 | ······-·CJIS-5.5.2.2 | 21752 | ······-·CJIS-5.5.2.2 |
| 21753 | ······-·NIST-800-171-3.4.5 | 21753 | ······-·NIST-800-171-3.4.5 |
| 21754 | ······-·NIST-800-53-AC-6(1) | 21754 | ······-·NIST-800-53-AC-6(1) |
| 21755 | ······-·NIST-800-53-CM-6(a) | 21755 | ······-·NIST-800-53-CM-6(a) |
| 21756 | ······-·PCI-DSS-Req-7.1 | 21756 | ······-·PCI-DSS-Req-7.1 |
| Offset 21763, 16 lines modified | Offset 21763, 16 lines modified | ||
| 21763 | ······-·no_reboot_needed | 21763 | ······-·no_reboot_needed |
| 21764 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 21764 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 21765 | ······file: | 21765 | ······file: |
| 21766 | ········path:·/boot/grub2/user.cfg | 21766 | ········path:·/boot/grub2/user.cfg |
| 21767 | ········group:·'0' | 21767 | ········group:·'0' |
| 21768 | ······when: | 21768 | ······when: |
| 21769 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21770 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21769 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21770 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21771 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21771 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21772 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21772 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21773 | ······tags: | 21773 | ······tags: |
| 21774 | ······-·CJIS-5.5.2.2 | 21774 | ······-·CJIS-5.5.2.2 |
| 21775 | ······-·NIST-800-171-3.4.5 | 21775 | ······-·NIST-800-171-3.4.5 |
| 21776 | ······-·NIST-800-53-AC-6(1) | 21776 | ······-·NIST-800-53-AC-6(1) |
| 21777 | ······-·NIST-800-53-CM-6(a) | 21777 | ······-·NIST-800-53-CM-6(a) |
| Offset 21802, 16 lines modified | Offset 21802, 16 lines modified | ||
| 21802 | ······-·no_reboot_needed | 21802 | ······-·no_reboot_needed |
| 21803 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21803 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21804 | ······stat: | 21804 | ······stat: |
| 21805 | ········path:·/boot/grub2/user.cfg | 21805 | ········path:·/boot/grub2/user.cfg |
| 21806 | ······register:·file_exists | 21806 | ······register:·file_exists |
| 21807 | ······when: | 21807 | ······when: |
| 21808 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21809 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21808 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21809 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21810 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21810 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21811 | ······tags: | 21811 | ······tags: |
| 21812 | ······-·CJIS-5.5.2.2 | 21812 | ······-·CJIS-5.5.2.2 |
| 21813 | ······-·NIST-800-171-3.4.5 | 21813 | ······-·NIST-800-171-3.4.5 |
| 21814 | ······-·NIST-800-53-AC-6(1) | 21814 | ······-·NIST-800-53-AC-6(1) |
| 21815 | ······-·NIST-800-53-CM-6(a) | 21815 | ······-·NIST-800-53-CM-6(a) |
| 21816 | ······-·PCI-DSS-Req-7.1 | 21816 | ······-·PCI-DSS-Req-7.1 |
| Offset 21823, 16 lines modified | Offset 21823, 16 lines modified | ||
| 21823 | ······-·no_reboot_needed | 21823 | ······-·no_reboot_needed |
| 21824 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 21824 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 21825 | ······file: | 21825 | ······file: |
| 21826 | ········path:·/boot/grub2/user.cfg | 21826 | ········path:·/boot/grub2/user.cfg |
| 21827 | ········owner:·'0' | 21827 | ········owner:·'0' |
| 21828 | ······when: | 21828 | ······when: |
| 21829 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21830 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21829 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21830 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21831 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21831 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21832 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21832 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21833 | ······tags: | 21833 | ······tags: |
| 21834 | ······-·CJIS-5.5.2.2 | 21834 | ······-·CJIS-5.5.2.2 |
| 21835 | ······-·NIST-800-171-3.4.5 | 21835 | ······-·NIST-800-171-3.4.5 |
| 21836 | ······-·NIST-800-53-AC-6(1) | 21836 | ······-·NIST-800-53-AC-6(1) |
| 21837 | ······-·NIST-800-53-CM-6(a) | 21837 | ······-·NIST-800-53-CM-6(a) |
| Offset 21860, 16 lines modified | Offset 21860, 16 lines modified | ||
| 21860 | ······-·no_reboot_needed | 21860 | ······-·no_reboot_needed |
| 21861 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21861 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21862 | ······stat: | 21862 | ······stat: |
| 21863 | ········path:·/boot/grub2/grub.cfg | 21863 | ········path:·/boot/grub2/grub.cfg |
| 21864 | ······register:·file_exists | 21864 | ······register:·file_exists |
| 21865 | ······when: | 21865 | ······when: |
| 21866 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21867 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21866 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21867 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21868 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21868 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21869 | ······tags: | 21869 | ······tags: |
| 21870 | ······-·NIST-800-171-3.4.5 | 21870 | ······-·NIST-800-171-3.4.5 |
| 21871 | ······-·NIST-800-53-AC-6(1) | 21871 | ······-·NIST-800-53-AC-6(1) |
| 21872 | ······-·NIST-800-53-CM-6(a) | 21872 | ······-·NIST-800-53-CM-6(a) |
| 21873 | ······-·configure_strategy | 21873 | ······-·configure_strategy |
| 21874 | ······-·file_permissions_efi_grub2_cfg | 21874 | ······-·file_permissions_efi_grub2_cfg |
| Offset 21879, 16 lines modified | Offset 21879, 16 lines modified | ||
| 21879 | ······-·no_reboot_needed | 21879 | ······-·no_reboot_needed |
| 21880 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 21880 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 21881 | ······file: | 21881 | ······file: |
| 21882 | ········path:·/boot/grub2/grub.cfg | 21882 | ········path:·/boot/grub2/grub.cfg |
| 21883 | ········mode:·u-s,g-xwrs,o-xwrt | 21883 | ········mode:·u-s,g-xwrs,o-xwrt |
| 21884 | ······when: | 21884 | ······when: |
| 21885 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21886 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21885 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21886 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21889 | ······tags: | 21889 | ······tags: |
| 21890 | ······-·NIST-800-171-3.4.5 | 21890 | ······-·NIST-800-171-3.4.5 |
| 21891 | ······-·NIST-800-53-AC-6(1) | 21891 | ······-·NIST-800-53-AC-6(1) |
| 21892 | ······-·NIST-800-53-CM-6(a) | 21892 | ······-·NIST-800-53-CM-6(a) |
| 21893 | ······-·configure_strategy | 21893 | ······-·configure_strategy |
| Offset 21914, 16 lines modified | Offset 21914, 16 lines modified | ||
| 21914 | ······-·no_reboot_needed | 21914 | ······-·no_reboot_needed |
| 21915 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 21915 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 21916 | ······stat: | 21916 | ······stat: |
| 21917 | ········path:·/boot/grub2/user.cfg | 21917 | ········path:·/boot/grub2/user.cfg |
| 21918 | ······register:·file_exists | 21918 | ······register:·file_exists |
| 21919 | ······when: | 21919 | ······when: |
| 21920 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21921 | ······-·'"grub2-common"·in·ansible_facts.packages' | 21920 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 21921 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21922 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21922 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21923 | ······tags: | 21923 | ······tags: |
| 21924 | ······-·NIST-800-171-3.4.5 | 21924 | ······-·NIST-800-171-3.4.5 |
| 21925 | ······-·NIST-800-53-AC-6(1) | 21925 | ······-·NIST-800-53-AC-6(1) |
| 21926 | ······-·NIST-800-53-CM-6(a) | 21926 | ······-·NIST-800-53-CM-6(a) |
| 21927 | ······-·configure_strategy | 21927 | ······-·configure_strategy |
| 21928 | ······-·file_permissions_efi_user_cfg | 21928 | ······-·file_permissions_efi_user_cfg |
| Offset 21933, 16 lines modified | Offset 21933, 16 lines modified | ||
| 21933 | ······-·no_reboot_needed | 21933 | ······-·no_reboot_needed |
| Max diff block lines reached; 655/5345 bytes (12.25%) of diff not shown. | |||
| Offset 43513, 16 lines modified | Offset 43513, 16 lines modified | ||
| 43513 | ········lineinfile: | 43513 | ········lineinfile: |
| 43514 | ··········path:·/etc/postfix/main.cf | 43514 | ··········path:·/etc/postfix/main.cf |
| 43515 | ··········create:·true | 43515 | ··········create:·true |
| 43516 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 43516 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 43517 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 43517 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 43518 | ··········state:·present | 43518 | ··········state:·present |
| 43519 | ······when: | 43519 | ······when: |
| 43520 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 43521 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 43520 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 43521 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 43522 | ······tags: | 43522 | ······tags: |
| 43523 | ······-·low_complexity | 43523 | ······-·low_complexity |
| 43524 | ······-·low_disruption | 43524 | ······-·low_disruption |
| 43525 | ······-·medium_severity | 43525 | ······-·medium_severity |
| 43526 | ······-·no_reboot_needed | 43526 | ······-·no_reboot_needed |
| 43527 | ······-·postfix_prevent_unrestricted_relay | 43527 | ······-·postfix_prevent_unrestricted_relay |
| 43528 | ······-·restrict_strategy | 43528 | ······-·restrict_strategy |
| Offset 43487, 16 lines modified | Offset 43487, 16 lines modified | ||
| 43487 | ········lineinfile: | 43487 | ········lineinfile: |
| 43488 | ··········path:·/etc/postfix/main.cf | 43488 | ··········path:·/etc/postfix/main.cf |
| 43489 | ··········create:·true | 43489 | ··········create:·true |
| 43490 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 43490 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 43491 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 43491 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 43492 | ··········state:·present | 43492 | ··········state:·present |
| 43493 | ······when: | 43493 | ······when: |
| 43494 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 43495 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 43494 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 43495 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 43496 | ······tags: | 43496 | ······tags: |
| 43497 | ······-·low_complexity | 43497 | ······-·low_complexity |
| 43498 | ······-·low_disruption | 43498 | ······-·low_disruption |
| 43499 | ······-·medium_severity | 43499 | ······-·medium_severity |
| 43500 | ······-·no_reboot_needed | 43500 | ······-·no_reboot_needed |
| 43501 | ······-·postfix_prevent_unrestricted_relay | 43501 | ······-·postfix_prevent_unrestricted_relay |
| 43502 | ······-·restrict_strategy | 43502 | ······-·restrict_strategy |
| Offset 5154, 16 lines modified | Offset 5154, 16 lines modified | ||
| 5154 | ······-·reboot_required | 5154 | ······-·reboot_required |
| 5155 | ······-·restrict_strategy | 5155 | ······-·restrict_strategy |
| 5156 | ····-·name:·Set·architecture·for·audit·open·tasks | 5156 | ····-·name:·Set·architecture·for·audit·open·tasks |
| 5157 | ······set_fact: | 5157 | ······set_fact: |
| 5158 | ········audit_arch:·b64 | 5158 | ········audit_arch:·b64 |
| 5159 | ······when: | 5159 | ······when: |
| 5160 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5161 | ······-·'"audit"·in·ansible_facts.packages' | 5160 | ······-·'"audit"·in·ansible_facts.packages' |
| 5161 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5162 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 5162 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 5163 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 5163 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 5164 | ······tags: | 5164 | ······tags: |
| 5165 | ······-·NIST-800-53-AC-2(4) | 5165 | ······-·NIST-800-53-AC-2(4) |
| 5166 | ······-·NIST-800-53-AC-6(9) | 5166 | ······-·NIST-800-53-AC-6(9) |
| 5167 | ······-·NIST-800-53-AU-12(c) | 5167 | ······-·NIST-800-53-AU-12(c) |
| 5168 | ······-·NIST-800-53-AU-2(d) | 5168 | ······-·NIST-800-53-AU-2(d) |
| Offset 5292, 16 lines modified | Offset 5292, 16 lines modified | ||
| 5292 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 5292 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 5293 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify | 5293 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 5294 | ··········create:·true | 5294 | ··········create:·true |
| 5295 | ··········mode:·o-rwx | 5295 | ··········mode:·o-rwx |
| 5296 | ··········state:·present | 5296 | ··········state:·present |
| 5297 | ········when:·syscalls_found·|·length·==·0 | 5297 | ········when:·syscalls_found·|·length·==·0 |
| 5298 | ······when: | 5298 | ······when: |
| 5299 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5300 | ······-·'"audit"·in·ansible_facts.packages' | 5299 | ······-·'"audit"·in·ansible_facts.packages' |
| 5300 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5301 | ······tags: | 5301 | ······tags: |
| 5302 | ······-·NIST-800-53-AC-2(4) | 5302 | ······-·NIST-800-53-AC-2(4) |
| 5303 | ······-·NIST-800-53-AC-6(9) | 5303 | ······-·NIST-800-53-AC-6(9) |
| 5304 | ······-·NIST-800-53-AU-12(c) | 5304 | ······-·NIST-800-53-AU-12(c) |
| 5305 | ······-·NIST-800-53-AU-2(d) | 5305 | ······-·NIST-800-53-AU-2(d) |
| 5306 | ······-·NIST-800-53-CM-6(a) | 5306 | ······-·NIST-800-53-CM-6(a) |
| 5307 | ······-·audit_rules_etc_group_open | 5307 | ······-·audit_rules_etc_group_open |
| Offset 5428, 16 lines modified | Offset 5428, 16 lines modified | ||
| 5428 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 5428 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 5429 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify | 5429 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 5430 | ··········create:·true | 5430 | ··········create:·true |
| 5431 | ··········mode:·o-rwx | 5431 | ··········mode:·o-rwx |
| 5432 | ··········state:·present | 5432 | ··········state:·present |
| 5433 | ········when:·syscalls_found·|·length·==·0 | 5433 | ········when:·syscalls_found·|·length·==·0 |
| 5434 | ······when: | 5434 | ······when: |
| 5435 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5436 | ······-·'"audit"·in·ansible_facts.packages' | 5435 | ······-·'"audit"·in·ansible_facts.packages' |
| 5436 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5437 | ······-·audit_arch·==·"b64" | 5437 | ······-·audit_arch·==·"b64" |
| 5438 | ······tags: | 5438 | ······tags: |
| 5439 | ······-·NIST-800-53-AC-2(4) | 5439 | ······-·NIST-800-53-AC-2(4) |
| 5440 | ······-·NIST-800-53-AC-6(9) | 5440 | ······-·NIST-800-53-AC-6(9) |
| 5441 | ······-·NIST-800-53-AU-12(c) | 5441 | ······-·NIST-800-53-AU-12(c) |
| 5442 | ······-·NIST-800-53-AU-2(d) | 5442 | ······-·NIST-800-53-AU-2(d) |
| 5443 | ······-·NIST-800-53-CM-6(a) | 5443 | ······-·NIST-800-53-CM-6(a) |
| Offset 5465, 16 lines modified | Offset 5465, 16 lines modified | ||
| 5465 | ······-·reboot_required | 5465 | ······-·reboot_required |
| 5466 | ······-·restrict_strategy | 5466 | ······-·restrict_strategy |
| 5467 | ····-·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 5467 | ····-·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 5468 | ······set_fact: | 5468 | ······set_fact: |
| 5469 | ········audit_arch:·b64 | 5469 | ········audit_arch:·b64 |
| 5470 | ······when: | 5470 | ······when: |
| 5471 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5472 | ······-·'"audit"·in·ansible_facts.packages' | 5471 | ······-·'"audit"·in·ansible_facts.packages' |
| 5472 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5473 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 5473 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 5474 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 5474 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 5475 | ······tags: | 5475 | ······tags: |
| 5476 | ······-·NIST-800-53-AC-2(4) | 5476 | ······-·NIST-800-53-AC-2(4) |
| 5477 | ······-·NIST-800-53-AC-6(9) | 5477 | ······-·NIST-800-53-AC-6(9) |
| 5478 | ······-·NIST-800-53-AU-12(c) | 5478 | ······-·NIST-800-53-AU-12(c) |
| 5479 | ······-·NIST-800-53-AU-2(d) | 5479 | ······-·NIST-800-53-AU-2(d) |
| Offset 5603, 16 lines modified | Offset 5603, 16 lines modified | ||
| 5603 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 5603 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 5604 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify | 5604 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 5605 | ··········create:·true | 5605 | ··········create:·true |
| 5606 | ··········mode:·o-rwx | 5606 | ··········mode:·o-rwx |
| 5607 | ··········state:·present | 5607 | ··········state:·present |
| 5608 | ········when:·syscalls_found·|·length·==·0 | 5608 | ········when:·syscalls_found·|·length·==·0 |
| 5609 | ······when: | 5609 | ······when: |
| 5610 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5611 | ······-·'"audit"·in·ansible_facts.packages' | 5610 | ······-·'"audit"·in·ansible_facts.packages' |
| 5611 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5612 | ······tags: | 5612 | ······tags: |
| 5613 | ······-·NIST-800-53-AC-2(4) | 5613 | ······-·NIST-800-53-AC-2(4) |
| 5614 | ······-·NIST-800-53-AC-6(9) | 5614 | ······-·NIST-800-53-AC-6(9) |
| 5615 | ······-·NIST-800-53-AU-12(c) | 5615 | ······-·NIST-800-53-AU-12(c) |
| 5616 | ······-·NIST-800-53-AU-2(d) | 5616 | ······-·NIST-800-53-AU-2(d) |
| 5617 | ······-·NIST-800-53-CM-6(a) | 5617 | ······-·NIST-800-53-CM-6(a) |
| 5618 | ······-·audit_rules_etc_group_open_by_handle_at | 5618 | ······-·audit_rules_etc_group_open_by_handle_at |
| Offset 5739, 16 lines modified | Offset 5739, 16 lines modified | ||
| 5739 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 5739 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 5740 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify | 5740 | ············-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 5741 | ··········create:·true | 5741 | ··········create:·true |
| 5742 | ··········mode:·o-rwx | 5742 | ··········mode:·o-rwx |
| 5743 | ··········state:·present | 5743 | ··········state:·present |
| 5744 | ········when:·syscalls_found·|·length·==·0 | 5744 | ········when:·syscalls_found·|·length·==·0 |
| 5745 | ······when: | 5745 | ······when: |
| 5746 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5747 | ······-·'"audit"·in·ansible_facts.packages' | 5746 | ······-·'"audit"·in·ansible_facts.packages' |
| 5747 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5748 | ······-·audit_arch·==·"b64" | 5748 | ······-·audit_arch·==·"b64" |
| 5749 | ······tags: | 5749 | ······tags: |
| 5750 | ······-·NIST-800-53-AC-2(4) | 5750 | ······-·NIST-800-53-AC-2(4) |
| 5751 | ······-·NIST-800-53-AC-6(9) | 5751 | ······-·NIST-800-53-AC-6(9) |
| 5752 | ······-·NIST-800-53-AU-12(c) | 5752 | ······-·NIST-800-53-AU-12(c) |
| 5753 | ······-·NIST-800-53-AU-2(d) | 5753 | ······-·NIST-800-53-AU-2(d) |
| 5754 | ······-·NIST-800-53-CM-6(a) | 5754 | ······-·NIST-800-53-CM-6(a) |
| Offset 5776, 16 lines modified | Offset 5776, 16 lines modified | ||
| 5776 | ······-·reboot_required | 5776 | ······-·reboot_required |
| 5777 | ······-·restrict_strategy | 5777 | ······-·restrict_strategy |
| 5778 | ····-·name:·Set·architecture·for·audit·openat·tasks | 5778 | ····-·name:·Set·architecture·for·audit·openat·tasks |
| 5779 | ······set_fact: | 5779 | ······set_fact: |
| 5780 | ········audit_arch:·b64 | 5780 | ········audit_arch:·b64 |
| 5781 | ······when: | 5781 | ······when: |
| 5782 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5783 | ······-·'"audit"·in·ansible_facts.packages' | 5782 | ······-·'"audit"·in·ansible_facts.packages' |
| 5783 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5784 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 5784 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 5785 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 5785 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 5786 | ······tags: | 5786 | ······tags: |
| 5787 | ······-·NIST-800-53-AC-2(4) | 5787 | ······-·NIST-800-53-AC-2(4) |
| 5788 | ······-·NIST-800-53-AC-6(9) | 5788 | ······-·NIST-800-53-AC-6(9) |
| 5789 | ······-·NIST-800-53-AU-12(c) | 5789 | ······-·NIST-800-53-AU-12(c) |
| 5790 | ······-·NIST-800-53-AU-2(d) | 5790 | ······-·NIST-800-53-AU-2(d) |
| Offset 5914, 16 lines modified | Offset 5914, 16 lines modified | ||
| 5914 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 5914 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| Max diff block lines reached; 250199/255595 bytes (97.89%) of diff not shown. | |||
| Offset 4622, 16 lines modified | Offset 4622, 16 lines modified | ||
| 4622 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 4622 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 4623 | ······find: | 4623 | ······find: |
| 4624 | ········paths:·/etc/audit/rules.d/ | 4624 | ········paths:·/etc/audit/rules.d/ |
| 4625 | ········patterns:·'*.rules' | 4625 | ········patterns:·'*.rules' |
| 4626 | ······register:·find_rules_d | 4626 | ······register:·find_rules_d |
| 4627 | ······when: | 4627 | ······when: |
| 4628 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4629 | ······-·'"audit"·in·ansible_facts.packages' | 4628 | ······-·'"audit"·in·ansible_facts.packages' |
| 4629 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4630 | ······tags: | 4630 | ······tags: |
| 4631 | ······-·CJIS-5.4.1.1 | 4631 | ······-·CJIS-5.4.1.1 |
| 4632 | ······-·NIST-800-171-3.3.1 | 4632 | ······-·NIST-800-171-3.3.1 |
| 4633 | ······-·NIST-800-171-3.4.3 | 4633 | ······-·NIST-800-171-3.4.3 |
| 4634 | ······-·NIST-800-53-AC-6(9) | 4634 | ······-·NIST-800-53-AC-6(9) |
| 4635 | ······-·NIST-800-53-CM-6(a) | 4635 | ······-·NIST-800-53-CM-6(a) |
| 4636 | ······-·PCI-DSS-Req-10.5.2 | 4636 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 4646, 16 lines modified | Offset 4646, 16 lines modified | ||
| 4646 | ······lineinfile: | 4646 | ······lineinfile: |
| 4647 | ········path:·'{{·item·}}' | 4647 | ········path:·'{{·item·}}' |
| 4648 | ········regexp:·^\s*(?:-e)\s+.*$ | 4648 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 4649 | ········state:·absent | 4649 | ········state:·absent |
| 4650 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 4650 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 4651 | ········}}' | 4651 | ········}}' |
| 4652 | ······when: | 4652 | ······when: |
| 4653 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4654 | ······-·'"audit"·in·ansible_facts.packages' | 4653 | ······-·'"audit"·in·ansible_facts.packages' |
| 4654 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4655 | ······tags: | 4655 | ······tags: |
| 4656 | ······-·CJIS-5.4.1.1 | 4656 | ······-·CJIS-5.4.1.1 |
| 4657 | ······-·NIST-800-171-3.3.1 | 4657 | ······-·NIST-800-171-3.3.1 |
| 4658 | ······-·NIST-800-171-3.4.3 | 4658 | ······-·NIST-800-171-3.4.3 |
| 4659 | ······-·NIST-800-53-AC-6(9) | 4659 | ······-·NIST-800-53-AC-6(9) |
| 4660 | ······-·NIST-800-53-CM-6(a) | 4660 | ······-·NIST-800-53-CM-6(a) |
| 4661 | ······-·PCI-DSS-Req-10.5.2 | 4661 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 4672, 16 lines modified | Offset 4672, 16 lines modified | ||
| 4672 | ········create:·true | 4672 | ········create:·true |
| 4673 | ········line:·-e·2 | 4673 | ········line:·-e·2 |
| 4674 | ········mode:·o-rwx | 4674 | ········mode:·o-rwx |
| 4675 | ······loop: | 4675 | ······loop: |
| 4676 | ······-·/etc/audit/audit.rules | 4676 | ······-·/etc/audit/audit.rules |
| 4677 | ······-·/etc/audit/rules.d/immutable.rules | 4677 | ······-·/etc/audit/rules.d/immutable.rules |
| 4678 | ······when: | 4678 | ······when: |
| 4679 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4680 | ······-·'"audit"·in·ansible_facts.packages' | 4679 | ······-·'"audit"·in·ansible_facts.packages' |
| 4680 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4681 | ······tags: | 4681 | ······tags: |
| 4682 | ······-·CJIS-5.4.1.1 | 4682 | ······-·CJIS-5.4.1.1 |
| 4683 | ······-·NIST-800-171-3.3.1 | 4683 | ······-·NIST-800-171-3.3.1 |
| 4684 | ······-·NIST-800-171-3.4.3 | 4684 | ······-·NIST-800-171-3.4.3 |
| 4685 | ······-·NIST-800-53-AC-6(9) | 4685 | ······-·NIST-800-53-AC-6(9) |
| 4686 | ······-·NIST-800-53-CM-6(a) | 4686 | ······-·NIST-800-53-CM-6(a) |
| 4687 | ······-·PCI-DSS-Req-10.5.2 | 4687 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 4713, 16 lines modified | Offset 4713, 16 lines modified | ||
| 4713 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 4713 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 4714 | ······find: | 4714 | ······find: |
| 4715 | ········paths:·/etc/audit/rules.d | 4715 | ········paths:·/etc/audit/rules.d |
| 4716 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 4716 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 4717 | ········patterns:·'*.rules' | 4717 | ········patterns:·'*.rules' |
| 4718 | ······register:·find_existing_watch_rules_d | 4718 | ······register:·find_existing_watch_rules_d |
| 4719 | ······when: | 4719 | ······when: |
| 4720 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4721 | ······-·'"audit"·in·ansible_facts.packages' | 4720 | ······-·'"audit"·in·ansible_facts.packages' |
| 4721 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4722 | ······tags: | 4722 | ······tags: |
| 4723 | ······-·CJIS-5.4.1.1 | 4723 | ······-·CJIS-5.4.1.1 |
| 4724 | ······-·NIST-800-171-3.1.8 | 4724 | ······-·NIST-800-171-3.1.8 |
| 4725 | ······-·NIST-800-53-AU-12(c) | 4725 | ······-·NIST-800-53-AU-12(c) |
| 4726 | ······-·NIST-800-53-AU-2(d) | 4726 | ······-·NIST-800-53-AU-2(d) |
| 4727 | ······-·NIST-800-53-CM-6(a) | 4727 | ······-·NIST-800-53-CM-6(a) |
| 4728 | ······-·PCI-DSS-Req-10.5.5 | 4728 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 4736, 16 lines modified | Offset 4736, 16 lines modified | ||
| 4736 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 4736 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 4737 | ······find: | 4737 | ······find: |
| 4738 | ········paths:·/etc/audit/rules.d | 4738 | ········paths:·/etc/audit/rules.d |
| 4739 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 4739 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 4740 | ········patterns:·'*.rules' | 4740 | ········patterns:·'*.rules' |
| 4741 | ······register:·find_watch_key | 4741 | ······register:·find_watch_key |
| 4742 | ······when: | 4742 | ······when: |
| 4743 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4744 | ······-·'"audit"·in·ansible_facts.packages' | 4743 | ······-·'"audit"·in·ansible_facts.packages' |
| 4744 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4745 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 4745 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 4746 | ········==·0 | 4746 | ········==·0 |
| 4747 | ······tags: | 4747 | ······tags: |
| 4748 | ······-·CJIS-5.4.1.1 | 4748 | ······-·CJIS-5.4.1.1 |
| 4749 | ······-·NIST-800-171-3.1.8 | 4749 | ······-·NIST-800-171-3.1.8 |
| 4750 | ······-·NIST-800-53-AU-12(c) | 4750 | ······-·NIST-800-53-AU-12(c) |
| 4751 | ······-·NIST-800-53-AU-2(d) | 4751 | ······-·NIST-800-53-AU-2(d) |
| Offset 4759, 16 lines modified | Offset 4759, 16 lines modified | ||
| 4759 | ······-·restrict_strategy | 4759 | ······-·restrict_strategy |
| 4760 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 4760 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 4761 | ······set_fact: | 4761 | ······set_fact: |
| 4762 | ········all_files: | 4762 | ········all_files: |
| 4763 | ········-·/etc/audit/rules.d/MAC-policy.rules | 4763 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 4764 | ······when: | 4764 | ······when: |
| 4765 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4766 | ······-·'"audit"·in·ansible_facts.packages' | 4765 | ······-·'"audit"·in·ansible_facts.packages' |
| 4766 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4767 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 4767 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 4768 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 4768 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 4769 | ······tags: | 4769 | ······tags: |
| 4770 | ······-·CJIS-5.4.1.1 | 4770 | ······-·CJIS-5.4.1.1 |
| 4771 | ······-·NIST-800-171-3.1.8 | 4771 | ······-·NIST-800-171-3.1.8 |
| 4772 | ······-·NIST-800-53-AU-12(c) | 4772 | ······-·NIST-800-53-AU-12(c) |
| 4773 | ······-·NIST-800-53-AU-2(d) | 4773 | ······-·NIST-800-53-AU-2(d) |
| Offset 4782, 16 lines modified | Offset 4782, 16 lines modified | ||
| 4782 | ······-·restrict_strategy | 4782 | ······-·restrict_strategy |
| 4783 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 4783 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 4784 | ······set_fact: | 4784 | ······set_fact: |
| 4785 | ········all_files: | 4785 | ········all_files: |
| 4786 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 4786 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 4787 | ······when: | 4787 | ······when: |
| 4788 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4789 | ······-·'"audit"·in·ansible_facts.packages' | 4788 | ······-·'"audit"·in·ansible_facts.packages' |
| 4789 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4790 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 4790 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 4791 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 4791 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 4792 | ······tags: | 4792 | ······tags: |
| 4793 | ······-·CJIS-5.4.1.1 | 4793 | ······-·CJIS-5.4.1.1 |
| 4794 | ······-·NIST-800-171-3.1.8 | 4794 | ······-·NIST-800-171-3.1.8 |
| 4795 | ······-·NIST-800-53-AU-12(c) | 4795 | ······-·NIST-800-53-AU-12(c) |
| 4796 | ······-·NIST-800-53-AU-2(d) | 4796 | ······-·NIST-800-53-AU-2(d) |
| Offset 4807, 16 lines modified | Offset 4807, 16 lines modified | ||
| 4807 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 4807 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 160695/165730 bytes (96.96%) of diff not shown. | |||
| Offset 1570, 16 lines modified | Offset 1570, 16 lines modified | ||
| 1570 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 1570 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 1571 | ······find: | 1571 | ······find: |
| 1572 | ········paths:·/etc/audit/rules.d/ | 1572 | ········paths:·/etc/audit/rules.d/ |
| 1573 | ········patterns:·'*.rules' | 1573 | ········patterns:·'*.rules' |
| 1574 | ······register:·find_rules_d | 1574 | ······register:·find_rules_d |
| 1575 | ······when: | 1575 | ······when: |
| 1576 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1577 | ······-·'"audit"·in·ansible_facts.packages' | 1576 | ······-·'"audit"·in·ansible_facts.packages' |
| 1577 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1578 | ······tags: | 1578 | ······tags: |
| 1579 | ······-·CJIS-5.4.1.1 | 1579 | ······-·CJIS-5.4.1.1 |
| 1580 | ······-·NIST-800-171-3.3.1 | 1580 | ······-·NIST-800-171-3.3.1 |
| 1581 | ······-·NIST-800-171-3.4.3 | 1581 | ······-·NIST-800-171-3.4.3 |
| 1582 | ······-·NIST-800-53-AC-6(9) | 1582 | ······-·NIST-800-53-AC-6(9) |
| 1583 | ······-·NIST-800-53-CM-6(a) | 1583 | ······-·NIST-800-53-CM-6(a) |
| 1584 | ······-·PCI-DSS-Req-10.5.2 | 1584 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1594, 16 lines modified | Offset 1594, 16 lines modified | ||
| 1594 | ······lineinfile: | 1594 | ······lineinfile: |
| 1595 | ········path:·'{{·item·}}' | 1595 | ········path:·'{{·item·}}' |
| 1596 | ········regexp:·^\s*(?:-e)\s+.*$ | 1596 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 1597 | ········state:·absent | 1597 | ········state:·absent |
| 1598 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 1598 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 1599 | ········}}' | 1599 | ········}}' |
| 1600 | ······when: | 1600 | ······when: |
| 1601 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1602 | ······-·'"audit"·in·ansible_facts.packages' | 1601 | ······-·'"audit"·in·ansible_facts.packages' |
| 1602 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1603 | ······tags: | 1603 | ······tags: |
| 1604 | ······-·CJIS-5.4.1.1 | 1604 | ······-·CJIS-5.4.1.1 |
| 1605 | ······-·NIST-800-171-3.3.1 | 1605 | ······-·NIST-800-171-3.3.1 |
| 1606 | ······-·NIST-800-171-3.4.3 | 1606 | ······-·NIST-800-171-3.4.3 |
| 1607 | ······-·NIST-800-53-AC-6(9) | 1607 | ······-·NIST-800-53-AC-6(9) |
| 1608 | ······-·NIST-800-53-CM-6(a) | 1608 | ······-·NIST-800-53-CM-6(a) |
| 1609 | ······-·PCI-DSS-Req-10.5.2 | 1609 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1620, 16 lines modified | Offset 1620, 16 lines modified | ||
| 1620 | ········create:·true | 1620 | ········create:·true |
| 1621 | ········line:·-e·2 | 1621 | ········line:·-e·2 |
| 1622 | ········mode:·o-rwx | 1622 | ········mode:·o-rwx |
| 1623 | ······loop: | 1623 | ······loop: |
| 1624 | ······-·/etc/audit/audit.rules | 1624 | ······-·/etc/audit/audit.rules |
| 1625 | ······-·/etc/audit/rules.d/immutable.rules | 1625 | ······-·/etc/audit/rules.d/immutable.rules |
| 1626 | ······when: | 1626 | ······when: |
| 1627 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1628 | ······-·'"audit"·in·ansible_facts.packages' | 1627 | ······-·'"audit"·in·ansible_facts.packages' |
| 1628 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1629 | ······tags: | 1629 | ······tags: |
| 1630 | ······-·CJIS-5.4.1.1 | 1630 | ······-·CJIS-5.4.1.1 |
| 1631 | ······-·NIST-800-171-3.3.1 | 1631 | ······-·NIST-800-171-3.3.1 |
| 1632 | ······-·NIST-800-171-3.4.3 | 1632 | ······-·NIST-800-171-3.4.3 |
| 1633 | ······-·NIST-800-53-AC-6(9) | 1633 | ······-·NIST-800-53-AC-6(9) |
| 1634 | ······-·NIST-800-53-CM-6(a) | 1634 | ······-·NIST-800-53-CM-6(a) |
| 1635 | ······-·PCI-DSS-Req-10.5.2 | 1635 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1661, 16 lines modified | Offset 1661, 16 lines modified | ||
| 1661 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 1661 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 1662 | ······find: | 1662 | ······find: |
| 1663 | ········paths:·/etc/audit/rules.d | 1663 | ········paths:·/etc/audit/rules.d |
| 1664 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 1664 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 1665 | ········patterns:·'*.rules' | 1665 | ········patterns:·'*.rules' |
| 1666 | ······register:·find_existing_watch_rules_d | 1666 | ······register:·find_existing_watch_rules_d |
| 1667 | ······when: | 1667 | ······when: |
| 1668 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1669 | ······-·'"audit"·in·ansible_facts.packages' | 1668 | ······-·'"audit"·in·ansible_facts.packages' |
| 1669 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1670 | ······tags: | 1670 | ······tags: |
| 1671 | ······-·CJIS-5.4.1.1 | 1671 | ······-·CJIS-5.4.1.1 |
| 1672 | ······-·NIST-800-171-3.1.8 | 1672 | ······-·NIST-800-171-3.1.8 |
| 1673 | ······-·NIST-800-53-AU-12(c) | 1673 | ······-·NIST-800-53-AU-12(c) |
| 1674 | ······-·NIST-800-53-AU-2(d) | 1674 | ······-·NIST-800-53-AU-2(d) |
| 1675 | ······-·NIST-800-53-CM-6(a) | 1675 | ······-·NIST-800-53-CM-6(a) |
| 1676 | ······-·PCI-DSS-Req-10.5.5 | 1676 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 1684, 16 lines modified | Offset 1684, 16 lines modified | ||
| 1684 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 1684 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 1685 | ······find: | 1685 | ······find: |
| 1686 | ········paths:·/etc/audit/rules.d | 1686 | ········paths:·/etc/audit/rules.d |
| 1687 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 1687 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 1688 | ········patterns:·'*.rules' | 1688 | ········patterns:·'*.rules' |
| 1689 | ······register:·find_watch_key | 1689 | ······register:·find_watch_key |
| 1690 | ······when: | 1690 | ······when: |
| 1691 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1692 | ······-·'"audit"·in·ansible_facts.packages' | 1691 | ······-·'"audit"·in·ansible_facts.packages' |
| 1692 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1693 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1693 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1694 | ········==·0 | 1694 | ········==·0 |
| 1695 | ······tags: | 1695 | ······tags: |
| 1696 | ······-·CJIS-5.4.1.1 | 1696 | ······-·CJIS-5.4.1.1 |
| 1697 | ······-·NIST-800-171-3.1.8 | 1697 | ······-·NIST-800-171-3.1.8 |
| 1698 | ······-·NIST-800-53-AU-12(c) | 1698 | ······-·NIST-800-53-AU-12(c) |
| 1699 | ······-·NIST-800-53-AU-2(d) | 1699 | ······-·NIST-800-53-AU-2(d) |
| Offset 1707, 16 lines modified | Offset 1707, 16 lines modified | ||
| 1707 | ······-·restrict_strategy | 1707 | ······-·restrict_strategy |
| 1708 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 1708 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 1709 | ······set_fact: | 1709 | ······set_fact: |
| 1710 | ········all_files: | 1710 | ········all_files: |
| 1711 | ········-·/etc/audit/rules.d/MAC-policy.rules | 1711 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 1712 | ······when: | 1712 | ······when: |
| 1713 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1714 | ······-·'"audit"·in·ansible_facts.packages' | 1713 | ······-·'"audit"·in·ansible_facts.packages' |
| 1714 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1715 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1715 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1716 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1716 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1717 | ······tags: | 1717 | ······tags: |
| 1718 | ······-·CJIS-5.4.1.1 | 1718 | ······-·CJIS-5.4.1.1 |
| 1719 | ······-·NIST-800-171-3.1.8 | 1719 | ······-·NIST-800-171-3.1.8 |
| 1720 | ······-·NIST-800-53-AU-12(c) | 1720 | ······-·NIST-800-53-AU-12(c) |
| 1721 | ······-·NIST-800-53-AU-2(d) | 1721 | ······-·NIST-800-53-AU-2(d) |
| Offset 1730, 16 lines modified | Offset 1730, 16 lines modified | ||
| 1730 | ······-·restrict_strategy | 1730 | ······-·restrict_strategy |
| 1731 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1731 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1732 | ······set_fact: | 1732 | ······set_fact: |
| 1733 | ········all_files: | 1733 | ········all_files: |
| 1734 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1734 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1735 | ······when: | 1735 | ······when: |
| 1736 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1737 | ······-·'"audit"·in·ansible_facts.packages' | 1736 | ······-·'"audit"·in·ansible_facts.packages' |
| 1737 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1738 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1738 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1739 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1739 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1740 | ······tags: | 1740 | ······tags: |
| 1741 | ······-·CJIS-5.4.1.1 | 1741 | ······-·CJIS-5.4.1.1 |
| 1742 | ······-·NIST-800-171-3.1.8 | 1742 | ······-·NIST-800-171-3.1.8 |
| 1743 | ······-·NIST-800-53-AU-12(c) | 1743 | ······-·NIST-800-53-AU-12(c) |
| 1744 | ······-·NIST-800-53-AU-2(d) | 1744 | ······-·NIST-800-53-AU-2(d) |
| Offset 1755, 16 lines modified | Offset 1755, 16 lines modified | ||
| 1755 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 1755 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 103613/108648 bytes (95.37%) of diff not shown. | |||
| Offset 5306, 16 lines modified | Offset 5306, 16 lines modified | ||
| 5306 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 5306 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 5307 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 5307 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 5308 | ··········create:·true | 5308 | ··········create:·true |
| 5309 | ··········mode:·o-rwx | 5309 | ··········mode:·o-rwx |
| 5310 | ··········state:·present | 5310 | ··········state:·present |
| 5311 | ········when:·syscalls_found·|·length·==·0 | 5311 | ········when:·syscalls_found·|·length·==·0 |
| 5312 | ······when: | 5312 | ······when: |
| 5313 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5314 | ······-·'"audit"·in·ansible_facts.packages' | 5313 | ······-·'"audit"·in·ansible_facts.packages' |
| 5314 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5315 | ······tags: | 5315 | ······tags: |
| 5316 | ······-·DISA-STIG-OL07-00-030690 | 5316 | ······-·DISA-STIG-OL07-00-030690 |
| 5317 | ······-·NIST-800-171-3.1.7 | 5317 | ······-·NIST-800-171-3.1.7 |
| 5318 | ······-·NIST-800-53-AC-6(9) | 5318 | ······-·NIST-800-53-AC-6(9) |
| 5319 | ······-·NIST-800-53-AU-12(c) | 5319 | ······-·NIST-800-53-AU-12(c) |
| 5320 | ······-·NIST-800-53-AU-2(d) | 5320 | ······-·NIST-800-53-AU-2(d) |
| 5321 | ······-·NIST-800-53-CM-6(a) | 5321 | ······-·NIST-800-53-CM-6(a) |
| Offset 5459, 16 lines modified | Offset 5459, 16 lines modified | ||
| 5459 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 5459 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 5460 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 5460 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 5461 | ··········create:·true | 5461 | ··········create:·true |
| 5462 | ··········mode:·o-rwx | 5462 | ··········mode:·o-rwx |
| 5463 | ··········state:·present | 5463 | ··········state:·present |
| 5464 | ········when:·syscalls_found·|·length·==·0 | 5464 | ········when:·syscalls_found·|·length·==·0 |
| 5465 | ······when: | 5465 | ······when: |
| 5466 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5467 | ······-·'"audit"·in·ansible_facts.packages' | 5466 | ······-·'"audit"·in·ansible_facts.packages' |
| 5467 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5468 | ······tags: | 5468 | ······tags: |
| 5469 | ······-·DISA-STIG-OL07-00-030690 | 5469 | ······-·DISA-STIG-OL07-00-030690 |
| 5470 | ······-·NIST-800-171-3.1.7 | 5470 | ······-·NIST-800-171-3.1.7 |
| 5471 | ······-·NIST-800-53-AC-6(9) | 5471 | ······-·NIST-800-53-AC-6(9) |
| 5472 | ······-·NIST-800-53-AU-12(c) | 5472 | ······-·NIST-800-53-AU-12(c) |
| 5473 | ······-·NIST-800-53-AU-2(d) | 5473 | ······-·NIST-800-53-AU-2(d) |
| 5474 | ······-·NIST-800-53-CM-6(a) | 5474 | ······-·NIST-800-53-CM-6(a) |
| Offset 5034, 16 lines modified | Offset 5034, 16 lines modified | ||
| 5034 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 5034 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 5035 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 5035 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 5036 | ··········create:·true | 5036 | ··········create:·true |
| 5037 | ··········mode:·o-rwx | 5037 | ··········mode:·o-rwx |
| 5038 | ··········state:·present | 5038 | ··········state:·present |
| 5039 | ········when:·syscalls_found·|·length·==·0 | 5039 | ········when:·syscalls_found·|·length·==·0 |
| 5040 | ······when: | 5040 | ······when: |
| 5041 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5042 | ······-·'"audit"·in·ansible_facts.packages' | 5041 | ······-·'"audit"·in·ansible_facts.packages' |
| 5042 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5043 | ······tags: | 5043 | ······tags: |
| 5044 | ······-·DISA-STIG-OL07-00-030690 | 5044 | ······-·DISA-STIG-OL07-00-030690 |
| 5045 | ······-·NIST-800-171-3.1.7 | 5045 | ······-·NIST-800-171-3.1.7 |
| 5046 | ······-·NIST-800-53-AC-6(9) | 5046 | ······-·NIST-800-53-AC-6(9) |
| 5047 | ······-·NIST-800-53-AU-12(c) | 5047 | ······-·NIST-800-53-AU-12(c) |
| 5048 | ······-·NIST-800-53-AU-2(d) | 5048 | ······-·NIST-800-53-AU-2(d) |
| 5049 | ······-·NIST-800-53-CM-6(a) | 5049 | ······-·NIST-800-53-CM-6(a) |
| Offset 2552, 16 lines modified | Offset 2552, 16 lines modified | ||
| 2552 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 2552 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 2553 | ······find: | 2553 | ······find: |
| 2554 | ········paths:·/etc/audit/rules.d/ | 2554 | ········paths:·/etc/audit/rules.d/ |
| 2555 | ········patterns:·'*.rules' | 2555 | ········patterns:·'*.rules' |
| 2556 | ······register:·find_rules_d | 2556 | ······register:·find_rules_d |
| 2557 | ······when: | 2557 | ······when: |
| 2558 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2559 | ······-·'"audit"·in·ansible_facts.packages' | 2558 | ······-·'"audit"·in·ansible_facts.packages' |
| 2559 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2560 | ······tags: | 2560 | ······tags: |
| 2561 | ······-·CJIS-5.4.1.1 | 2561 | ······-·CJIS-5.4.1.1 |
| 2562 | ······-·NIST-800-171-3.3.1 | 2562 | ······-·NIST-800-171-3.3.1 |
| 2563 | ······-·NIST-800-171-3.4.3 | 2563 | ······-·NIST-800-171-3.4.3 |
| 2564 | ······-·NIST-800-53-AC-6(9) | 2564 | ······-·NIST-800-53-AC-6(9) |
| 2565 | ······-·NIST-800-53-CM-6(a) | 2565 | ······-·NIST-800-53-CM-6(a) |
| 2566 | ······-·PCI-DSS-Req-10.5.2 | 2566 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 2576, 16 lines modified | Offset 2576, 16 lines modified | ||
| 2576 | ······lineinfile: | 2576 | ······lineinfile: |
| 2577 | ········path:·'{{·item·}}' | 2577 | ········path:·'{{·item·}}' |
| 2578 | ········regexp:·^\s*(?:-e)\s+.*$ | 2578 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 2579 | ········state:·absent | 2579 | ········state:·absent |
| 2580 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 2580 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 2581 | ········}}' | 2581 | ········}}' |
| 2582 | ······when: | 2582 | ······when: |
| 2583 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2584 | ······-·'"audit"·in·ansible_facts.packages' | 2583 | ······-·'"audit"·in·ansible_facts.packages' |
| 2584 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2585 | ······tags: | 2585 | ······tags: |
| 2586 | ······-·CJIS-5.4.1.1 | 2586 | ······-·CJIS-5.4.1.1 |
| 2587 | ······-·NIST-800-171-3.3.1 | 2587 | ······-·NIST-800-171-3.3.1 |
| 2588 | ······-·NIST-800-171-3.4.3 | 2588 | ······-·NIST-800-171-3.4.3 |
| 2589 | ······-·NIST-800-53-AC-6(9) | 2589 | ······-·NIST-800-53-AC-6(9) |
| 2590 | ······-·NIST-800-53-CM-6(a) | 2590 | ······-·NIST-800-53-CM-6(a) |
| 2591 | ······-·PCI-DSS-Req-10.5.2 | 2591 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 2602, 16 lines modified | Offset 2602, 16 lines modified | ||
| 2602 | ········create:·true | 2602 | ········create:·true |
| 2603 | ········line:·-e·2 | 2603 | ········line:·-e·2 |
| 2604 | ········mode:·o-rwx | 2604 | ········mode:·o-rwx |
| 2605 | ······loop: | 2605 | ······loop: |
| 2606 | ······-·/etc/audit/audit.rules | 2606 | ······-·/etc/audit/audit.rules |
| 2607 | ······-·/etc/audit/rules.d/immutable.rules | 2607 | ······-·/etc/audit/rules.d/immutable.rules |
| 2608 | ······when: | 2608 | ······when: |
| 2609 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2610 | ······-·'"audit"·in·ansible_facts.packages' | 2609 | ······-·'"audit"·in·ansible_facts.packages' |
| 2610 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2611 | ······tags: | 2611 | ······tags: |
| 2612 | ······-·CJIS-5.4.1.1 | 2612 | ······-·CJIS-5.4.1.1 |
| 2613 | ······-·NIST-800-171-3.3.1 | 2613 | ······-·NIST-800-171-3.3.1 |
| 2614 | ······-·NIST-800-171-3.4.3 | 2614 | ······-·NIST-800-171-3.4.3 |
| 2615 | ······-·NIST-800-53-AC-6(9) | 2615 | ······-·NIST-800-53-AC-6(9) |
| 2616 | ······-·NIST-800-53-CM-6(a) | 2616 | ······-·NIST-800-53-CM-6(a) |
| 2617 | ······-·PCI-DSS-Req-10.5.2 | 2617 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 2643, 16 lines modified | Offset 2643, 16 lines modified | ||
| 2643 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 2643 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 2644 | ······find: | 2644 | ······find: |
| 2645 | ········paths:·/etc/audit/rules.d | 2645 | ········paths:·/etc/audit/rules.d |
| 2646 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 2646 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 2647 | ········patterns:·'*.rules' | 2647 | ········patterns:·'*.rules' |
| 2648 | ······register:·find_existing_watch_rules_d | 2648 | ······register:·find_existing_watch_rules_d |
| 2649 | ······when: | 2649 | ······when: |
| 2650 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2651 | ······-·'"audit"·in·ansible_facts.packages' | 2650 | ······-·'"audit"·in·ansible_facts.packages' |
| 2651 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2652 | ······tags: | 2652 | ······tags: |
| 2653 | ······-·CJIS-5.4.1.1 | 2653 | ······-·CJIS-5.4.1.1 |
| 2654 | ······-·NIST-800-171-3.1.8 | 2654 | ······-·NIST-800-171-3.1.8 |
| 2655 | ······-·NIST-800-53-AU-12(c) | 2655 | ······-·NIST-800-53-AU-12(c) |
| 2656 | ······-·NIST-800-53-AU-2(d) | 2656 | ······-·NIST-800-53-AU-2(d) |
| 2657 | ······-·NIST-800-53-CM-6(a) | 2657 | ······-·NIST-800-53-CM-6(a) |
| 2658 | ······-·PCI-DSS-Req-10.5.5 | 2658 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 2666, 16 lines modified | Offset 2666, 16 lines modified | ||
| 2666 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 2666 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 2667 | ······find: | 2667 | ······find: |
| 2668 | ········paths:·/etc/audit/rules.d | 2668 | ········paths:·/etc/audit/rules.d |
| 2669 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 2669 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 2670 | ········patterns:·'*.rules' | 2670 | ········patterns:·'*.rules' |
| 2671 | ······register:·find_watch_key | 2671 | ······register:·find_watch_key |
| 2672 | ······when: | 2672 | ······when: |
| 2673 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2674 | ······-·'"audit"·in·ansible_facts.packages' | 2673 | ······-·'"audit"·in·ansible_facts.packages' |
| 2674 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2675 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 2675 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 2676 | ········==·0 | 2676 | ········==·0 |
| 2677 | ······tags: | 2677 | ······tags: |
| 2678 | ······-·CJIS-5.4.1.1 | 2678 | ······-·CJIS-5.4.1.1 |
| 2679 | ······-·NIST-800-171-3.1.8 | 2679 | ······-·NIST-800-171-3.1.8 |
| 2680 | ······-·NIST-800-53-AU-12(c) | 2680 | ······-·NIST-800-53-AU-12(c) |
| 2681 | ······-·NIST-800-53-AU-2(d) | 2681 | ······-·NIST-800-53-AU-2(d) |
| Offset 2689, 16 lines modified | Offset 2689, 16 lines modified | ||
| 2689 | ······-·restrict_strategy | 2689 | ······-·restrict_strategy |
| 2690 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 2690 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 2691 | ······set_fact: | 2691 | ······set_fact: |
| 2692 | ········all_files: | 2692 | ········all_files: |
| 2693 | ········-·/etc/audit/rules.d/MAC-policy.rules | 2693 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 2694 | ······when: | 2694 | ······when: |
| 2695 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2696 | ······-·'"audit"·in·ansible_facts.packages' | 2695 | ······-·'"audit"·in·ansible_facts.packages' |
| 2696 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2697 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 2697 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 2698 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 2698 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 2699 | ······tags: | 2699 | ······tags: |
| 2700 | ······-·CJIS-5.4.1.1 | 2700 | ······-·CJIS-5.4.1.1 |
| 2701 | ······-·NIST-800-171-3.1.8 | 2701 | ······-·NIST-800-171-3.1.8 |
| 2702 | ······-·NIST-800-53-AU-12(c) | 2702 | ······-·NIST-800-53-AU-12(c) |
| 2703 | ······-·NIST-800-53-AU-2(d) | 2703 | ······-·NIST-800-53-AU-2(d) |
| Offset 2712, 16 lines modified | Offset 2712, 16 lines modified | ||
| 2712 | ······-·restrict_strategy | 2712 | ······-·restrict_strategy |
| 2713 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 2713 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 2714 | ······set_fact: | 2714 | ······set_fact: |
| 2715 | ········all_files: | 2715 | ········all_files: |
| 2716 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 2716 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 2717 | ······when: | 2717 | ······when: |
| 2718 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2719 | ······-·'"audit"·in·ansible_facts.packages' | 2718 | ······-·'"audit"·in·ansible_facts.packages' |
| 2719 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2720 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 2720 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 2721 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 2721 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 2722 | ······tags: | 2722 | ······tags: |
| 2723 | ······-·CJIS-5.4.1.1 | 2723 | ······-·CJIS-5.4.1.1 |
| 2724 | ······-·NIST-800-171-3.1.8 | 2724 | ······-·NIST-800-171-3.1.8 |
| 2725 | ······-·NIST-800-53-AU-12(c) | 2725 | ······-·NIST-800-53-AU-12(c) |
| 2726 | ······-·NIST-800-53-AU-2(d) | 2726 | ······-·NIST-800-53-AU-2(d) |
| Offset 2737, 16 lines modified | Offset 2737, 16 lines modified | ||
| 2737 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 2737 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 103937/108972 bytes (95.38%) of diff not shown. | |||
| Offset 4498, 16 lines modified | Offset 4498, 16 lines modified | ||
| 4498 | ······lineinfile: | 4498 | ······lineinfile: |
| 4499 | ········dest:·/etc/audit/auditd.conf | 4499 | ········dest:·/etc/audit/auditd.conf |
| 4500 | ········regexp:·^\s*flush\s*=\s*.*$ | 4500 | ········regexp:·^\s*flush\s*=\s*.*$ |
| 4501 | ········line:·flush·=·{{·var_auditd_flush·}} | 4501 | ········line:·flush·=·{{·var_auditd_flush·}} |
| 4502 | ········state:·present | 4502 | ········state:·present |
| 4503 | ········create:·true | 4503 | ········create:·true |
| 4504 | ······when: | 4504 | ······when: |
| 4505 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4506 | ······-·'"audit"·in·ansible_facts.packages' | 4505 | ······-·'"audit"·in·ansible_facts.packages' |
| 4506 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4507 | ······tags: | 4507 | ······tags: |
| 4508 | ······-·NIST-800-171-3.3.1 | 4508 | ······-·NIST-800-171-3.3.1 |
| 4509 | ······-·NIST-800-53-AU-11 | 4509 | ······-·NIST-800-53-AU-11 |
| 4510 | ······-·NIST-800-53-CM-6(a) | 4510 | ······-·NIST-800-53-CM-6(a) |
| 4511 | ······-·auditd_data_retention_flush | 4511 | ······-·auditd_data_retention_flush |
| 4512 | ······-·low_complexity | 4512 | ······-·low_complexity |
| 4513 | ······-·low_disruption | 4513 | ······-·low_disruption |
| Offset 905, 16 lines modified | Offset 905, 16 lines modified | ||
| 905 | ······-·no_reboot_needed | 905 | ······-·no_reboot_needed |
| 906 | ······-·restrict_strategy | 906 | ······-·restrict_strategy |
| 907 | ····-·name:·Set·architecture·for·audit·tasks | 907 | ····-·name:·Set·architecture·for·audit·tasks |
| 908 | ······set_fact: | 908 | ······set_fact: |
| 909 | ········audit_arch:·b64 | 909 | ········audit_arch:·b64 |
| 910 | ······when: | 910 | ······when: |
| 911 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 912 | ······-·'"audit"·in·ansible_facts.packages' | 911 | ······-·'"audit"·in·ansible_facts.packages' |
| 912 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 913 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 913 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 914 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 914 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 915 | ······tags: | 915 | ······tags: |
| 916 | ······-·CJIS-5.4.1.1 | 916 | ······-·CJIS-5.4.1.1 |
| 917 | ······-·NIST-800-171-3.1.7 | 917 | ······-·NIST-800-171-3.1.7 |
| 918 | ······-·NIST-800-53-AC-6(9) | 918 | ······-·NIST-800-53-AC-6(9) |
| 919 | ······-·NIST-800-53-AU-12(c) | 919 | ······-·NIST-800-53-AU-12(c) |
| Offset 1047, 16 lines modified | Offset 1047, 16 lines modified | ||
| 1047 | ··········path:·'{{·audit_file·}}' | 1047 | ··········path:·'{{·audit_file·}}' |
| 1048 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification | 1048 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification |
| 1049 | ··········create:·true | 1049 | ··········create:·true |
| 1050 | ··········mode:·o-rwx | 1050 | ··········mode:·o-rwx |
| 1051 | ··········state:·present | 1051 | ··········state:·present |
| 1052 | ········when:·syscalls_found·|·length·==·0 | 1052 | ········when:·syscalls_found·|·length·==·0 |
| 1053 | ······when: | 1053 | ······when: |
| 1054 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1055 | ······-·'"audit"·in·ansible_facts.packages' | 1054 | ······-·'"audit"·in·ansible_facts.packages' |
| 1055 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1056 | ······tags: | 1056 | ······tags: |
| 1057 | ······-·CJIS-5.4.1.1 | 1057 | ······-·CJIS-5.4.1.1 |
| 1058 | ······-·NIST-800-171-3.1.7 | 1058 | ······-·NIST-800-171-3.1.7 |
| 1059 | ······-·NIST-800-53-AC-6(9) | 1059 | ······-·NIST-800-53-AC-6(9) |
| 1060 | ······-·NIST-800-53-AU-12(c) | 1060 | ······-·NIST-800-53-AU-12(c) |
| 1061 | ······-·NIST-800-53-AU-2(d) | 1061 | ······-·NIST-800-53-AU-2(d) |
| 1062 | ······-·NIST-800-53-CM-6(a) | 1062 | ······-·NIST-800-53-CM-6(a) |
| Offset 1187, 16 lines modified | Offset 1187, 16 lines modified | ||
| 1187 | ··········path:·'{{·audit_file·}}' | 1187 | ··········path:·'{{·audit_file·}}' |
| 1188 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification | 1188 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification |
| 1189 | ··········create:·true | 1189 | ··········create:·true |
| 1190 | ··········mode:·o-rwx | 1190 | ··········mode:·o-rwx |
| 1191 | ··········state:·present | 1191 | ··········state:·present |
| 1192 | ········when:·syscalls_found·|·length·==·0 | 1192 | ········when:·syscalls_found·|·length·==·0 |
| 1193 | ······when: | 1193 | ······when: |
| 1194 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1195 | ······-·'"audit"·in·ansible_facts.packages' | 1194 | ······-·'"audit"·in·ansible_facts.packages' |
| 1195 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1196 | ······-·audit_arch·==·"b64" | 1196 | ······-·audit_arch·==·"b64" |
| 1197 | ······tags: | 1197 | ······tags: |
| 1198 | ······-·CJIS-5.4.1.1 | 1198 | ······-·CJIS-5.4.1.1 |
| 1199 | ······-·NIST-800-171-3.1.7 | 1199 | ······-·NIST-800-171-3.1.7 |
| 1200 | ······-·NIST-800-53-AC-6(9) | 1200 | ······-·NIST-800-53-AC-6(9) |
| 1201 | ······-·NIST-800-53-AU-12(c) | 1201 | ······-·NIST-800-53-AU-12(c) |
| 1202 | ······-·NIST-800-53-AU-2(d) | 1202 | ······-·NIST-800-53-AU-2(d) |
| Offset 1212, 16 lines modified | Offset 1212, 16 lines modified | ||
| 1212 | ····-·name:·Check·if·watch·rule·for·/etc/issue·already·exists·in·/etc/audit/rules.d/ | 1212 | ····-·name:·Check·if·watch·rule·for·/etc/issue·already·exists·in·/etc/audit/rules.d/ |
| 1213 | ······find: | 1213 | ······find: |
| 1214 | ········paths:·/etc/audit/rules.d | 1214 | ········paths:·/etc/audit/rules.d |
| 1215 | ········contains:·^\s*-w\s+/etc/issue\s+-p\s+wa(\s|$)+ | 1215 | ········contains:·^\s*-w\s+/etc/issue\s+-p\s+wa(\s|$)+ |
| 1216 | ········patterns:·'*.rules' | 1216 | ········patterns:·'*.rules' |
| 1217 | ······register:·find_existing_watch_rules_d | 1217 | ······register:·find_existing_watch_rules_d |
| 1218 | ······when: | 1218 | ······when: |
| 1219 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1220 | ······-·'"audit"·in·ansible_facts.packages' | 1219 | ······-·'"audit"·in·ansible_facts.packages' |
| 1220 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1221 | ······tags: | 1221 | ······tags: |
| 1222 | ······-·CJIS-5.4.1.1 | 1222 | ······-·CJIS-5.4.1.1 |
| 1223 | ······-·NIST-800-171-3.1.7 | 1223 | ······-·NIST-800-171-3.1.7 |
| 1224 | ······-·NIST-800-53-AC-6(9) | 1224 | ······-·NIST-800-53-AC-6(9) |
| 1225 | ······-·NIST-800-53-AU-12(c) | 1225 | ······-·NIST-800-53-AU-12(c) |
| 1226 | ······-·NIST-800-53-AU-2(d) | 1226 | ······-·NIST-800-53-AU-2(d) |
| 1227 | ······-·NIST-800-53-CM-6(a) | 1227 | ······-·NIST-800-53-CM-6(a) |
| Offset 1236, 16 lines modified | Offset 1236, 16 lines modified | ||
| 1236 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·audit_rules_networkconfig_modification | 1236 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·audit_rules_networkconfig_modification |
| 1237 | ······find: | 1237 | ······find: |
| 1238 | ········paths:·/etc/audit/rules.d | 1238 | ········paths:·/etc/audit/rules.d |
| 1239 | ········contains:·^.*(?:-F·key=|-k\s+)audit_rules_networkconfig_modification$ | 1239 | ········contains:·^.*(?:-F·key=|-k\s+)audit_rules_networkconfig_modification$ |
| 1240 | ········patterns:·'*.rules' | 1240 | ········patterns:·'*.rules' |
| 1241 | ······register:·find_watch_key | 1241 | ······register:·find_watch_key |
| 1242 | ······when: | 1242 | ······when: |
| 1243 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1244 | ······-·'"audit"·in·ansible_facts.packages' | 1243 | ······-·'"audit"·in·ansible_facts.packages' |
| 1244 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1245 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1245 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1246 | ········==·0 | 1246 | ········==·0 |
| 1247 | ······tags: | 1247 | ······tags: |
| 1248 | ······-·CJIS-5.4.1.1 | 1248 | ······-·CJIS-5.4.1.1 |
| 1249 | ······-·NIST-800-171-3.1.7 | 1249 | ······-·NIST-800-171-3.1.7 |
| 1250 | ······-·NIST-800-53-AC-6(9) | 1250 | ······-·NIST-800-53-AC-6(9) |
| 1251 | ······-·NIST-800-53-AU-12(c) | 1251 | ······-·NIST-800-53-AU-12(c) |
| Offset 1261, 16 lines modified | Offset 1261, 16 lines modified | ||
| 1261 | ····-·name:·Use·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules·as·the | 1261 | ····-·name:·Use·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules·as·the |
| 1262 | ········recipient·for·the·rule | 1262 | ········recipient·for·the·rule |
| 1263 | ······set_fact: | 1263 | ······set_fact: |
| 1264 | ········all_files: | 1264 | ········all_files: |
| 1265 | ········-·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules | 1265 | ········-·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules |
| 1266 | ······when: | 1266 | ······when: |
| 1267 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1268 | ······-·'"audit"·in·ansible_facts.packages' | 1267 | ······-·'"audit"·in·ansible_facts.packages' |
| 1268 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1269 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1269 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1270 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1270 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1271 | ······tags: | 1271 | ······tags: |
| 1272 | ······-·CJIS-5.4.1.1 | 1272 | ······-·CJIS-5.4.1.1 |
| 1273 | ······-·NIST-800-171-3.1.7 | 1273 | ······-·NIST-800-171-3.1.7 |
| 1274 | ······-·NIST-800-53-AC-6(9) | 1274 | ······-·NIST-800-53-AC-6(9) |
| 1275 | ······-·NIST-800-53-AU-12(c) | 1275 | ······-·NIST-800-53-AU-12(c) |
| Offset 1285, 16 lines modified | Offset 1285, 16 lines modified | ||
| 1285 | ······-·restrict_strategy | 1285 | ······-·restrict_strategy |
| 1286 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1286 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1287 | ······set_fact: | 1287 | ······set_fact: |
| 1288 | ········all_files: | 1288 | ········all_files: |
| 1289 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1289 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1290 | ······when: | 1290 | ······when: |
| 1291 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1292 | ······-·'"audit"·in·ansible_facts.packages' | 1291 | ······-·'"audit"·in·ansible_facts.packages' |
| 1292 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1293 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1293 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1294 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1294 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1295 | ······tags: | 1295 | ······tags: |
| 1296 | ······-·CJIS-5.4.1.1 | 1296 | ······-·CJIS-5.4.1.1 |
| 1297 | ······-·NIST-800-171-3.1.7 | 1297 | ······-·NIST-800-171-3.1.7 |
| 1298 | ······-·NIST-800-53-AC-6(9) | 1298 | ······-·NIST-800-53-AC-6(9) |
| 1299 | ······-·NIST-800-53-AU-12(c) | 1299 | ······-·NIST-800-53-AU-12(c) |
| Offset 1311, 16 lines modified | Offset 1311, 16 lines modified | ||
| 1311 | ····-·name:·Add·watch·rule·for·/etc/issue·in·/etc/audit/rules.d/ | 1311 | ····-·name:·Add·watch·rule·for·/etc/issue·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 71056/76454 bytes (92.94%) of diff not shown. | |||
| Offset 1193, 16 lines modified | Offset 1193, 16 lines modified | ||
| 1193 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 1193 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 1194 | ······find: | 1194 | ······find: |
| 1195 | ········paths:·/etc/audit/rules.d/ | 1195 | ········paths:·/etc/audit/rules.d/ |
| 1196 | ········patterns:·'*.rules' | 1196 | ········patterns:·'*.rules' |
| 1197 | ······register:·find_rules_d | 1197 | ······register:·find_rules_d |
| 1198 | ······when: | 1198 | ······when: |
| 1199 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1200 | ······-·'"audit"·in·ansible_facts.packages' | 1199 | ······-·'"audit"·in·ansible_facts.packages' |
| 1200 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1201 | ······tags: | 1201 | ······tags: |
| 1202 | ······-·CJIS-5.4.1.1 | 1202 | ······-·CJIS-5.4.1.1 |
| 1203 | ······-·NIST-800-171-3.3.1 | 1203 | ······-·NIST-800-171-3.3.1 |
| 1204 | ······-·NIST-800-171-3.4.3 | 1204 | ······-·NIST-800-171-3.4.3 |
| 1205 | ······-·NIST-800-53-AC-6(9) | 1205 | ······-·NIST-800-53-AC-6(9) |
| 1206 | ······-·NIST-800-53-CM-6(a) | 1206 | ······-·NIST-800-53-CM-6(a) |
| 1207 | ······-·PCI-DSS-Req-10.5.2 | 1207 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1217, 16 lines modified | Offset 1217, 16 lines modified | ||
| 1217 | ······lineinfile: | 1217 | ······lineinfile: |
| 1218 | ········path:·'{{·item·}}' | 1218 | ········path:·'{{·item·}}' |
| 1219 | ········regexp:·^\s*(?:-e)\s+.*$ | 1219 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 1220 | ········state:·absent | 1220 | ········state:·absent |
| 1221 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 1221 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 1222 | ········}}' | 1222 | ········}}' |
| 1223 | ······when: | 1223 | ······when: |
| 1224 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1225 | ······-·'"audit"·in·ansible_facts.packages' | 1224 | ······-·'"audit"·in·ansible_facts.packages' |
| 1225 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1226 | ······tags: | 1226 | ······tags: |
| 1227 | ······-·CJIS-5.4.1.1 | 1227 | ······-·CJIS-5.4.1.1 |
| 1228 | ······-·NIST-800-171-3.3.1 | 1228 | ······-·NIST-800-171-3.3.1 |
| 1229 | ······-·NIST-800-171-3.4.3 | 1229 | ······-·NIST-800-171-3.4.3 |
| 1230 | ······-·NIST-800-53-AC-6(9) | 1230 | ······-·NIST-800-53-AC-6(9) |
| 1231 | ······-·NIST-800-53-CM-6(a) | 1231 | ······-·NIST-800-53-CM-6(a) |
| 1232 | ······-·PCI-DSS-Req-10.5.2 | 1232 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1243, 16 lines modified | Offset 1243, 16 lines modified | ||
| 1243 | ········create:·true | 1243 | ········create:·true |
| 1244 | ········line:·-e·2 | 1244 | ········line:·-e·2 |
| 1245 | ········mode:·o-rwx | 1245 | ········mode:·o-rwx |
| 1246 | ······loop: | 1246 | ······loop: |
| 1247 | ······-·/etc/audit/audit.rules | 1247 | ······-·/etc/audit/audit.rules |
| 1248 | ······-·/etc/audit/rules.d/immutable.rules | 1248 | ······-·/etc/audit/rules.d/immutable.rules |
| 1249 | ······when: | 1249 | ······when: |
| 1250 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1251 | ······-·'"audit"·in·ansible_facts.packages' | 1250 | ······-·'"audit"·in·ansible_facts.packages' |
| 1251 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1252 | ······tags: | 1252 | ······tags: |
| 1253 | ······-·CJIS-5.4.1.1 | 1253 | ······-·CJIS-5.4.1.1 |
| 1254 | ······-·NIST-800-171-3.3.1 | 1254 | ······-·NIST-800-171-3.3.1 |
| 1255 | ······-·NIST-800-171-3.4.3 | 1255 | ······-·NIST-800-171-3.4.3 |
| 1256 | ······-·NIST-800-53-AC-6(9) | 1256 | ······-·NIST-800-53-AC-6(9) |
| 1257 | ······-·NIST-800-53-CM-6(a) | 1257 | ······-·NIST-800-53-CM-6(a) |
| 1258 | ······-·PCI-DSS-Req-10.5.2 | 1258 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 1284, 16 lines modified | Offset 1284, 16 lines modified | ||
| 1284 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 1284 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 1285 | ······find: | 1285 | ······find: |
| 1286 | ········paths:·/etc/audit/rules.d | 1286 | ········paths:·/etc/audit/rules.d |
| 1287 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 1287 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 1288 | ········patterns:·'*.rules' | 1288 | ········patterns:·'*.rules' |
| 1289 | ······register:·find_existing_watch_rules_d | 1289 | ······register:·find_existing_watch_rules_d |
| 1290 | ······when: | 1290 | ······when: |
| 1291 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1292 | ······-·'"audit"·in·ansible_facts.packages' | 1291 | ······-·'"audit"·in·ansible_facts.packages' |
| 1292 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1293 | ······tags: | 1293 | ······tags: |
| 1294 | ······-·CJIS-5.4.1.1 | 1294 | ······-·CJIS-5.4.1.1 |
| 1295 | ······-·NIST-800-171-3.1.8 | 1295 | ······-·NIST-800-171-3.1.8 |
| 1296 | ······-·NIST-800-53-AU-12(c) | 1296 | ······-·NIST-800-53-AU-12(c) |
| 1297 | ······-·NIST-800-53-AU-2(d) | 1297 | ······-·NIST-800-53-AU-2(d) |
| 1298 | ······-·NIST-800-53-CM-6(a) | 1298 | ······-·NIST-800-53-CM-6(a) |
| 1299 | ······-·PCI-DSS-Req-10.5.5 | 1299 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 1307, 16 lines modified | Offset 1307, 16 lines modified | ||
| 1307 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 1307 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 1308 | ······find: | 1308 | ······find: |
| 1309 | ········paths:·/etc/audit/rules.d | 1309 | ········paths:·/etc/audit/rules.d |
| 1310 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 1310 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 1311 | ········patterns:·'*.rules' | 1311 | ········patterns:·'*.rules' |
| 1312 | ······register:·find_watch_key | 1312 | ······register:·find_watch_key |
| 1313 | ······when: | 1313 | ······when: |
| 1314 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1315 | ······-·'"audit"·in·ansible_facts.packages' | 1314 | ······-·'"audit"·in·ansible_facts.packages' |
| 1315 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1316 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1316 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1317 | ········==·0 | 1317 | ········==·0 |
| 1318 | ······tags: | 1318 | ······tags: |
| 1319 | ······-·CJIS-5.4.1.1 | 1319 | ······-·CJIS-5.4.1.1 |
| 1320 | ······-·NIST-800-171-3.1.8 | 1320 | ······-·NIST-800-171-3.1.8 |
| 1321 | ······-·NIST-800-53-AU-12(c) | 1321 | ······-·NIST-800-53-AU-12(c) |
| 1322 | ······-·NIST-800-53-AU-2(d) | 1322 | ······-·NIST-800-53-AU-2(d) |
| Offset 1330, 16 lines modified | Offset 1330, 16 lines modified | ||
| 1330 | ······-·restrict_strategy | 1330 | ······-·restrict_strategy |
| 1331 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 1331 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 1332 | ······set_fact: | 1332 | ······set_fact: |
| 1333 | ········all_files: | 1333 | ········all_files: |
| 1334 | ········-·/etc/audit/rules.d/MAC-policy.rules | 1334 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 1335 | ······when: | 1335 | ······when: |
| 1336 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1337 | ······-·'"audit"·in·ansible_facts.packages' | 1336 | ······-·'"audit"·in·ansible_facts.packages' |
| 1337 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1338 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1338 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1339 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1339 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1340 | ······tags: | 1340 | ······tags: |
| 1341 | ······-·CJIS-5.4.1.1 | 1341 | ······-·CJIS-5.4.1.1 |
| 1342 | ······-·NIST-800-171-3.1.8 | 1342 | ······-·NIST-800-171-3.1.8 |
| 1343 | ······-·NIST-800-53-AU-12(c) | 1343 | ······-·NIST-800-53-AU-12(c) |
| 1344 | ······-·NIST-800-53-AU-2(d) | 1344 | ······-·NIST-800-53-AU-2(d) |
| Offset 1353, 16 lines modified | Offset 1353, 16 lines modified | ||
| 1353 | ······-·restrict_strategy | 1353 | ······-·restrict_strategy |
| 1354 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1354 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1355 | ······set_fact: | 1355 | ······set_fact: |
| 1356 | ········all_files: | 1356 | ········all_files: |
| 1357 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1357 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1358 | ······when: | 1358 | ······when: |
| 1359 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1360 | ······-·'"audit"·in·ansible_facts.packages' | 1359 | ······-·'"audit"·in·ansible_facts.packages' |
| 1360 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1361 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1361 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1362 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1362 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1363 | ······tags: | 1363 | ······tags: |
| 1364 | ······-·CJIS-5.4.1.1 | 1364 | ······-·CJIS-5.4.1.1 |
| 1365 | ······-·NIST-800-171-3.1.8 | 1365 | ······-·NIST-800-171-3.1.8 |
| 1366 | ······-·NIST-800-53-AU-12(c) | 1366 | ······-·NIST-800-53-AU-12(c) |
| 1367 | ······-·NIST-800-53-AU-2(d) | 1367 | ······-·NIST-800-53-AU-2(d) |
| Offset 1378, 16 lines modified | Offset 1378, 16 lines modified | ||
| 1378 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 1378 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 191368/196403 bytes (97.44%) of diff not shown. | |||
| Offset 9673, 16 lines modified | Offset 9673, 16 lines modified | ||
| 9673 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 9673 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 9674 | ······find: | 9674 | ······find: |
| 9675 | ········paths:·/etc/audit/rules.d/ | 9675 | ········paths:·/etc/audit/rules.d/ |
| 9676 | ········patterns:·'*.rules' | 9676 | ········patterns:·'*.rules' |
| 9677 | ······register:·find_rules_d | 9677 | ······register:·find_rules_d |
| 9678 | ······when: | 9678 | ······when: |
| 9679 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9680 | ······-·'"audit"·in·ansible_facts.packages' | 9679 | ······-·'"audit"·in·ansible_facts.packages' |
| 9680 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9681 | ······tags: | 9681 | ······tags: |
| 9682 | ······-·CJIS-5.4.1.1 | 9682 | ······-·CJIS-5.4.1.1 |
| 9683 | ······-·NIST-800-171-3.3.1 | 9683 | ······-·NIST-800-171-3.3.1 |
| 9684 | ······-·NIST-800-171-3.4.3 | 9684 | ······-·NIST-800-171-3.4.3 |
| 9685 | ······-·NIST-800-53-AC-6(9) | 9685 | ······-·NIST-800-53-AC-6(9) |
| 9686 | ······-·NIST-800-53-CM-6(a) | 9686 | ······-·NIST-800-53-CM-6(a) |
| 9687 | ······-·PCI-DSS-Req-10.5.2 | 9687 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 9697, 16 lines modified | Offset 9697, 16 lines modified | ||
| 9697 | ······lineinfile: | 9697 | ······lineinfile: |
| 9698 | ········path:·'{{·item·}}' | 9698 | ········path:·'{{·item·}}' |
| 9699 | ········regexp:·^\s*(?:-e)\s+.*$ | 9699 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 9700 | ········state:·absent | 9700 | ········state:·absent |
| 9701 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 9701 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 9702 | ········}}' | 9702 | ········}}' |
| 9703 | ······when: | 9703 | ······when: |
| 9704 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9705 | ······-·'"audit"·in·ansible_facts.packages' | 9704 | ······-·'"audit"·in·ansible_facts.packages' |
| 9705 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9706 | ······tags: | 9706 | ······tags: |
| 9707 | ······-·CJIS-5.4.1.1 | 9707 | ······-·CJIS-5.4.1.1 |
| 9708 | ······-·NIST-800-171-3.3.1 | 9708 | ······-·NIST-800-171-3.3.1 |
| 9709 | ······-·NIST-800-171-3.4.3 | 9709 | ······-·NIST-800-171-3.4.3 |
| 9710 | ······-·NIST-800-53-AC-6(9) | 9710 | ······-·NIST-800-53-AC-6(9) |
| 9711 | ······-·NIST-800-53-CM-6(a) | 9711 | ······-·NIST-800-53-CM-6(a) |
| 9712 | ······-·PCI-DSS-Req-10.5.2 | 9712 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 9723, 16 lines modified | Offset 9723, 16 lines modified | ||
| 9723 | ········create:·true | 9723 | ········create:·true |
| 9724 | ········line:·-e·2 | 9724 | ········line:·-e·2 |
| 9725 | ········mode:·o-rwx | 9725 | ········mode:·o-rwx |
| 9726 | ······loop: | 9726 | ······loop: |
| 9727 | ······-·/etc/audit/audit.rules | 9727 | ······-·/etc/audit/audit.rules |
| 9728 | ······-·/etc/audit/rules.d/immutable.rules | 9728 | ······-·/etc/audit/rules.d/immutable.rules |
| 9729 | ······when: | 9729 | ······when: |
| 9730 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9731 | ······-·'"audit"·in·ansible_facts.packages' | 9730 | ······-·'"audit"·in·ansible_facts.packages' |
| 9731 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9732 | ······tags: | 9732 | ······tags: |
| 9733 | ······-·CJIS-5.4.1.1 | 9733 | ······-·CJIS-5.4.1.1 |
| 9734 | ······-·NIST-800-171-3.3.1 | 9734 | ······-·NIST-800-171-3.3.1 |
| 9735 | ······-·NIST-800-171-3.4.3 | 9735 | ······-·NIST-800-171-3.4.3 |
| 9736 | ······-·NIST-800-53-AC-6(9) | 9736 | ······-·NIST-800-53-AC-6(9) |
| 9737 | ······-·NIST-800-53-CM-6(a) | 9737 | ······-·NIST-800-53-CM-6(a) |
| 9738 | ······-·PCI-DSS-Req-10.5.2 | 9738 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 9764, 16 lines modified | Offset 9764, 16 lines modified | ||
| 9764 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 9764 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 9765 | ······find: | 9765 | ······find: |
| 9766 | ········paths:·/etc/audit/rules.d | 9766 | ········paths:·/etc/audit/rules.d |
| 9767 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 9767 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 9768 | ········patterns:·'*.rules' | 9768 | ········patterns:·'*.rules' |
| 9769 | ······register:·find_existing_watch_rules_d | 9769 | ······register:·find_existing_watch_rules_d |
| 9770 | ······when: | 9770 | ······when: |
| 9771 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9772 | ······-·'"audit"·in·ansible_facts.packages' | 9771 | ······-·'"audit"·in·ansible_facts.packages' |
| 9772 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9773 | ······tags: | 9773 | ······tags: |
| 9774 | ······-·CJIS-5.4.1.1 | 9774 | ······-·CJIS-5.4.1.1 |
| 9775 | ······-·NIST-800-171-3.1.8 | 9775 | ······-·NIST-800-171-3.1.8 |
| 9776 | ······-·NIST-800-53-AU-12(c) | 9776 | ······-·NIST-800-53-AU-12(c) |
| 9777 | ······-·NIST-800-53-AU-2(d) | 9777 | ······-·NIST-800-53-AU-2(d) |
| 9778 | ······-·NIST-800-53-CM-6(a) | 9778 | ······-·NIST-800-53-CM-6(a) |
| 9779 | ······-·PCI-DSS-Req-10.5.5 | 9779 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 9787, 16 lines modified | Offset 9787, 16 lines modified | ||
| 9787 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 9787 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 9788 | ······find: | 9788 | ······find: |
| 9789 | ········paths:·/etc/audit/rules.d | 9789 | ········paths:·/etc/audit/rules.d |
| 9790 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 9790 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 9791 | ········patterns:·'*.rules' | 9791 | ········patterns:·'*.rules' |
| 9792 | ······register:·find_watch_key | 9792 | ······register:·find_watch_key |
| 9793 | ······when: | 9793 | ······when: |
| 9794 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9795 | ······-·'"audit"·in·ansible_facts.packages' | 9794 | ······-·'"audit"·in·ansible_facts.packages' |
| 9795 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9796 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 9796 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 9797 | ········==·0 | 9797 | ········==·0 |
| 9798 | ······tags: | 9798 | ······tags: |
| 9799 | ······-·CJIS-5.4.1.1 | 9799 | ······-·CJIS-5.4.1.1 |
| 9800 | ······-·NIST-800-171-3.1.8 | 9800 | ······-·NIST-800-171-3.1.8 |
| 9801 | ······-·NIST-800-53-AU-12(c) | 9801 | ······-·NIST-800-53-AU-12(c) |
| 9802 | ······-·NIST-800-53-AU-2(d) | 9802 | ······-·NIST-800-53-AU-2(d) |
| Offset 9810, 16 lines modified | Offset 9810, 16 lines modified | ||
| 9810 | ······-·restrict_strategy | 9810 | ······-·restrict_strategy |
| 9811 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 9811 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 9812 | ······set_fact: | 9812 | ······set_fact: |
| 9813 | ········all_files: | 9813 | ········all_files: |
| 9814 | ········-·/etc/audit/rules.d/MAC-policy.rules | 9814 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 9815 | ······when: | 9815 | ······when: |
| 9816 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9817 | ······-·'"audit"·in·ansible_facts.packages' | 9816 | ······-·'"audit"·in·ansible_facts.packages' |
| 9817 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9818 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 9818 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 9819 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9819 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9820 | ······tags: | 9820 | ······tags: |
| 9821 | ······-·CJIS-5.4.1.1 | 9821 | ······-·CJIS-5.4.1.1 |
| 9822 | ······-·NIST-800-171-3.1.8 | 9822 | ······-·NIST-800-171-3.1.8 |
| 9823 | ······-·NIST-800-53-AU-12(c) | 9823 | ······-·NIST-800-53-AU-12(c) |
| 9824 | ······-·NIST-800-53-AU-2(d) | 9824 | ······-·NIST-800-53-AU-2(d) |
| Offset 9833, 16 lines modified | Offset 9833, 16 lines modified | ||
| 9833 | ······-·restrict_strategy | 9833 | ······-·restrict_strategy |
| 9834 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 9834 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 9835 | ······set_fact: | 9835 | ······set_fact: |
| 9836 | ········all_files: | 9836 | ········all_files: |
| 9837 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 9837 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 9838 | ······when: | 9838 | ······when: |
| 9839 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9840 | ······-·'"audit"·in·ansible_facts.packages' | 9839 | ······-·'"audit"·in·ansible_facts.packages' |
| 9840 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9841 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 9841 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 9842 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 9842 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 9843 | ······tags: | 9843 | ······tags: |
| 9844 | ······-·CJIS-5.4.1.1 | 9844 | ······-·CJIS-5.4.1.1 |
| 9845 | ······-·NIST-800-171-3.1.8 | 9845 | ······-·NIST-800-171-3.1.8 |
| 9846 | ······-·NIST-800-53-AU-12(c) | 9846 | ······-·NIST-800-53-AU-12(c) |
| 9847 | ······-·NIST-800-53-AU-2(d) | 9847 | ······-·NIST-800-53-AU-2(d) |
| Offset 9858, 16 lines modified | Offset 9858, 16 lines modified | ||
| 9858 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 9858 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 199070/204105 bytes (97.53%) of diff not shown. | |||
| Offset 4491, 16 lines modified | Offset 4491, 16 lines modified | ||
| 4491 | ······lineinfile: | 4491 | ······lineinfile: |
| 4492 | ········dest:·/etc/audit/auditd.conf | 4492 | ········dest:·/etc/audit/auditd.conf |
| 4493 | ········regexp:·^\s*flush\s*=\s*.*$ | 4493 | ········regexp:·^\s*flush\s*=\s*.*$ |
| 4494 | ········line:·flush·=·{{·var_auditd_flush·}} | 4494 | ········line:·flush·=·{{·var_auditd_flush·}} |
| 4495 | ········state:·present | 4495 | ········state:·present |
| 4496 | ········create:·true | 4496 | ········create:·true |
| 4497 | ······when: | 4497 | ······when: |
| 4498 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4499 | ······-·'"audit"·in·ansible_facts.packages' | 4498 | ······-·'"audit"·in·ansible_facts.packages' |
| 4499 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4500 | ······tags: | 4500 | ······tags: |
| 4501 | ······-·NIST-800-171-3.3.1 | 4501 | ······-·NIST-800-171-3.3.1 |
| 4502 | ······-·NIST-800-53-AU-11 | 4502 | ······-·NIST-800-53-AU-11 |
| 4503 | ······-·NIST-800-53-CM-6(a) | 4503 | ······-·NIST-800-53-CM-6(a) |
| 4504 | ······-·auditd_data_retention_flush | 4504 | ······-·auditd_data_retention_flush |
| 4505 | ······-·low_complexity | 4505 | ······-·low_complexity |
| 4506 | ······-·low_disruption | 4506 | ······-·low_disruption |
| Offset 4439, 16 lines modified | Offset 4439, 16 lines modified | ||
| 4439 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 4439 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 4440 | ······find: | 4440 | ······find: |
| 4441 | ········paths:·/etc/audit/rules.d/ | 4441 | ········paths:·/etc/audit/rules.d/ |
| 4442 | ········patterns:·'*.rules' | 4442 | ········patterns:·'*.rules' |
| 4443 | ······register:·find_rules_d | 4443 | ······register:·find_rules_d |
| 4444 | ······when: | 4444 | ······when: |
| 4445 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4446 | ······-·'"audit"·in·ansible_facts.packages' | 4445 | ······-·'"audit"·in·ansible_facts.packages' |
| 4446 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4447 | ······tags: | 4447 | ······tags: |
| 4448 | ······-·CJIS-5.4.1.1 | 4448 | ······-·CJIS-5.4.1.1 |
| 4449 | ······-·NIST-800-171-3.3.1 | 4449 | ······-·NIST-800-171-3.3.1 |
| 4450 | ······-·NIST-800-171-3.4.3 | 4450 | ······-·NIST-800-171-3.4.3 |
| 4451 | ······-·NIST-800-53-AC-6(9) | 4451 | ······-·NIST-800-53-AC-6(9) |
| 4452 | ······-·NIST-800-53-CM-6(a) | 4452 | ······-·NIST-800-53-CM-6(a) |
| 4453 | ······-·PCI-DSS-Req-10.5.2 | 4453 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 4463, 16 lines modified | Offset 4463, 16 lines modified | ||
| 4463 | ······lineinfile: | 4463 | ······lineinfile: |
| 4464 | ········path:·'{{·item·}}' | 4464 | ········path:·'{{·item·}}' |
| 4465 | ········regexp:·^\s*(?:-e)\s+.*$ | 4465 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 4466 | ········state:·absent | 4466 | ········state:·absent |
| 4467 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 4467 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 4468 | ········}}' | 4468 | ········}}' |
| 4469 | ······when: | 4469 | ······when: |
| 4470 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4471 | ······-·'"audit"·in·ansible_facts.packages' | 4470 | ······-·'"audit"·in·ansible_facts.packages' |
| 4471 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4472 | ······tags: | 4472 | ······tags: |
| 4473 | ······-·CJIS-5.4.1.1 | 4473 | ······-·CJIS-5.4.1.1 |
| 4474 | ······-·NIST-800-171-3.3.1 | 4474 | ······-·NIST-800-171-3.3.1 |
| 4475 | ······-·NIST-800-171-3.4.3 | 4475 | ······-·NIST-800-171-3.4.3 |
| 4476 | ······-·NIST-800-53-AC-6(9) | 4476 | ······-·NIST-800-53-AC-6(9) |
| 4477 | ······-·NIST-800-53-CM-6(a) | 4477 | ······-·NIST-800-53-CM-6(a) |
| 4478 | ······-·PCI-DSS-Req-10.5.2 | 4478 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 4489, 16 lines modified | Offset 4489, 16 lines modified | ||
| 4489 | ········create:·true | 4489 | ········create:·true |
| 4490 | ········line:·-e·2 | 4490 | ········line:·-e·2 |
| 4491 | ········mode:·o-rwx | 4491 | ········mode:·o-rwx |
| 4492 | ······loop: | 4492 | ······loop: |
| 4493 | ······-·/etc/audit/audit.rules | 4493 | ······-·/etc/audit/audit.rules |
| 4494 | ······-·/etc/audit/rules.d/immutable.rules | 4494 | ······-·/etc/audit/rules.d/immutable.rules |
| 4495 | ······when: | 4495 | ······when: |
| 4496 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4497 | ······-·'"audit"·in·ansible_facts.packages' | 4496 | ······-·'"audit"·in·ansible_facts.packages' |
| 4497 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4498 | ······tags: | 4498 | ······tags: |
| 4499 | ······-·CJIS-5.4.1.1 | 4499 | ······-·CJIS-5.4.1.1 |
| 4500 | ······-·NIST-800-171-3.3.1 | 4500 | ······-·NIST-800-171-3.3.1 |
| 4501 | ······-·NIST-800-171-3.4.3 | 4501 | ······-·NIST-800-171-3.4.3 |
| 4502 | ······-·NIST-800-53-AC-6(9) | 4502 | ······-·NIST-800-53-AC-6(9) |
| 4503 | ······-·NIST-800-53-CM-6(a) | 4503 | ······-·NIST-800-53-CM-6(a) |
| 4504 | ······-·PCI-DSS-Req-10.5.2 | 4504 | ······-·PCI-DSS-Req-10.5.2 |
| Offset 4530, 16 lines modified | Offset 4530, 16 lines modified | ||
| 4530 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 4530 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 4531 | ······find: | 4531 | ······find: |
| 4532 | ········paths:·/etc/audit/rules.d | 4532 | ········paths:·/etc/audit/rules.d |
| 4533 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 4533 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 4534 | ········patterns:·'*.rules' | 4534 | ········patterns:·'*.rules' |
| 4535 | ······register:·find_existing_watch_rules_d | 4535 | ······register:·find_existing_watch_rules_d |
| 4536 | ······when: | 4536 | ······when: |
| 4537 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4538 | ······-·'"audit"·in·ansible_facts.packages' | 4537 | ······-·'"audit"·in·ansible_facts.packages' |
| 4538 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4539 | ······tags: | 4539 | ······tags: |
| 4540 | ······-·CJIS-5.4.1.1 | 4540 | ······-·CJIS-5.4.1.1 |
| 4541 | ······-·NIST-800-171-3.1.8 | 4541 | ······-·NIST-800-171-3.1.8 |
| 4542 | ······-·NIST-800-53-AU-12(c) | 4542 | ······-·NIST-800-53-AU-12(c) |
| 4543 | ······-·NIST-800-53-AU-2(d) | 4543 | ······-·NIST-800-53-AU-2(d) |
| 4544 | ······-·NIST-800-53-CM-6(a) | 4544 | ······-·NIST-800-53-CM-6(a) |
| 4545 | ······-·PCI-DSS-Req-10.5.5 | 4545 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 4553, 16 lines modified | Offset 4553, 16 lines modified | ||
| 4553 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 4553 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 4554 | ······find: | 4554 | ······find: |
| 4555 | ········paths:·/etc/audit/rules.d | 4555 | ········paths:·/etc/audit/rules.d |
| 4556 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 4556 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 4557 | ········patterns:·'*.rules' | 4557 | ········patterns:·'*.rules' |
| 4558 | ······register:·find_watch_key | 4558 | ······register:·find_watch_key |
| 4559 | ······when: | 4559 | ······when: |
| 4560 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4561 | ······-·'"audit"·in·ansible_facts.packages' | 4560 | ······-·'"audit"·in·ansible_facts.packages' |
| 4561 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4562 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 4562 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 4563 | ········==·0 | 4563 | ········==·0 |
| 4564 | ······tags: | 4564 | ······tags: |
| 4565 | ······-·CJIS-5.4.1.1 | 4565 | ······-·CJIS-5.4.1.1 |
| 4566 | ······-·NIST-800-171-3.1.8 | 4566 | ······-·NIST-800-171-3.1.8 |
| 4567 | ······-·NIST-800-53-AU-12(c) | 4567 | ······-·NIST-800-53-AU-12(c) |
| 4568 | ······-·NIST-800-53-AU-2(d) | 4568 | ······-·NIST-800-53-AU-2(d) |
| Offset 4576, 16 lines modified | Offset 4576, 16 lines modified | ||
| 4576 | ······-·restrict_strategy | 4576 | ······-·restrict_strategy |
| 4577 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 4577 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 4578 | ······set_fact: | 4578 | ······set_fact: |
| 4579 | ········all_files: | 4579 | ········all_files: |
| 4580 | ········-·/etc/audit/rules.d/MAC-policy.rules | 4580 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 4581 | ······when: | 4581 | ······when: |
| 4582 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4583 | ······-·'"audit"·in·ansible_facts.packages' | 4582 | ······-·'"audit"·in·ansible_facts.packages' |
| 4583 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4584 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 4584 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 4585 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 4585 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 4586 | ······tags: | 4586 | ······tags: |
| 4587 | ······-·CJIS-5.4.1.1 | 4587 | ······-·CJIS-5.4.1.1 |
| 4588 | ······-·NIST-800-171-3.1.8 | 4588 | ······-·NIST-800-171-3.1.8 |
| 4589 | ······-·NIST-800-53-AU-12(c) | 4589 | ······-·NIST-800-53-AU-12(c) |
| 4590 | ······-·NIST-800-53-AU-2(d) | 4590 | ······-·NIST-800-53-AU-2(d) |
| Offset 4599, 16 lines modified | Offset 4599, 16 lines modified | ||
| 4599 | ······-·restrict_strategy | 4599 | ······-·restrict_strategy |
| 4600 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 4600 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 4601 | ······set_fact: | 4601 | ······set_fact: |
| 4602 | ········all_files: | 4602 | ········all_files: |
| 4603 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 4603 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 4604 | ······when: | 4604 | ······when: |
| 4605 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4606 | ······-·'"audit"·in·ansible_facts.packages' | 4605 | ······-·'"audit"·in·ansible_facts.packages' |
| 4606 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4607 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 4607 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 4608 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 4608 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 4609 | ······tags: | 4609 | ······tags: |
| 4610 | ······-·CJIS-5.4.1.1 | 4610 | ······-·CJIS-5.4.1.1 |
| 4611 | ······-·NIST-800-171-3.1.8 | 4611 | ······-·NIST-800-171-3.1.8 |
| 4612 | ······-·NIST-800-53-AU-12(c) | 4612 | ······-·NIST-800-53-AU-12(c) |
| 4613 | ······-·NIST-800-53-AU-2(d) | 4613 | ······-·NIST-800-53-AU-2(d) |
| Offset 4624, 16 lines modified | Offset 4624, 16 lines modified | ||
| 4624 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 4624 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 106665/111700 bytes (95.49%) of diff not shown. | |||
| Offset 535, 16 lines modified | Offset 535, 16 lines modified | ||
| 535 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 535 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 536 | ······find: | 536 | ······find: |
| 537 | ········paths:·/etc/audit/rules.d | 537 | ········paths:·/etc/audit/rules.d |
| 538 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 538 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 539 | ········patterns:·'*.rules' | 539 | ········patterns:·'*.rules' |
| 540 | ······register:·find_existing_watch_rules_d | 540 | ······register:·find_existing_watch_rules_d |
| 541 | ······when: | 541 | ······when: |
| 542 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 543 | ······-·'"audit"·in·ansible_facts.packages' | 542 | ······-·'"audit"·in·ansible_facts.packages' |
| 543 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 544 | ······tags: | 544 | ······tags: |
| 545 | ······-·CJIS-5.4.1.1 | 545 | ······-·CJIS-5.4.1.1 |
| 546 | ······-·NIST-800-171-3.1.8 | 546 | ······-·NIST-800-171-3.1.8 |
| 547 | ······-·NIST-800-53-AU-12(c) | 547 | ······-·NIST-800-53-AU-12(c) |
| 548 | ······-·NIST-800-53-AU-2(d) | 548 | ······-·NIST-800-53-AU-2(d) |
| 549 | ······-·NIST-800-53-CM-6(a) | 549 | ······-·NIST-800-53-CM-6(a) |
| 550 | ······-·PCI-DSS-Req-10.5.5 | 550 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 558, 16 lines modified | Offset 558, 16 lines modified | ||
| 558 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 558 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 559 | ······find: | 559 | ······find: |
| 560 | ········paths:·/etc/audit/rules.d | 560 | ········paths:·/etc/audit/rules.d |
| 561 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 561 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 562 | ········patterns:·'*.rules' | 562 | ········patterns:·'*.rules' |
| 563 | ······register:·find_watch_key | 563 | ······register:·find_watch_key |
| 564 | ······when: | 564 | ······when: |
| 565 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 566 | ······-·'"audit"·in·ansible_facts.packages' | 565 | ······-·'"audit"·in·ansible_facts.packages' |
| 566 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 567 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 567 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 568 | ········==·0 | 568 | ········==·0 |
| 569 | ······tags: | 569 | ······tags: |
| 570 | ······-·CJIS-5.4.1.1 | 570 | ······-·CJIS-5.4.1.1 |
| 571 | ······-·NIST-800-171-3.1.8 | 571 | ······-·NIST-800-171-3.1.8 |
| 572 | ······-·NIST-800-53-AU-12(c) | 572 | ······-·NIST-800-53-AU-12(c) |
| 573 | ······-·NIST-800-53-AU-2(d) | 573 | ······-·NIST-800-53-AU-2(d) |
| Offset 581, 16 lines modified | Offset 581, 16 lines modified | ||
| 581 | ······-·restrict_strategy | 581 | ······-·restrict_strategy |
| 582 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 582 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 583 | ······set_fact: | 583 | ······set_fact: |
| 584 | ········all_files: | 584 | ········all_files: |
| 585 | ········-·/etc/audit/rules.d/MAC-policy.rules | 585 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 586 | ······when: | 586 | ······when: |
| 587 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 588 | ······-·'"audit"·in·ansible_facts.packages' | 587 | ······-·'"audit"·in·ansible_facts.packages' |
| 588 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 589 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 589 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 590 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 590 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 591 | ······tags: | 591 | ······tags: |
| 592 | ······-·CJIS-5.4.1.1 | 592 | ······-·CJIS-5.4.1.1 |
| 593 | ······-·NIST-800-171-3.1.8 | 593 | ······-·NIST-800-171-3.1.8 |
| 594 | ······-·NIST-800-53-AU-12(c) | 594 | ······-·NIST-800-53-AU-12(c) |
| 595 | ······-·NIST-800-53-AU-2(d) | 595 | ······-·NIST-800-53-AU-2(d) |
| Offset 604, 16 lines modified | Offset 604, 16 lines modified | ||
| 604 | ······-·restrict_strategy | 604 | ······-·restrict_strategy |
| 605 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 605 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 606 | ······set_fact: | 606 | ······set_fact: |
| 607 | ········all_files: | 607 | ········all_files: |
| 608 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 608 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 609 | ······when: | 609 | ······when: |
| 610 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 611 | ······-·'"audit"·in·ansible_facts.packages' | 610 | ······-·'"audit"·in·ansible_facts.packages' |
| 611 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 612 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 612 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 613 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 613 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 614 | ······tags: | 614 | ······tags: |
| 615 | ······-·CJIS-5.4.1.1 | 615 | ······-·CJIS-5.4.1.1 |
| 616 | ······-·NIST-800-171-3.1.8 | 616 | ······-·NIST-800-171-3.1.8 |
| 617 | ······-·NIST-800-53-AU-12(c) | 617 | ······-·NIST-800-53-AU-12(c) |
| 618 | ······-·NIST-800-53-AU-2(d) | 618 | ······-·NIST-800-53-AU-2(d) |
| Offset 629, 16 lines modified | Offset 629, 16 lines modified | ||
| 629 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 629 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| 630 | ······lineinfile: | 630 | ······lineinfile: |
| 631 | ········path:·'{{·all_files[0]·}}' | 631 | ········path:·'{{·all_files[0]·}}' |
| 632 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy | 632 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy |
| 633 | ········create:·true | 633 | ········create:·true |
| 634 | ········mode:·'0640' | 634 | ········mode:·'0640' |
| 635 | ······when: | 635 | ······when: |
| 636 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 637 | ······-·'"audit"·in·ansible_facts.packages' | 636 | ······-·'"audit"·in·ansible_facts.packages' |
| 637 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 638 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 638 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 639 | ········==·0 | 639 | ········==·0 |
| 640 | ······tags: | 640 | ······tags: |
| 641 | ······-·CJIS-5.4.1.1 | 641 | ······-·CJIS-5.4.1.1 |
| 642 | ······-·NIST-800-171-3.1.8 | 642 | ······-·NIST-800-171-3.1.8 |
| 643 | ······-·NIST-800-53-AU-12(c) | 643 | ······-·NIST-800-53-AU-12(c) |
| 644 | ······-·NIST-800-53-AU-2(d) | 644 | ······-·NIST-800-53-AU-2(d) |
| Offset 654, 16 lines modified | Offset 654, 16 lines modified | ||
| 654 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/audit.rules | 654 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/audit.rules |
| 655 | ······find: | 655 | ······find: |
| 656 | ········paths:·/etc/audit/ | 656 | ········paths:·/etc/audit/ |
| 657 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 657 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 658 | ········patterns:·audit.rules | 658 | ········patterns:·audit.rules |
| 659 | ······register:·find_existing_watch_audit_rules | 659 | ······register:·find_existing_watch_audit_rules |
| 660 | ······when: | 660 | ······when: |
| 661 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 662 | ······-·'"audit"·in·ansible_facts.packages' | 661 | ······-·'"audit"·in·ansible_facts.packages' |
| 662 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 663 | ······tags: | 663 | ······tags: |
| 664 | ······-·CJIS-5.4.1.1 | 664 | ······-·CJIS-5.4.1.1 |
| 665 | ······-·NIST-800-171-3.1.8 | 665 | ······-·NIST-800-171-3.1.8 |
| 666 | ······-·NIST-800-53-AU-12(c) | 666 | ······-·NIST-800-53-AU-12(c) |
| 667 | ······-·NIST-800-53-AU-2(d) | 667 | ······-·NIST-800-53-AU-2(d) |
| 668 | ······-·NIST-800-53-CM-6(a) | 668 | ······-·NIST-800-53-CM-6(a) |
| 669 | ······-·PCI-DSS-Req-10.5.5 | 669 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 678, 16 lines modified | Offset 678, 16 lines modified | ||
| 678 | ······lineinfile: | 678 | ······lineinfile: |
| 679 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy | 679 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy |
| 680 | ········state:·present | 680 | ········state:·present |
| 681 | ········dest:·/etc/audit/audit.rules | 681 | ········dest:·/etc/audit/audit.rules |
| 682 | ········create:·true | 682 | ········create:·true |
| 683 | ········mode:·'0640' | 683 | ········mode:·'0640' |
| 684 | ······when: | 684 | ······when: |
| 685 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 686 | ······-·'"audit"·in·ansible_facts.packages' | 685 | ······-·'"audit"·in·ansible_facts.packages' |
| 686 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 687 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched | 687 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched |
| 688 | ········==·0 | 688 | ········==·0 |
| 689 | ······tags: | 689 | ······tags: |
| 690 | ······-·CJIS-5.4.1.1 | 690 | ······-·CJIS-5.4.1.1 |
| 691 | ······-·NIST-800-171-3.1.8 | 691 | ······-·NIST-800-171-3.1.8 |
| 692 | ······-·NIST-800-53-AU-12(c) | 692 | ······-·NIST-800-53-AU-12(c) |
| 693 | ······-·NIST-800-53-AU-2(d) | 693 | ······-·NIST-800-53-AU-2(d) |
| Offset 720, 16 lines modified | Offset 720, 16 lines modified | ||
| 720 | ······-·reboot_required | 720 | ······-·reboot_required |
| Max diff block lines reached; 95737/100953 bytes (94.83%) of diff not shown. | |||
| Offset 8951, 16 lines modified | Offset 8951, 16 lines modified | ||
| 8951 | ······-·reboot_required | 8951 | ······-·reboot_required |
| 8952 | ······-·restrict_strategy | 8952 | ······-·restrict_strategy |
| 8953 | ····-·name:·Set·architecture·for·audit·mount·tasks | 8953 | ····-·name:·Set·architecture·for·audit·mount·tasks |
| 8954 | ······set_fact: | 8954 | ······set_fact: |
| 8955 | ········audit_arch:·b64 | 8955 | ········audit_arch:·b64 |
| 8956 | ······when: | 8956 | ······when: |
| 8957 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8958 | ······-·'"audit"·in·ansible_facts.packages' | 8957 | ······-·'"audit"·in·ansible_facts.packages' |
| 8958 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8959 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 8959 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 8960 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 8960 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 8961 | ······tags: | 8961 | ······tags: |
| 8962 | ······-·CJIS-5.4.1.1 | 8962 | ······-·CJIS-5.4.1.1 |
| 8963 | ······-·DISA-STIG-OL07-00-030740 | 8963 | ······-·DISA-STIG-OL07-00-030740 |
| 8964 | ······-·NIST-800-171-3.1.7 | 8964 | ······-·NIST-800-171-3.1.7 |
| 8965 | ······-·NIST-800-53-AC-6(9) | 8965 | ······-·NIST-800-53-AC-6(9) |
| Offset 9092, 16 lines modified | Offset 9092, 16 lines modified | ||
| 9092 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9092 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9093 | ············-F·auid!=unset·-F·key=perm_mod | 9093 | ············-F·auid!=unset·-F·key=perm_mod |
| 9094 | ··········create:·true | 9094 | ··········create:·true |
| 9095 | ··········mode:·o-rwx | 9095 | ··········mode:·o-rwx |
| 9096 | ··········state:·present | 9096 | ··········state:·present |
| 9097 | ········when:·syscalls_found·|·length·==·0 | 9097 | ········when:·syscalls_found·|·length·==·0 |
| 9098 | ······when: | 9098 | ······when: |
| 9099 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9100 | ······-·'"audit"·in·ansible_facts.packages' | 9099 | ······-·'"audit"·in·ansible_facts.packages' |
| 9100 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9101 | ······tags: | 9101 | ······tags: |
| 9102 | ······-·CJIS-5.4.1.1 | 9102 | ······-·CJIS-5.4.1.1 |
| 9103 | ······-·DISA-STIG-OL07-00-030740 | 9103 | ······-·DISA-STIG-OL07-00-030740 |
| 9104 | ······-·NIST-800-171-3.1.7 | 9104 | ······-·NIST-800-171-3.1.7 |
| 9105 | ······-·NIST-800-53-AC-6(9) | 9105 | ······-·NIST-800-53-AC-6(9) |
| 9106 | ······-·NIST-800-53-AU-12(c) | 9106 | ······-·NIST-800-53-AU-12(c) |
| 9107 | ······-·NIST-800-53-AU-2(d) | 9107 | ······-·NIST-800-53-AU-2(d) |
| Offset 9231, 16 lines modified | Offset 9231, 16 lines modified | ||
| 9231 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9231 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9232 | ············-F·auid!=unset·-F·key=perm_mod | 9232 | ············-F·auid!=unset·-F·key=perm_mod |
| 9233 | ··········create:·true | 9233 | ··········create:·true |
| 9234 | ··········mode:·o-rwx | 9234 | ··········mode:·o-rwx |
| 9235 | ··········state:·present | 9235 | ··········state:·present |
| 9236 | ········when:·syscalls_found·|·length·==·0 | 9236 | ········when:·syscalls_found·|·length·==·0 |
| 9237 | ······when: | 9237 | ······when: |
| 9238 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9239 | ······-·'"audit"·in·ansible_facts.packages' | 9238 | ······-·'"audit"·in·ansible_facts.packages' |
| 9239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9240 | ······-·audit_arch·==·"b64" | 9240 | ······-·audit_arch·==·"b64" |
| 9241 | ······tags: | 9241 | ······tags: |
| 9242 | ······-·CJIS-5.4.1.1 | 9242 | ······-·CJIS-5.4.1.1 |
| 9243 | ······-·DISA-STIG-OL07-00-030740 | 9243 | ······-·DISA-STIG-OL07-00-030740 |
| 9244 | ······-·NIST-800-171-3.1.7 | 9244 | ······-·NIST-800-171-3.1.7 |
| 9245 | ······-·NIST-800-53-AC-6(9) | 9245 | ······-·NIST-800-53-AC-6(9) |
| 9246 | ······-·NIST-800-53-AU-12(c) | 9246 | ······-·NIST-800-53-AU-12(c) |
| Offset 9272, 16 lines modified | Offset 9272, 16 lines modified | ||
| 9272 | ······-·medium_severity | 9272 | ······-·medium_severity |
| 9273 | ······-·no_reboot_needed | 9273 | ······-·no_reboot_needed |
| 9274 | ······-·restrict_strategy | 9274 | ······-·restrict_strategy |
| 9275 | ····-·name:·Service·facts | 9275 | ····-·name:·Service·facts |
| 9276 | ······service_facts:·null | 9276 | ······service_facts:·null |
| 9277 | ······when: | 9277 | ······when: |
| 9278 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9279 | ······-·'"audit"·in·ansible_facts.packages' | 9278 | ······-·'"audit"·in·ansible_facts.packages' |
| 9279 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9280 | ······tags: | 9280 | ······tags: |
| 9281 | ······-·DISA-STIG-OL07-00-030360 | 9281 | ······-·DISA-STIG-OL07-00-030360 |
| 9282 | ······-·NIST-800-53-AC-6(9) | 9282 | ······-·NIST-800-53-AC-6(9) |
| 9283 | ······-·NIST-800-53-AU-12(3) | 9283 | ······-·NIST-800-53-AU-12(3) |
| 9284 | ······-·NIST-800-53-AU-7(a) | 9284 | ······-·NIST-800-53-AU-7(a) |
| 9285 | ······-·NIST-800-53-AU-7(b) | 9285 | ······-·NIST-800-53-AU-7(b) |
| 9286 | ······-·NIST-800-53-AU-8(b) | 9286 | ······-·NIST-800-53-AU-8(b) |
| Offset 9293, 16 lines modified | Offset 9293, 16 lines modified | ||
| 9293 | ······-·no_reboot_needed | 9293 | ······-·no_reboot_needed |
| 9294 | ······-·restrict_strategy | 9294 | ······-·restrict_strategy |
| 9295 | ····-·name:·Check·the·rules·script·being·used | 9295 | ····-·name:·Check·the·rules·script·being·used |
| 9296 | ······command:·grep·'^ExecStartPost'·/usr/lib/systemd/system/auditd.service | 9296 | ······command:·grep·'^ExecStartPost'·/usr/lib/systemd/system/auditd.service |
| 9297 | ······register:·check_rules_scripts_result | 9297 | ······register:·check_rules_scripts_result |
| 9298 | ······when: | 9298 | ······when: |
| 9299 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9300 | ······-·'"audit"·in·ansible_facts.packages' | 9299 | ······-·'"audit"·in·ansible_facts.packages' |
| 9300 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9301 | ······tags: | 9301 | ······tags: |
| 9302 | ······-·DISA-STIG-OL07-00-030360 | 9302 | ······-·DISA-STIG-OL07-00-030360 |
| 9303 | ······-·NIST-800-53-AC-6(9) | 9303 | ······-·NIST-800-53-AC-6(9) |
| 9304 | ······-·NIST-800-53-AU-12(3) | 9304 | ······-·NIST-800-53-AU-12(3) |
| 9305 | ······-·NIST-800-53-AU-7(a) | 9305 | ······-·NIST-800-53-AU-7(a) |
| 9306 | ······-·NIST-800-53-AU-7(b) | 9306 | ······-·NIST-800-53-AU-7(b) |
| 9307 | ······-·NIST-800-53-AU-8(b) | 9307 | ······-·NIST-800-53-AU-8(b) |
| Offset 9318, 16 lines modified | Offset 9318, 16 lines modified | ||
| 9318 | ······set_fact: | 9318 | ······set_fact: |
| 9319 | ········suid_audit_rules: | 9319 | ········suid_audit_rules: |
| 9320 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid | 9320 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid |
| 9321 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid | 9321 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid |
| 9322 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid | 9322 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid |
| 9323 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid | 9323 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid |
| 9324 | ······when: | 9324 | ······when: |
| 9325 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9326 | ······-·'"audit"·in·ansible_facts.packages' | 9325 | ······-·'"audit"·in·ansible_facts.packages' |
| 9326 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9327 | ······tags: | 9327 | ······tags: |
| 9328 | ······-·DISA-STIG-OL07-00-030360 | 9328 | ······-·DISA-STIG-OL07-00-030360 |
| 9329 | ······-·NIST-800-53-AC-6(9) | 9329 | ······-·NIST-800-53-AC-6(9) |
| 9330 | ······-·NIST-800-53-AU-12(3) | 9330 | ······-·NIST-800-53-AU-12(3) |
| 9331 | ······-·NIST-800-53-AU-7(a) | 9331 | ······-·NIST-800-53-AU-7(a) |
| 9332 | ······-·NIST-800-53-AU-7(b) | 9332 | ······-·NIST-800-53-AU-7(b) |
| 9333 | ······-·NIST-800-53-AU-8(b) | 9333 | ······-·NIST-800-53-AU-8(b) |
| Offset 9341, 16 lines modified | Offset 9341, 16 lines modified | ||
| 9341 | ····-·name:·Update·/etc/audit/rules.d/privileged.rules·to·audit·privileged·functions | 9341 | ····-·name:·Update·/etc/audit/rules.d/privileged.rules·to·audit·privileged·functions |
| 9342 | ······lineinfile: | 9342 | ······lineinfile: |
| 9343 | ········path:·/etc/audit/rules.d/privileged.rules | 9343 | ········path:·/etc/audit/rules.d/privileged.rules |
| 9344 | ········line:·'{{··item··}}' | 9344 | ········line:·'{{··item··}}' |
| 9345 | ········create:·true | 9345 | ········create:·true |
| 9346 | ······when: | 9346 | ······when: |
| 9347 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9348 | ······-·'"audit"·in·ansible_facts.packages' | 9347 | ······-·'"audit"·in·ansible_facts.packages' |
| 9348 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9349 | ······-·'"auditd.service"·in·ansible_facts.services' | 9349 | ······-·'"auditd.service"·in·ansible_facts.services' |
| 9350 | ······-·'"augenrules"·in·check_rules_scripts_result.stdout' | 9350 | ······-·'"augenrules"·in·check_rules_scripts_result.stdout' |
| 9351 | ······register:·augenrules_audit_rules_privilege_function_update_result | 9351 | ······register:·augenrules_audit_rules_privilege_function_update_result |
| 9352 | ······with_items:·'{{·suid_audit_rules·}}' | 9352 | ······with_items:·'{{·suid_audit_rules·}}' |
| 9353 | ······tags: | 9353 | ······tags: |
| 9354 | ······-·DISA-STIG-OL07-00-030360 | 9354 | ······-·DISA-STIG-OL07-00-030360 |
| 9355 | ······-·NIST-800-53-AC-6(9) | 9355 | ······-·NIST-800-53-AC-6(9) |
| Offset 9368, 16 lines modified | Offset 9368, 16 lines modified | ||
| Max diff block lines reached; 148930/154099 bytes (96.65%) of diff not shown. | |||
| Offset 8956, 16 lines modified | Offset 8956, 16 lines modified | ||
| 8956 | ······-·reboot_required | 8956 | ······-·reboot_required |
| 8957 | ······-·restrict_strategy | 8957 | ······-·restrict_strategy |
| 8958 | ····-·name:·Set·architecture·for·audit·mount·tasks | 8958 | ····-·name:·Set·architecture·for·audit·mount·tasks |
| 8959 | ······set_fact: | 8959 | ······set_fact: |
| 8960 | ········audit_arch:·b64 | 8960 | ········audit_arch:·b64 |
| 8961 | ······when: | 8961 | ······when: |
| 8962 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8963 | ······-·'"audit"·in·ansible_facts.packages' | 8962 | ······-·'"audit"·in·ansible_facts.packages' |
| 8963 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 8964 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 8964 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 8965 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 8965 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 8966 | ······tags: | 8966 | ······tags: |
| 8967 | ······-·CJIS-5.4.1.1 | 8967 | ······-·CJIS-5.4.1.1 |
| 8968 | ······-·DISA-STIG-OL07-00-030740 | 8968 | ······-·DISA-STIG-OL07-00-030740 |
| 8969 | ······-·NIST-800-171-3.1.7 | 8969 | ······-·NIST-800-171-3.1.7 |
| 8970 | ······-·NIST-800-53-AC-6(9) | 8970 | ······-·NIST-800-53-AC-6(9) |
| Offset 9097, 16 lines modified | Offset 9097, 16 lines modified | ||
| 9097 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9097 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9098 | ············-F·auid!=unset·-F·key=perm_mod | 9098 | ············-F·auid!=unset·-F·key=perm_mod |
| 9099 | ··········create:·true | 9099 | ··········create:·true |
| 9100 | ··········mode:·o-rwx | 9100 | ··········mode:·o-rwx |
| 9101 | ··········state:·present | 9101 | ··········state:·present |
| 9102 | ········when:·syscalls_found·|·length·==·0 | 9102 | ········when:·syscalls_found·|·length·==·0 |
| 9103 | ······when: | 9103 | ······when: |
| 9104 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9105 | ······-·'"audit"·in·ansible_facts.packages' | 9104 | ······-·'"audit"·in·ansible_facts.packages' |
| 9105 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9106 | ······tags: | 9106 | ······tags: |
| 9107 | ······-·CJIS-5.4.1.1 | 9107 | ······-·CJIS-5.4.1.1 |
| 9108 | ······-·DISA-STIG-OL07-00-030740 | 9108 | ······-·DISA-STIG-OL07-00-030740 |
| 9109 | ······-·NIST-800-171-3.1.7 | 9109 | ······-·NIST-800-171-3.1.7 |
| 9110 | ······-·NIST-800-53-AC-6(9) | 9110 | ······-·NIST-800-53-AC-6(9) |
| 9111 | ······-·NIST-800-53-AU-12(c) | 9111 | ······-·NIST-800-53-AU-12(c) |
| 9112 | ······-·NIST-800-53-AU-2(d) | 9112 | ······-·NIST-800-53-AU-2(d) |
| Offset 9236, 16 lines modified | Offset 9236, 16 lines modified | ||
| 9236 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 9236 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 9237 | ············-F·auid!=unset·-F·key=perm_mod | 9237 | ············-F·auid!=unset·-F·key=perm_mod |
| 9238 | ··········create:·true | 9238 | ··········create:·true |
| 9239 | ··········mode:·o-rwx | 9239 | ··········mode:·o-rwx |
| 9240 | ··········state:·present | 9240 | ··········state:·present |
| 9241 | ········when:·syscalls_found·|·length·==·0 | 9241 | ········when:·syscalls_found·|·length·==·0 |
| 9242 | ······when: | 9242 | ······when: |
| 9243 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9244 | ······-·'"audit"·in·ansible_facts.packages' | 9243 | ······-·'"audit"·in·ansible_facts.packages' |
| 9244 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9245 | ······-·audit_arch·==·"b64" | 9245 | ······-·audit_arch·==·"b64" |
| 9246 | ······tags: | 9246 | ······tags: |
| 9247 | ······-·CJIS-5.4.1.1 | 9247 | ······-·CJIS-5.4.1.1 |
| 9248 | ······-·DISA-STIG-OL07-00-030740 | 9248 | ······-·DISA-STIG-OL07-00-030740 |
| 9249 | ······-·NIST-800-171-3.1.7 | 9249 | ······-·NIST-800-171-3.1.7 |
| 9250 | ······-·NIST-800-53-AC-6(9) | 9250 | ······-·NIST-800-53-AC-6(9) |
| 9251 | ······-·NIST-800-53-AU-12(c) | 9251 | ······-·NIST-800-53-AU-12(c) |
| Offset 9277, 16 lines modified | Offset 9277, 16 lines modified | ||
| 9277 | ······-·medium_severity | 9277 | ······-·medium_severity |
| 9278 | ······-·no_reboot_needed | 9278 | ······-·no_reboot_needed |
| 9279 | ······-·restrict_strategy | 9279 | ······-·restrict_strategy |
| 9280 | ····-·name:·Service·facts | 9280 | ····-·name:·Service·facts |
| 9281 | ······service_facts:·null | 9281 | ······service_facts:·null |
| 9282 | ······when: | 9282 | ······when: |
| 9283 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9284 | ······-·'"audit"·in·ansible_facts.packages' | 9283 | ······-·'"audit"·in·ansible_facts.packages' |
| 9284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9285 | ······tags: | 9285 | ······tags: |
| 9286 | ······-·DISA-STIG-OL07-00-030360 | 9286 | ······-·DISA-STIG-OL07-00-030360 |
| 9287 | ······-·NIST-800-53-AC-6(9) | 9287 | ······-·NIST-800-53-AC-6(9) |
| 9288 | ······-·NIST-800-53-AU-12(3) | 9288 | ······-·NIST-800-53-AU-12(3) |
| 9289 | ······-·NIST-800-53-AU-7(a) | 9289 | ······-·NIST-800-53-AU-7(a) |
| 9290 | ······-·NIST-800-53-AU-7(b) | 9290 | ······-·NIST-800-53-AU-7(b) |
| 9291 | ······-·NIST-800-53-AU-8(b) | 9291 | ······-·NIST-800-53-AU-8(b) |
| Offset 9298, 16 lines modified | Offset 9298, 16 lines modified | ||
| 9298 | ······-·no_reboot_needed | 9298 | ······-·no_reboot_needed |
| 9299 | ······-·restrict_strategy | 9299 | ······-·restrict_strategy |
| 9300 | ····-·name:·Check·the·rules·script·being·used | 9300 | ····-·name:·Check·the·rules·script·being·used |
| 9301 | ······command:·grep·'^ExecStartPost'·/usr/lib/systemd/system/auditd.service | 9301 | ······command:·grep·'^ExecStartPost'·/usr/lib/systemd/system/auditd.service |
| 9302 | ······register:·check_rules_scripts_result | 9302 | ······register:·check_rules_scripts_result |
| 9303 | ······when: | 9303 | ······when: |
| 9304 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9305 | ······-·'"audit"·in·ansible_facts.packages' | 9304 | ······-·'"audit"·in·ansible_facts.packages' |
| 9305 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9306 | ······tags: | 9306 | ······tags: |
| 9307 | ······-·DISA-STIG-OL07-00-030360 | 9307 | ······-·DISA-STIG-OL07-00-030360 |
| 9308 | ······-·NIST-800-53-AC-6(9) | 9308 | ······-·NIST-800-53-AC-6(9) |
| 9309 | ······-·NIST-800-53-AU-12(3) | 9309 | ······-·NIST-800-53-AU-12(3) |
| 9310 | ······-·NIST-800-53-AU-7(a) | 9310 | ······-·NIST-800-53-AU-7(a) |
| 9311 | ······-·NIST-800-53-AU-7(b) | 9311 | ······-·NIST-800-53-AU-7(b) |
| 9312 | ······-·NIST-800-53-AU-8(b) | 9312 | ······-·NIST-800-53-AU-8(b) |
| Offset 9323, 16 lines modified | Offset 9323, 16 lines modified | ||
| 9323 | ······set_fact: | 9323 | ······set_fact: |
| 9324 | ········suid_audit_rules: | 9324 | ········suid_audit_rules: |
| 9325 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid | 9325 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid |
| 9326 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid | 9326 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·gid!=egid·-F·egid=0·-k·setgid |
| 9327 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid | 9327 | ········-·-a·always,exit·-F·arch=b32·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid |
| 9328 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid | 9328 | ········-·-a·always,exit·-F·arch=b64·-S·execve·-C·uid!=euid·-F·euid=0·-k·setuid |
| 9329 | ······when: | 9329 | ······when: |
| 9330 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9331 | ······-·'"audit"·in·ansible_facts.packages' | 9330 | ······-·'"audit"·in·ansible_facts.packages' |
| 9331 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9332 | ······tags: | 9332 | ······tags: |
| 9333 | ······-·DISA-STIG-OL07-00-030360 | 9333 | ······-·DISA-STIG-OL07-00-030360 |
| 9334 | ······-·NIST-800-53-AC-6(9) | 9334 | ······-·NIST-800-53-AC-6(9) |
| 9335 | ······-·NIST-800-53-AU-12(3) | 9335 | ······-·NIST-800-53-AU-12(3) |
| 9336 | ······-·NIST-800-53-AU-7(a) | 9336 | ······-·NIST-800-53-AU-7(a) |
| 9337 | ······-·NIST-800-53-AU-7(b) | 9337 | ······-·NIST-800-53-AU-7(b) |
| 9338 | ······-·NIST-800-53-AU-8(b) | 9338 | ······-·NIST-800-53-AU-8(b) |
| Offset 9346, 16 lines modified | Offset 9346, 16 lines modified | ||
| 9346 | ····-·name:·Update·/etc/audit/rules.d/privileged.rules·to·audit·privileged·functions | 9346 | ····-·name:·Update·/etc/audit/rules.d/privileged.rules·to·audit·privileged·functions |
| 9347 | ······lineinfile: | 9347 | ······lineinfile: |
| 9348 | ········path:·/etc/audit/rules.d/privileged.rules | 9348 | ········path:·/etc/audit/rules.d/privileged.rules |
| 9349 | ········line:·'{{··item··}}' | 9349 | ········line:·'{{··item··}}' |
| 9350 | ········create:·true | 9350 | ········create:·true |
| 9351 | ······when: | 9351 | ······when: |
| 9352 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9353 | ······-·'"audit"·in·ansible_facts.packages' | 9352 | ······-·'"audit"·in·ansible_facts.packages' |
| 9353 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 9354 | ······-·'"auditd.service"·in·ansible_facts.services' | 9354 | ······-·'"auditd.service"·in·ansible_facts.services' |
| 9355 | ······-·'"augenrules"·in·check_rules_scripts_result.stdout' | 9355 | ······-·'"augenrules"·in·check_rules_scripts_result.stdout' |
| 9356 | ······register:·augenrules_audit_rules_privilege_function_update_result | 9356 | ······register:·augenrules_audit_rules_privilege_function_update_result |
| 9357 | ······with_items:·'{{·suid_audit_rules·}}' | 9357 | ······with_items:·'{{·suid_audit_rules·}}' |
| 9358 | ······tags: | 9358 | ······tags: |
| 9359 | ······-·DISA-STIG-OL07-00-030360 | 9359 | ······-·DISA-STIG-OL07-00-030360 |
| 9360 | ······-·NIST-800-53-AC-6(9) | 9360 | ······-·NIST-800-53-AC-6(9) |
| Offset 9373, 16 lines modified | Offset 9373, 16 lines modified | ||
| Max diff block lines reached; 148932/154101 bytes (96.65%) of diff not shown. | |||
| Offset 5459, 16 lines modified | Offset 5459, 16 lines modified | ||
| 5459 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 5459 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 5460 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 5460 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 5461 | ··········create:·true | 5461 | ··········create:·true |
| 5462 | ··········mode:·o-rwx | 5462 | ··········mode:·o-rwx |
| 5463 | ··········state:·present | 5463 | ··········state:·present |
| 5464 | ········when:·syscalls_found·|·length·==·0 | 5464 | ········when:·syscalls_found·|·length·==·0 |
| 5465 | ······when: | 5465 | ······when: |
| 5466 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5467 | ······-·'"audit"·in·ansible_facts.packages' | 5466 | ······-·'"audit"·in·ansible_facts.packages' |
| 5467 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5468 | ······tags: | 5468 | ······tags: |
| 5469 | ······-·DISA-STIG-OL08-00-030550 | 5469 | ······-·DISA-STIG-OL08-00-030550 |
| 5470 | ······-·NIST-800-171-3.1.7 | 5470 | ······-·NIST-800-171-3.1.7 |
| 5471 | ······-·NIST-800-53-AC-6(9) | 5471 | ······-·NIST-800-53-AC-6(9) |
| 5472 | ······-·NIST-800-53-AU-12(c) | 5472 | ······-·NIST-800-53-AU-12(c) |
| 5473 | ······-·NIST-800-53-AU-2(d) | 5473 | ······-·NIST-800-53-AU-2(d) |
| 5474 | ······-·NIST-800-53-CM-6(a) | 5474 | ······-·NIST-800-53-CM-6(a) |
| Offset 5607, 16 lines modified | Offset 5607, 16 lines modified | ||
| 5607 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 5607 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 5608 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 5608 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 5609 | ··········create:·true | 5609 | ··········create:·true |
| 5610 | ··········mode:·o-rwx | 5610 | ··········mode:·o-rwx |
| 5611 | ··········state:·present | 5611 | ··········state:·present |
| 5612 | ········when:·syscalls_found·|·length·==·0 | 5612 | ········when:·syscalls_found·|·length·==·0 |
| 5613 | ······when: | 5613 | ······when: |
| 5614 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5615 | ······-·'"audit"·in·ansible_facts.packages' | 5614 | ······-·'"audit"·in·ansible_facts.packages' |
| 5615 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5616 | ······tags: | 5616 | ······tags: |
| 5617 | ······-·DISA-STIG-OL08-00-030550 | 5617 | ······-·DISA-STIG-OL08-00-030550 |
| 5618 | ······-·NIST-800-171-3.1.7 | 5618 | ······-·NIST-800-171-3.1.7 |
| 5619 | ······-·NIST-800-53-AC-6(9) | 5619 | ······-·NIST-800-53-AC-6(9) |
| 5620 | ······-·NIST-800-53-AU-12(c) | 5620 | ······-·NIST-800-53-AU-12(c) |
| 5621 | ······-·NIST-800-53-AU-2(d) | 5621 | ······-·NIST-800-53-AU-2(d) |
| 5622 | ······-·NIST-800-53-CM-6(a) | 5622 | ······-·NIST-800-53-CM-6(a) |
| Offset 5184, 16 lines modified | Offset 5184, 16 lines modified | ||
| 5184 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x | 5184 | ··········line:·-a·always,exit{{·syscalls·|·join(',')·}}·-F·path=/usr/bin/sudo·-F·perm=x |
| 5185 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged | 5185 | ············-F·auid>=1000·-F·auid!=unset·-F·key=privileged |
| 5186 | ··········create:·true | 5186 | ··········create:·true |
| 5187 | ··········mode:·o-rwx | 5187 | ··········mode:·o-rwx |
| 5188 | ··········state:·present | 5188 | ··········state:·present |
| 5189 | ········when:·syscalls_found·|·length·==·0 | 5189 | ········when:·syscalls_found·|·length·==·0 |
| 5190 | ······when: | 5190 | ······when: |
| 5191 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5192 | ······-·'"audit"·in·ansible_facts.packages' | 5191 | ······-·'"audit"·in·ansible_facts.packages' |
| 5192 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5193 | ······tags: | 5193 | ······tags: |
| 5194 | ······-·DISA-STIG-OL08-00-030550 | 5194 | ······-·DISA-STIG-OL08-00-030550 |
| 5195 | ······-·NIST-800-171-3.1.7 | 5195 | ······-·NIST-800-171-3.1.7 |
| 5196 | ······-·NIST-800-53-AC-6(9) | 5196 | ······-·NIST-800-53-AC-6(9) |
| 5197 | ······-·NIST-800-53-AU-12(c) | 5197 | ······-·NIST-800-53-AU-12(c) |
| 5198 | ······-·NIST-800-53-AU-2(d) | 5198 | ······-·NIST-800-53-AU-2(d) |
| 5199 | ······-·NIST-800-53-CM-6(a) | 5199 | ······-·NIST-800-53-CM-6(a) |
| Offset 2492, 16 lines modified | Offset 2492, 16 lines modified | ||
| 2492 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 2492 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 2493 | ······find: | 2493 | ······find: |
| 2494 | ········paths:·/etc/audit/rules.d/ | 2494 | ········paths:·/etc/audit/rules.d/ |
| 2495 | ········patterns:·'*.rules' | 2495 | ········patterns:·'*.rules' |
| 2496 | ······register:·find_rules_d | 2496 | ······register:·find_rules_d |
| 2497 | ······when: | 2497 | ······when: |
| 2498 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2499 | ······-·'"audit"·in·ansible_facts.packages' | 2498 | ······-·'"audit"·in·ansible_facts.packages' |
| 2499 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2500 | ······tags: | 2500 | ······tags: |
| 2501 | ······-·CJIS-5.4.1.1 | 2501 | ······-·CJIS-5.4.1.1 |
| 2502 | ······-·DISA-STIG-OL08-00-030121 | 2502 | ······-·DISA-STIG-OL08-00-030121 |
| 2503 | ······-·NIST-800-171-3.3.1 | 2503 | ······-·NIST-800-171-3.3.1 |
| 2504 | ······-·NIST-800-171-3.4.3 | 2504 | ······-·NIST-800-171-3.4.3 |
| 2505 | ······-·NIST-800-53-AC-6(9) | 2505 | ······-·NIST-800-53-AC-6(9) |
| 2506 | ······-·NIST-800-53-CM-6(a) | 2506 | ······-·NIST-800-53-CM-6(a) |
| Offset 2517, 16 lines modified | Offset 2517, 16 lines modified | ||
| 2517 | ······lineinfile: | 2517 | ······lineinfile: |
| 2518 | ········path:·'{{·item·}}' | 2518 | ········path:·'{{·item·}}' |
| 2519 | ········regexp:·^\s*(?:-e)\s+.*$ | 2519 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 2520 | ········state:·absent | 2520 | ········state:·absent |
| 2521 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 2521 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 2522 | ········}}' | 2522 | ········}}' |
| 2523 | ······when: | 2523 | ······when: |
| 2524 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2525 | ······-·'"audit"·in·ansible_facts.packages' | 2524 | ······-·'"audit"·in·ansible_facts.packages' |
| 2525 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2526 | ······tags: | 2526 | ······tags: |
| 2527 | ······-·CJIS-5.4.1.1 | 2527 | ······-·CJIS-5.4.1.1 |
| 2528 | ······-·DISA-STIG-OL08-00-030121 | 2528 | ······-·DISA-STIG-OL08-00-030121 |
| 2529 | ······-·NIST-800-171-3.3.1 | 2529 | ······-·NIST-800-171-3.3.1 |
| 2530 | ······-·NIST-800-171-3.4.3 | 2530 | ······-·NIST-800-171-3.4.3 |
| 2531 | ······-·NIST-800-53-AC-6(9) | 2531 | ······-·NIST-800-53-AC-6(9) |
| 2532 | ······-·NIST-800-53-CM-6(a) | 2532 | ······-·NIST-800-53-CM-6(a) |
| Offset 2544, 16 lines modified | Offset 2544, 16 lines modified | ||
| 2544 | ········create:·true | 2544 | ········create:·true |
| 2545 | ········line:·-e·2 | 2545 | ········line:·-e·2 |
| 2546 | ········mode:·o-rwx | 2546 | ········mode:·o-rwx |
| 2547 | ······loop: | 2547 | ······loop: |
| 2548 | ······-·/etc/audit/audit.rules | 2548 | ······-·/etc/audit/audit.rules |
| 2549 | ······-·/etc/audit/rules.d/immutable.rules | 2549 | ······-·/etc/audit/rules.d/immutable.rules |
| 2550 | ······when: | 2550 | ······when: |
| 2551 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2552 | ······-·'"audit"·in·ansible_facts.packages' | 2551 | ······-·'"audit"·in·ansible_facts.packages' |
| 2552 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2553 | ······tags: | 2553 | ······tags: |
| 2554 | ······-·CJIS-5.4.1.1 | 2554 | ······-·CJIS-5.4.1.1 |
| 2555 | ······-·DISA-STIG-OL08-00-030121 | 2555 | ······-·DISA-STIG-OL08-00-030121 |
| 2556 | ······-·NIST-800-171-3.3.1 | 2556 | ······-·NIST-800-171-3.3.1 |
| 2557 | ······-·NIST-800-171-3.4.3 | 2557 | ······-·NIST-800-171-3.4.3 |
| 2558 | ······-·NIST-800-53-AC-6(9) | 2558 | ······-·NIST-800-53-AC-6(9) |
| 2559 | ······-·NIST-800-53-CM-6(a) | 2559 | ······-·NIST-800-53-CM-6(a) |
| Offset 2586, 16 lines modified | Offset 2586, 16 lines modified | ||
| 2586 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 2586 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 2587 | ······find: | 2587 | ······find: |
| 2588 | ········paths:·/etc/audit/rules.d | 2588 | ········paths:·/etc/audit/rules.d |
| 2589 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 2589 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 2590 | ········patterns:·'*.rules' | 2590 | ········patterns:·'*.rules' |
| 2591 | ······register:·find_existing_watch_rules_d | 2591 | ······register:·find_existing_watch_rules_d |
| 2592 | ······when: | 2592 | ······when: |
| 2593 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2594 | ······-·'"audit"·in·ansible_facts.packages' | 2593 | ······-·'"audit"·in·ansible_facts.packages' |
| 2594 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2595 | ······tags: | 2595 | ······tags: |
| 2596 | ······-·CJIS-5.4.1.1 | 2596 | ······-·CJIS-5.4.1.1 |
| 2597 | ······-·NIST-800-171-3.1.8 | 2597 | ······-·NIST-800-171-3.1.8 |
| 2598 | ······-·NIST-800-53-AU-12(c) | 2598 | ······-·NIST-800-53-AU-12(c) |
| 2599 | ······-·NIST-800-53-AU-2(d) | 2599 | ······-·NIST-800-53-AU-2(d) |
| 2600 | ······-·NIST-800-53-CM-6(a) | 2600 | ······-·NIST-800-53-CM-6(a) |
| 2601 | ······-·PCI-DSS-Req-10.5.5 | 2601 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 2609, 16 lines modified | Offset 2609, 16 lines modified | ||
| 2609 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 2609 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 2610 | ······find: | 2610 | ······find: |
| 2611 | ········paths:·/etc/audit/rules.d | 2611 | ········paths:·/etc/audit/rules.d |
| 2612 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 2612 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 2613 | ········patterns:·'*.rules' | 2613 | ········patterns:·'*.rules' |
| 2614 | ······register:·find_watch_key | 2614 | ······register:·find_watch_key |
| 2615 | ······when: | 2615 | ······when: |
| 2616 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2617 | ······-·'"audit"·in·ansible_facts.packages' | 2616 | ······-·'"audit"·in·ansible_facts.packages' |
| 2617 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2618 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 2618 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 2619 | ········==·0 | 2619 | ········==·0 |
| 2620 | ······tags: | 2620 | ······tags: |
| 2621 | ······-·CJIS-5.4.1.1 | 2621 | ······-·CJIS-5.4.1.1 |
| 2622 | ······-·NIST-800-171-3.1.8 | 2622 | ······-·NIST-800-171-3.1.8 |
| 2623 | ······-·NIST-800-53-AU-12(c) | 2623 | ······-·NIST-800-53-AU-12(c) |
| 2624 | ······-·NIST-800-53-AU-2(d) | 2624 | ······-·NIST-800-53-AU-2(d) |
| Offset 2632, 16 lines modified | Offset 2632, 16 lines modified | ||
| 2632 | ······-·restrict_strategy | 2632 | ······-·restrict_strategy |
| 2633 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 2633 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 2634 | ······set_fact: | 2634 | ······set_fact: |
| 2635 | ········all_files: | 2635 | ········all_files: |
| 2636 | ········-·/etc/audit/rules.d/MAC-policy.rules | 2636 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 2637 | ······when: | 2637 | ······when: |
| 2638 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2639 | ······-·'"audit"·in·ansible_facts.packages' | 2638 | ······-·'"audit"·in·ansible_facts.packages' |
| 2639 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2640 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 2640 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 2641 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 2641 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 2642 | ······tags: | 2642 | ······tags: |
| 2643 | ······-·CJIS-5.4.1.1 | 2643 | ······-·CJIS-5.4.1.1 |
| 2644 | ······-·NIST-800-171-3.1.8 | 2644 | ······-·NIST-800-171-3.1.8 |
| 2645 | ······-·NIST-800-53-AU-12(c) | 2645 | ······-·NIST-800-53-AU-12(c) |
| 2646 | ······-·NIST-800-53-AU-2(d) | 2646 | ······-·NIST-800-53-AU-2(d) |
| Offset 2655, 16 lines modified | Offset 2655, 16 lines modified | ||
| 2655 | ······-·restrict_strategy | 2655 | ······-·restrict_strategy |
| 2656 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 2656 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 2657 | ······set_fact: | 2657 | ······set_fact: |
| 2658 | ········all_files: | 2658 | ········all_files: |
| 2659 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 2659 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 2660 | ······when: | 2660 | ······when: |
| 2661 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2662 | ······-·'"audit"·in·ansible_facts.packages' | 2661 | ······-·'"audit"·in·ansible_facts.packages' |
| 2662 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 2663 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 2663 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 2664 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 2664 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 2665 | ······tags: | 2665 | ······tags: |
| 2666 | ······-·CJIS-5.4.1.1 | 2666 | ······-·CJIS-5.4.1.1 |
| 2667 | ······-·NIST-800-171-3.1.8 | 2667 | ······-·NIST-800-171-3.1.8 |
| 2668 | ······-·NIST-800-53-AU-12(c) | 2668 | ······-·NIST-800-53-AU-12(c) |
| 2669 | ······-·NIST-800-53-AU-2(d) | 2669 | ······-·NIST-800-53-AU-2(d) |
| Offset 2680, 16 lines modified | Offset 2680, 16 lines modified | ||
| 2680 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 2680 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 106224/111277 bytes (95.46%) of diff not shown. | |||
| Offset 4761, 16 lines modified | Offset 4761, 16 lines modified | ||
| 4761 | ······lineinfile: | 4761 | ······lineinfile: |
| 4762 | ········dest:·/etc/audit/auditd.conf | 4762 | ········dest:·/etc/audit/auditd.conf |
| 4763 | ········regexp:·^\s*flush\s*=\s*.*$ | 4763 | ········regexp:·^\s*flush\s*=\s*.*$ |
| 4764 | ········line:·flush·=·{{·var_auditd_flush·}} | 4764 | ········line:·flush·=·{{·var_auditd_flush·}} |
| 4765 | ········state:·present | 4765 | ········state:·present |
| 4766 | ········create:·true | 4766 | ········create:·true |
| 4767 | ······when: | 4767 | ······when: |
| 4768 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4769 | ······-·'"audit"·in·ansible_facts.packages' | 4768 | ······-·'"audit"·in·ansible_facts.packages' |
| 4769 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4770 | ······tags: | 4770 | ······tags: |
| 4771 | ······-·NIST-800-171-3.3.1 | 4771 | ······-·NIST-800-171-3.3.1 |
| 4772 | ······-·NIST-800-53-AU-11 | 4772 | ······-·NIST-800-53-AU-11 |
| 4773 | ······-·NIST-800-53-CM-6(a) | 4773 | ······-·NIST-800-53-CM-6(a) |
| 4774 | ······-·auditd_data_retention_flush | 4774 | ······-·auditd_data_retention_flush |
| 4775 | ······-·low_complexity | 4775 | ······-·low_complexity |
| 4776 | ······-·low_disruption | 4776 | ······-·low_disruption |
| Offset 4816, 16 lines modified | Offset 4816, 16 lines modified | ||
| 4816 | ········lineinfile: | 4816 | ········lineinfile: |
| 4817 | ··········path:·/etc/audit/auditd.conf | 4817 | ··········path:·/etc/audit/auditd.conf |
| 4818 | ··········create:·true | 4818 | ··········create:·true |
| 4819 | ··········regexp:·(?i)^\s*freq\s*=\s* | 4819 | ··········regexp:·(?i)^\s*freq\s*=\s* |
| 4820 | ··········line:·freq·=·50 | 4820 | ··········line:·freq·=·50 |
| 4821 | ··········state:·present | 4821 | ··········state:·present |
| 4822 | ······when: | 4822 | ······when: |
| 4823 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4824 | ······-·'"audit"·in·ansible_facts.packages' | 4823 | ······-·'"audit"·in·ansible_facts.packages' |
| 4824 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4825 | ······tags: | 4825 | ······tags: |
| 4826 | ······-·NIST-800-53-CM-6 | 4826 | ······-·NIST-800-53-CM-6 |
| 4827 | ······-·auditd_freq | 4827 | ······-·auditd_freq |
| 4828 | ······-·low_complexity | 4828 | ······-·low_complexity |
| 4829 | ······-·low_disruption | 4829 | ······-·low_disruption |
| 4830 | ······-·medium_severity | 4830 | ······-·medium_severity |
| 4831 | ······-·no_reboot_needed | 4831 | ······-·no_reboot_needed |
| Offset 4870, 16 lines modified | Offset 4870, 16 lines modified | ||
| 4870 | ········lineinfile: | 4870 | ········lineinfile: |
| 4871 | ··········path:·/etc/audit/auditd.conf | 4871 | ··········path:·/etc/audit/auditd.conf |
| 4872 | ··········create:·true | 4872 | ··········create:·true |
| 4873 | ··········regexp:·(?i)^\s*local_events\s*=\s* | 4873 | ··········regexp:·(?i)^\s*local_events\s*=\s* |
| 4874 | ··········line:·local_events·=·yes | 4874 | ··········line:·local_events·=·yes |
| 4875 | ··········state:·present | 4875 | ··········state:·present |
| 4876 | ······when: | 4876 | ······when: |
| 4877 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4878 | ······-·'"audit"·in·ansible_facts.packages' | 4877 | ······-·'"audit"·in·ansible_facts.packages' |
| 4878 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4879 | ······tags: | 4879 | ······tags: |
| 4880 | ······-·DISA-STIG-OL08-00-030061 | 4880 | ······-·DISA-STIG-OL08-00-030061 |
| 4881 | ······-·NIST-800-53-CM-6 | 4881 | ······-·NIST-800-53-CM-6 |
| 4882 | ······-·auditd_local_events | 4882 | ······-·auditd_local_events |
| 4883 | ······-·low_complexity | 4883 | ······-·low_complexity |
| 4884 | ······-·low_disruption | 4884 | ······-·low_disruption |
| 4885 | ······-·medium_severity | 4885 | ······-·medium_severity |
| Offset 4926, 16 lines modified | Offset 4926, 16 lines modified | ||
| 4926 | ········lineinfile: | 4926 | ········lineinfile: |
| 4927 | ··········path:·/etc/audit/auditd.conf | 4927 | ··········path:·/etc/audit/auditd.conf |
| 4928 | ··········create:·true | 4928 | ··········create:·true |
| 4929 | ··········regexp:·(?i)^\s*log_format\s*=\s* | 4929 | ··········regexp:·(?i)^\s*log_format\s*=\s* |
| 4930 | ··········line:·log_format·=·ENRICHED | 4930 | ··········line:·log_format·=·ENRICHED |
| 4931 | ··········state:·present | 4931 | ··········state:·present |
| 4932 | ······when: | 4932 | ······when: |
| 4933 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4934 | ······-·'"audit"·in·ansible_facts.packages' | 4933 | ······-·'"audit"·in·ansible_facts.packages' |
| 4934 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4935 | ······tags: | 4935 | ······tags: |
| 4936 | ······-·DISA-STIG-OL08-00-030063 | 4936 | ······-·DISA-STIG-OL08-00-030063 |
| 4937 | ······-·NIST-800-53-AU-3 | 4937 | ······-·NIST-800-53-AU-3 |
| 4938 | ······-·NIST-800-53-CM-6 | 4938 | ······-·NIST-800-53-CM-6 |
| 4939 | ······-·auditd_log_format | 4939 | ······-·auditd_log_format |
| 4940 | ······-·low_complexity | 4940 | ······-·low_complexity |
| 4941 | ······-·low_disruption | 4941 | ······-·low_disruption |
| Offset 4983, 16 lines modified | Offset 4983, 16 lines modified | ||
| 4983 | ········lineinfile: | 4983 | ········lineinfile: |
| 4984 | ··········path:·/etc/audit/auditd.conf | 4984 | ··········path:·/etc/audit/auditd.conf |
| 4985 | ··········create:·true | 4985 | ··········create:·true |
| 4986 | ··········regexp:·(?i)^\s*name_format\s*=\s* | 4986 | ··········regexp:·(?i)^\s*name_format\s*=\s* |
| 4987 | ··········line:·name_format·=·hostname | 4987 | ··········line:·name_format·=·hostname |
| 4988 | ··········state:·present | 4988 | ··········state:·present |
| 4989 | ······when: | 4989 | ······when: |
| 4990 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4991 | ······-·'"audit"·in·ansible_facts.packages' | 4990 | ······-·'"audit"·in·ansible_facts.packages' |
| 4991 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4992 | ······tags: | 4992 | ······tags: |
| 4993 | ······-·DISA-STIG-OL08-00-030062 | 4993 | ······-·DISA-STIG-OL08-00-030062 |
| 4994 | ······-·NIST-800-53-AU-3 | 4994 | ······-·NIST-800-53-AU-3 |
| 4995 | ······-·NIST-800-53-CM-6 | 4995 | ······-·NIST-800-53-CM-6 |
| 4996 | ······-·auditd_name_format | 4996 | ······-·auditd_name_format |
| 4997 | ······-·low_complexity | 4997 | ······-·low_complexity |
| 4998 | ······-·low_disruption | 4998 | ······-·low_disruption |
| Offset 5038, 16 lines modified | Offset 5038, 16 lines modified | ||
| 5038 | ········lineinfile: | 5038 | ········lineinfile: |
| 5039 | ··········path:·/etc/audit/auditd.conf | 5039 | ··········path:·/etc/audit/auditd.conf |
| 5040 | ··········create:·true | 5040 | ··········create:·true |
| 5041 | ··········regexp:·(?i)^\s*write_logs\s*=\s* | 5041 | ··········regexp:·(?i)^\s*write_logs\s*=\s* |
| 5042 | ··········line:·write_logs·=·yes | 5042 | ··········line:·write_logs·=·yes |
| 5043 | ··········state:·present | 5043 | ··········state:·present |
| 5044 | ······when: | 5044 | ······when: |
| 5045 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5046 | ······-·'"audit"·in·ansible_facts.packages' | 5045 | ······-·'"audit"·in·ansible_facts.packages' |
| 5046 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5047 | ······tags: | 5047 | ······tags: |
| 5048 | ······-·NIST-800-53-CM-6 | 5048 | ······-·NIST-800-53-CM-6 |
| 5049 | ······-·auditd_write_logs | 5049 | ······-·auditd_write_logs |
| 5050 | ······-·low_complexity | 5050 | ······-·low_complexity |
| 5051 | ······-·low_disruption | 5051 | ······-·low_disruption |
| 5052 | ······-·medium_severity | 5052 | ······-·medium_severity |
| 5053 | ······-·no_reboot_needed | 5053 | ······-·no_reboot_needed |
| Offset 980, 16 lines modified | Offset 980, 16 lines modified | ||
| 980 | ······-·no_reboot_needed | 980 | ······-·no_reboot_needed |
| 981 | ······-·restrict_strategy | 981 | ······-·restrict_strategy |
| 982 | ····-·name:·Set·architecture·for·audit·tasks | 982 | ····-·name:·Set·architecture·for·audit·tasks |
| 983 | ······set_fact: | 983 | ······set_fact: |
| 984 | ········audit_arch:·b64 | 984 | ········audit_arch:·b64 |
| 985 | ······when: | 985 | ······when: |
| 986 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 987 | ······-·'"audit"·in·ansible_facts.packages' | 986 | ······-·'"audit"·in·ansible_facts.packages' |
| 987 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 988 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 988 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 989 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 989 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 990 | ······tags: | 990 | ······tags: |
| 991 | ······-·CJIS-5.4.1.1 | 991 | ······-·CJIS-5.4.1.1 |
| 992 | ······-·NIST-800-171-3.1.7 | 992 | ······-·NIST-800-171-3.1.7 |
| 993 | ······-·NIST-800-53-AC-6(9) | 993 | ······-·NIST-800-53-AC-6(9) |
| 994 | ······-·NIST-800-53-AU-12(c) | 994 | ······-·NIST-800-53-AU-12(c) |
| Offset 1122, 16 lines modified | Offset 1122, 16 lines modified | ||
| 1122 | ··········path:·'{{·audit_file·}}' | 1122 | ··········path:·'{{·audit_file·}}' |
| 1123 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification | 1123 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification |
| 1124 | ··········create:·true | 1124 | ··········create:·true |
| 1125 | ··········mode:·o-rwx | 1125 | ··········mode:·o-rwx |
| 1126 | ··········state:·present | 1126 | ··········state:·present |
| 1127 | ········when:·syscalls_found·|·length·==·0 | 1127 | ········when:·syscalls_found·|·length·==·0 |
| 1128 | ······when: | 1128 | ······when: |
| 1129 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1130 | ······-·'"audit"·in·ansible_facts.packages' | 1129 | ······-·'"audit"·in·ansible_facts.packages' |
| 1130 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1131 | ······tags: | 1131 | ······tags: |
| 1132 | ······-·CJIS-5.4.1.1 | 1132 | ······-·CJIS-5.4.1.1 |
| 1133 | ······-·NIST-800-171-3.1.7 | 1133 | ······-·NIST-800-171-3.1.7 |
| 1134 | ······-·NIST-800-53-AC-6(9) | 1134 | ······-·NIST-800-53-AC-6(9) |
| 1135 | ······-·NIST-800-53-AU-12(c) | 1135 | ······-·NIST-800-53-AU-12(c) |
| 1136 | ······-·NIST-800-53-AU-2(d) | 1136 | ······-·NIST-800-53-AU-2(d) |
| 1137 | ······-·NIST-800-53-CM-6(a) | 1137 | ······-·NIST-800-53-CM-6(a) |
| Offset 1262, 16 lines modified | Offset 1262, 16 lines modified | ||
| 1262 | ··········path:·'{{·audit_file·}}' | 1262 | ··········path:·'{{·audit_file·}}' |
| 1263 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification | 1263 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·key=audit_rules_networkconfig_modification |
| 1264 | ··········create:·true | 1264 | ··········create:·true |
| 1265 | ··········mode:·o-rwx | 1265 | ··········mode:·o-rwx |
| 1266 | ··········state:·present | 1266 | ··········state:·present |
| 1267 | ········when:·syscalls_found·|·length·==·0 | 1267 | ········when:·syscalls_found·|·length·==·0 |
| 1268 | ······when: | 1268 | ······when: |
| 1269 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1270 | ······-·'"audit"·in·ansible_facts.packages' | 1269 | ······-·'"audit"·in·ansible_facts.packages' |
| 1270 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1271 | ······-·audit_arch·==·"b64" | 1271 | ······-·audit_arch·==·"b64" |
| 1272 | ······tags: | 1272 | ······tags: |
| 1273 | ······-·CJIS-5.4.1.1 | 1273 | ······-·CJIS-5.4.1.1 |
| 1274 | ······-·NIST-800-171-3.1.7 | 1274 | ······-·NIST-800-171-3.1.7 |
| 1275 | ······-·NIST-800-53-AC-6(9) | 1275 | ······-·NIST-800-53-AC-6(9) |
| 1276 | ······-·NIST-800-53-AU-12(c) | 1276 | ······-·NIST-800-53-AU-12(c) |
| 1277 | ······-·NIST-800-53-AU-2(d) | 1277 | ······-·NIST-800-53-AU-2(d) |
| Offset 1287, 16 lines modified | Offset 1287, 16 lines modified | ||
| 1287 | ····-·name:·Check·if·watch·rule·for·/etc/issue·already·exists·in·/etc/audit/rules.d/ | 1287 | ····-·name:·Check·if·watch·rule·for·/etc/issue·already·exists·in·/etc/audit/rules.d/ |
| 1288 | ······find: | 1288 | ······find: |
| 1289 | ········paths:·/etc/audit/rules.d | 1289 | ········paths:·/etc/audit/rules.d |
| 1290 | ········contains:·^\s*-w\s+/etc/issue\s+-p\s+wa(\s|$)+ | 1290 | ········contains:·^\s*-w\s+/etc/issue\s+-p\s+wa(\s|$)+ |
| 1291 | ········patterns:·'*.rules' | 1291 | ········patterns:·'*.rules' |
| 1292 | ······register:·find_existing_watch_rules_d | 1292 | ······register:·find_existing_watch_rules_d |
| 1293 | ······when: | 1293 | ······when: |
| 1294 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1295 | ······-·'"audit"·in·ansible_facts.packages' | 1294 | ······-·'"audit"·in·ansible_facts.packages' |
| 1295 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1296 | ······tags: | 1296 | ······tags: |
| 1297 | ······-·CJIS-5.4.1.1 | 1297 | ······-·CJIS-5.4.1.1 |
| 1298 | ······-·NIST-800-171-3.1.7 | 1298 | ······-·NIST-800-171-3.1.7 |
| 1299 | ······-·NIST-800-53-AC-6(9) | 1299 | ······-·NIST-800-53-AC-6(9) |
| 1300 | ······-·NIST-800-53-AU-12(c) | 1300 | ······-·NIST-800-53-AU-12(c) |
| 1301 | ······-·NIST-800-53-AU-2(d) | 1301 | ······-·NIST-800-53-AU-2(d) |
| 1302 | ······-·NIST-800-53-CM-6(a) | 1302 | ······-·NIST-800-53-CM-6(a) |
| Offset 1311, 16 lines modified | Offset 1311, 16 lines modified | ||
| 1311 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·audit_rules_networkconfig_modification | 1311 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·audit_rules_networkconfig_modification |
| 1312 | ······find: | 1312 | ······find: |
| 1313 | ········paths:·/etc/audit/rules.d | 1313 | ········paths:·/etc/audit/rules.d |
| 1314 | ········contains:·^.*(?:-F·key=|-k\s+)audit_rules_networkconfig_modification$ | 1314 | ········contains:·^.*(?:-F·key=|-k\s+)audit_rules_networkconfig_modification$ |
| 1315 | ········patterns:·'*.rules' | 1315 | ········patterns:·'*.rules' |
| 1316 | ······register:·find_watch_key | 1316 | ······register:·find_watch_key |
| 1317 | ······when: | 1317 | ······when: |
| 1318 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1319 | ······-·'"audit"·in·ansible_facts.packages' | 1318 | ······-·'"audit"·in·ansible_facts.packages' |
| 1319 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1320 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1320 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1321 | ········==·0 | 1321 | ········==·0 |
| 1322 | ······tags: | 1322 | ······tags: |
| 1323 | ······-·CJIS-5.4.1.1 | 1323 | ······-·CJIS-5.4.1.1 |
| 1324 | ······-·NIST-800-171-3.1.7 | 1324 | ······-·NIST-800-171-3.1.7 |
| 1325 | ······-·NIST-800-53-AC-6(9) | 1325 | ······-·NIST-800-53-AC-6(9) |
| 1326 | ······-·NIST-800-53-AU-12(c) | 1326 | ······-·NIST-800-53-AU-12(c) |
| Offset 1336, 16 lines modified | Offset 1336, 16 lines modified | ||
| 1336 | ····-·name:·Use·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules·as·the | 1336 | ····-·name:·Use·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules·as·the |
| 1337 | ········recipient·for·the·rule | 1337 | ········recipient·for·the·rule |
| 1338 | ······set_fact: | 1338 | ······set_fact: |
| 1339 | ········all_files: | 1339 | ········all_files: |
| 1340 | ········-·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules | 1340 | ········-·/etc/audit/rules.d/audit_rules_networkconfig_modification.rules |
| 1341 | ······when: | 1341 | ······when: |
| 1342 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1343 | ······-·'"audit"·in·ansible_facts.packages' | 1342 | ······-·'"audit"·in·ansible_facts.packages' |
| 1343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1344 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1344 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1345 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1345 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1346 | ······tags: | 1346 | ······tags: |
| 1347 | ······-·CJIS-5.4.1.1 | 1347 | ······-·CJIS-5.4.1.1 |
| 1348 | ······-·NIST-800-171-3.1.7 | 1348 | ······-·NIST-800-171-3.1.7 |
| 1349 | ······-·NIST-800-53-AC-6(9) | 1349 | ······-·NIST-800-53-AC-6(9) |
| 1350 | ······-·NIST-800-53-AU-12(c) | 1350 | ······-·NIST-800-53-AU-12(c) |
| Offset 1360, 16 lines modified | Offset 1360, 16 lines modified | ||
| 1360 | ······-·restrict_strategy | 1360 | ······-·restrict_strategy |
| 1361 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1361 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1362 | ······set_fact: | 1362 | ······set_fact: |
| 1363 | ········all_files: | 1363 | ········all_files: |
| 1364 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1364 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1365 | ······when: | 1365 | ······when: |
| 1366 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1367 | ······-·'"audit"·in·ansible_facts.packages' | 1366 | ······-·'"audit"·in·ansible_facts.packages' |
| 1367 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1368 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1368 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1369 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1369 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1370 | ······tags: | 1370 | ······tags: |
| 1371 | ······-·CJIS-5.4.1.1 | 1371 | ······-·CJIS-5.4.1.1 |
| 1372 | ······-·NIST-800-171-3.1.7 | 1372 | ······-·NIST-800-171-3.1.7 |
| 1373 | ······-·NIST-800-53-AC-6(9) | 1373 | ······-·NIST-800-53-AC-6(9) |
| 1374 | ······-·NIST-800-53-AU-12(c) | 1374 | ······-·NIST-800-53-AU-12(c) |
| Offset 1386, 16 lines modified | Offset 1386, 16 lines modified | ||
| 1386 | ····-·name:·Add·watch·rule·for·/etc/issue·in·/etc/audit/rules.d/ | 1386 | ····-·name:·Add·watch·rule·for·/etc/issue·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 71016/76414 bytes (92.94%) of diff not shown. | |||
| Offset 1185, 16 lines modified | Offset 1185, 16 lines modified | ||
| 1185 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 1185 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 1186 | ······find: | 1186 | ······find: |
| 1187 | ········paths:·/etc/audit/rules.d/ | 1187 | ········paths:·/etc/audit/rules.d/ |
| 1188 | ········patterns:·'*.rules' | 1188 | ········patterns:·'*.rules' |
| 1189 | ······register:·find_rules_d | 1189 | ······register:·find_rules_d |
| 1190 | ······when: | 1190 | ······when: |
| 1191 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1192 | ······-·'"audit"·in·ansible_facts.packages' | 1191 | ······-·'"audit"·in·ansible_facts.packages' |
| 1192 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1193 | ······tags: | 1193 | ······tags: |
| 1194 | ······-·CJIS-5.4.1.1 | 1194 | ······-·CJIS-5.4.1.1 |
| 1195 | ······-·DISA-STIG-OL08-00-030121 | 1195 | ······-·DISA-STIG-OL08-00-030121 |
| 1196 | ······-·NIST-800-171-3.3.1 | 1196 | ······-·NIST-800-171-3.3.1 |
| 1197 | ······-·NIST-800-171-3.4.3 | 1197 | ······-·NIST-800-171-3.4.3 |
| 1198 | ······-·NIST-800-53-AC-6(9) | 1198 | ······-·NIST-800-53-AC-6(9) |
| 1199 | ······-·NIST-800-53-CM-6(a) | 1199 | ······-·NIST-800-53-CM-6(a) |
| Offset 1210, 16 lines modified | Offset 1210, 16 lines modified | ||
| 1210 | ······lineinfile: | 1210 | ······lineinfile: |
| 1211 | ········path:·'{{·item·}}' | 1211 | ········path:·'{{·item·}}' |
| 1212 | ········regexp:·^\s*(?:-e)\s+.*$ | 1212 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 1213 | ········state:·absent | 1213 | ········state:·absent |
| 1214 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 1214 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 1215 | ········}}' | 1215 | ········}}' |
| 1216 | ······when: | 1216 | ······when: |
| 1217 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1218 | ······-·'"audit"·in·ansible_facts.packages' | 1217 | ······-·'"audit"·in·ansible_facts.packages' |
| 1218 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1219 | ······tags: | 1219 | ······tags: |
| 1220 | ······-·CJIS-5.4.1.1 | 1220 | ······-·CJIS-5.4.1.1 |
| 1221 | ······-·DISA-STIG-OL08-00-030121 | 1221 | ······-·DISA-STIG-OL08-00-030121 |
| 1222 | ······-·NIST-800-171-3.3.1 | 1222 | ······-·NIST-800-171-3.3.1 |
| 1223 | ······-·NIST-800-171-3.4.3 | 1223 | ······-·NIST-800-171-3.4.3 |
| 1224 | ······-·NIST-800-53-AC-6(9) | 1224 | ······-·NIST-800-53-AC-6(9) |
| 1225 | ······-·NIST-800-53-CM-6(a) | 1225 | ······-·NIST-800-53-CM-6(a) |
| Offset 1237, 16 lines modified | Offset 1237, 16 lines modified | ||
| 1237 | ········create:·true | 1237 | ········create:·true |
| 1238 | ········line:·-e·2 | 1238 | ········line:·-e·2 |
| 1239 | ········mode:·o-rwx | 1239 | ········mode:·o-rwx |
| 1240 | ······loop: | 1240 | ······loop: |
| 1241 | ······-·/etc/audit/audit.rules | 1241 | ······-·/etc/audit/audit.rules |
| 1242 | ······-·/etc/audit/rules.d/immutable.rules | 1242 | ······-·/etc/audit/rules.d/immutable.rules |
| 1243 | ······when: | 1243 | ······when: |
| 1244 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1245 | ······-·'"audit"·in·ansible_facts.packages' | 1244 | ······-·'"audit"·in·ansible_facts.packages' |
| 1245 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1246 | ······tags: | 1246 | ······tags: |
| 1247 | ······-·CJIS-5.4.1.1 | 1247 | ······-·CJIS-5.4.1.1 |
| 1248 | ······-·DISA-STIG-OL08-00-030121 | 1248 | ······-·DISA-STIG-OL08-00-030121 |
| 1249 | ······-·NIST-800-171-3.3.1 | 1249 | ······-·NIST-800-171-3.3.1 |
| 1250 | ······-·NIST-800-171-3.4.3 | 1250 | ······-·NIST-800-171-3.4.3 |
| 1251 | ······-·NIST-800-53-AC-6(9) | 1251 | ······-·NIST-800-53-AC-6(9) |
| 1252 | ······-·NIST-800-53-CM-6(a) | 1252 | ······-·NIST-800-53-CM-6(a) |
| Offset 1279, 16 lines modified | Offset 1279, 16 lines modified | ||
| 1279 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 1279 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 1280 | ······find: | 1280 | ······find: |
| 1281 | ········paths:·/etc/audit/rules.d | 1281 | ········paths:·/etc/audit/rules.d |
| 1282 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 1282 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 1283 | ········patterns:·'*.rules' | 1283 | ········patterns:·'*.rules' |
| 1284 | ······register:·find_existing_watch_rules_d | 1284 | ······register:·find_existing_watch_rules_d |
| 1285 | ······when: | 1285 | ······when: |
| 1286 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1287 | ······-·'"audit"·in·ansible_facts.packages' | 1286 | ······-·'"audit"·in·ansible_facts.packages' |
| 1287 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1288 | ······tags: | 1288 | ······tags: |
| 1289 | ······-·CJIS-5.4.1.1 | 1289 | ······-·CJIS-5.4.1.1 |
| 1290 | ······-·NIST-800-171-3.1.8 | 1290 | ······-·NIST-800-171-3.1.8 |
| 1291 | ······-·NIST-800-53-AU-12(c) | 1291 | ······-·NIST-800-53-AU-12(c) |
| 1292 | ······-·NIST-800-53-AU-2(d) | 1292 | ······-·NIST-800-53-AU-2(d) |
| 1293 | ······-·NIST-800-53-CM-6(a) | 1293 | ······-·NIST-800-53-CM-6(a) |
| 1294 | ······-·PCI-DSS-Req-10.5.5 | 1294 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 1302, 16 lines modified | Offset 1302, 16 lines modified | ||
| 1302 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 1302 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 1303 | ······find: | 1303 | ······find: |
| 1304 | ········paths:·/etc/audit/rules.d | 1304 | ········paths:·/etc/audit/rules.d |
| 1305 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 1305 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 1306 | ········patterns:·'*.rules' | 1306 | ········patterns:·'*.rules' |
| 1307 | ······register:·find_watch_key | 1307 | ······register:·find_watch_key |
| 1308 | ······when: | 1308 | ······when: |
| 1309 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1310 | ······-·'"audit"·in·ansible_facts.packages' | 1309 | ······-·'"audit"·in·ansible_facts.packages' |
| 1310 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1311 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 1311 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 1312 | ········==·0 | 1312 | ········==·0 |
| 1313 | ······tags: | 1313 | ······tags: |
| 1314 | ······-·CJIS-5.4.1.1 | 1314 | ······-·CJIS-5.4.1.1 |
| 1315 | ······-·NIST-800-171-3.1.8 | 1315 | ······-·NIST-800-171-3.1.8 |
| 1316 | ······-·NIST-800-53-AU-12(c) | 1316 | ······-·NIST-800-53-AU-12(c) |
| 1317 | ······-·NIST-800-53-AU-2(d) | 1317 | ······-·NIST-800-53-AU-2(d) |
| Offset 1325, 16 lines modified | Offset 1325, 16 lines modified | ||
| 1325 | ······-·restrict_strategy | 1325 | ······-·restrict_strategy |
| 1326 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 1326 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 1327 | ······set_fact: | 1327 | ······set_fact: |
| 1328 | ········all_files: | 1328 | ········all_files: |
| 1329 | ········-·/etc/audit/rules.d/MAC-policy.rules | 1329 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 1330 | ······when: | 1330 | ······when: |
| 1331 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1332 | ······-·'"audit"·in·ansible_facts.packages' | 1331 | ······-·'"audit"·in·ansible_facts.packages' |
| 1332 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1333 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 1333 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 1334 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1334 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1335 | ······tags: | 1335 | ······tags: |
| 1336 | ······-·CJIS-5.4.1.1 | 1336 | ······-·CJIS-5.4.1.1 |
| 1337 | ······-·NIST-800-171-3.1.8 | 1337 | ······-·NIST-800-171-3.1.8 |
| 1338 | ······-·NIST-800-53-AU-12(c) | 1338 | ······-·NIST-800-53-AU-12(c) |
| 1339 | ······-·NIST-800-53-AU-2(d) | 1339 | ······-·NIST-800-53-AU-2(d) |
| Offset 1348, 16 lines modified | Offset 1348, 16 lines modified | ||
| 1348 | ······-·restrict_strategy | 1348 | ······-·restrict_strategy |
| 1349 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 1349 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 1350 | ······set_fact: | 1350 | ······set_fact: |
| 1351 | ········all_files: | 1351 | ········all_files: |
| 1352 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 1352 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 1353 | ······when: | 1353 | ······when: |
| 1354 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1355 | ······-·'"audit"·in·ansible_facts.packages' | 1354 | ······-·'"audit"·in·ansible_facts.packages' |
| 1355 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 1356 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 1356 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 1357 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 1357 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 1358 | ······tags: | 1358 | ······tags: |
| 1359 | ······-·CJIS-5.4.1.1 | 1359 | ······-·CJIS-5.4.1.1 |
| 1360 | ······-·NIST-800-171-3.1.8 | 1360 | ······-·NIST-800-171-3.1.8 |
| 1361 | ······-·NIST-800-53-AU-12(c) | 1361 | ······-·NIST-800-53-AU-12(c) |
| 1362 | ······-·NIST-800-53-AU-2(d) | 1362 | ······-·NIST-800-53-AU-2(d) |
| Offset 1373, 16 lines modified | Offset 1373, 16 lines modified | ||
| 1373 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 1373 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 194971/200024 bytes (97.47%) of diff not shown. | |||
| Offset 4754, 16 lines modified | Offset 4754, 16 lines modified | ||
| 4754 | ······lineinfile: | 4754 | ······lineinfile: |
| 4755 | ········dest:·/etc/audit/auditd.conf | 4755 | ········dest:·/etc/audit/auditd.conf |
| 4756 | ········regexp:·^\s*flush\s*=\s*.*$ | 4756 | ········regexp:·^\s*flush\s*=\s*.*$ |
| 4757 | ········line:·flush·=·{{·var_auditd_flush·}} | 4757 | ········line:·flush·=·{{·var_auditd_flush·}} |
| 4758 | ········state:·present | 4758 | ········state:·present |
| 4759 | ········create:·true | 4759 | ········create:·true |
| 4760 | ······when: | 4760 | ······when: |
| 4761 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4762 | ······-·'"audit"·in·ansible_facts.packages' | 4761 | ······-·'"audit"·in·ansible_facts.packages' |
| 4762 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4763 | ······tags: | 4763 | ······tags: |
| 4764 | ······-·NIST-800-171-3.3.1 | 4764 | ······-·NIST-800-171-3.3.1 |
| 4765 | ······-·NIST-800-53-AU-11 | 4765 | ······-·NIST-800-53-AU-11 |
| 4766 | ······-·NIST-800-53-CM-6(a) | 4766 | ······-·NIST-800-53-CM-6(a) |
| 4767 | ······-·auditd_data_retention_flush | 4767 | ······-·auditd_data_retention_flush |
| 4768 | ······-·low_complexity | 4768 | ······-·low_complexity |
| 4769 | ······-·low_disruption | 4769 | ······-·low_disruption |
| Offset 4809, 16 lines modified | Offset 4809, 16 lines modified | ||
| 4809 | ········lineinfile: | 4809 | ········lineinfile: |
| 4810 | ··········path:·/etc/audit/auditd.conf | 4810 | ··········path:·/etc/audit/auditd.conf |
| 4811 | ··········create:·true | 4811 | ··········create:·true |
| 4812 | ··········regexp:·(?i)^\s*freq\s*=\s* | 4812 | ··········regexp:·(?i)^\s*freq\s*=\s* |
| 4813 | ··········line:·freq·=·50 | 4813 | ··········line:·freq·=·50 |
| 4814 | ··········state:·present | 4814 | ··········state:·present |
| 4815 | ······when: | 4815 | ······when: |
| 4816 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4817 | ······-·'"audit"·in·ansible_facts.packages' | 4816 | ······-·'"audit"·in·ansible_facts.packages' |
| 4817 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4818 | ······tags: | 4818 | ······tags: |
| 4819 | ······-·NIST-800-53-CM-6 | 4819 | ······-·NIST-800-53-CM-6 |
| 4820 | ······-·auditd_freq | 4820 | ······-·auditd_freq |
| 4821 | ······-·low_complexity | 4821 | ······-·low_complexity |
| 4822 | ······-·low_disruption | 4822 | ······-·low_disruption |
| 4823 | ······-·medium_severity | 4823 | ······-·medium_severity |
| 4824 | ······-·no_reboot_needed | 4824 | ······-·no_reboot_needed |
| Offset 4863, 16 lines modified | Offset 4863, 16 lines modified | ||
| 4863 | ········lineinfile: | 4863 | ········lineinfile: |
| 4864 | ··········path:·/etc/audit/auditd.conf | 4864 | ··········path:·/etc/audit/auditd.conf |
| 4865 | ··········create:·true | 4865 | ··········create:·true |
| 4866 | ··········regexp:·(?i)^\s*local_events\s*=\s* | 4866 | ··········regexp:·(?i)^\s*local_events\s*=\s* |
| 4867 | ··········line:·local_events·=·yes | 4867 | ··········line:·local_events·=·yes |
| 4868 | ··········state:·present | 4868 | ··········state:·present |
| 4869 | ······when: | 4869 | ······when: |
| 4870 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4871 | ······-·'"audit"·in·ansible_facts.packages' | 4870 | ······-·'"audit"·in·ansible_facts.packages' |
| 4871 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4872 | ······tags: | 4872 | ······tags: |
| 4873 | ······-·DISA-STIG-OL08-00-030061 | 4873 | ······-·DISA-STIG-OL08-00-030061 |
| 4874 | ······-·NIST-800-53-CM-6 | 4874 | ······-·NIST-800-53-CM-6 |
| 4875 | ······-·auditd_local_events | 4875 | ······-·auditd_local_events |
| 4876 | ······-·low_complexity | 4876 | ······-·low_complexity |
| 4877 | ······-·low_disruption | 4877 | ······-·low_disruption |
| 4878 | ······-·medium_severity | 4878 | ······-·medium_severity |
| Offset 4919, 16 lines modified | Offset 4919, 16 lines modified | ||
| 4919 | ········lineinfile: | 4919 | ········lineinfile: |
| 4920 | ··········path:·/etc/audit/auditd.conf | 4920 | ··········path:·/etc/audit/auditd.conf |
| 4921 | ··········create:·true | 4921 | ··········create:·true |
| 4922 | ··········regexp:·(?i)^\s*log_format\s*=\s* | 4922 | ··········regexp:·(?i)^\s*log_format\s*=\s* |
| 4923 | ··········line:·log_format·=·ENRICHED | 4923 | ··········line:·log_format·=·ENRICHED |
| 4924 | ··········state:·present | 4924 | ··········state:·present |
| 4925 | ······when: | 4925 | ······when: |
| 4926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4927 | ······-·'"audit"·in·ansible_facts.packages' | 4926 | ······-·'"audit"·in·ansible_facts.packages' |
| 4927 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4928 | ······tags: | 4928 | ······tags: |
| 4929 | ······-·DISA-STIG-OL08-00-030063 | 4929 | ······-·DISA-STIG-OL08-00-030063 |
| 4930 | ······-·NIST-800-53-AU-3 | 4930 | ······-·NIST-800-53-AU-3 |
| 4931 | ······-·NIST-800-53-CM-6 | 4931 | ······-·NIST-800-53-CM-6 |
| 4932 | ······-·auditd_log_format | 4932 | ······-·auditd_log_format |
| 4933 | ······-·low_complexity | 4933 | ······-·low_complexity |
| 4934 | ······-·low_disruption | 4934 | ······-·low_disruption |
| Offset 4976, 16 lines modified | Offset 4976, 16 lines modified | ||
| 4976 | ········lineinfile: | 4976 | ········lineinfile: |
| 4977 | ··········path:·/etc/audit/auditd.conf | 4977 | ··········path:·/etc/audit/auditd.conf |
| 4978 | ··········create:·true | 4978 | ··········create:·true |
| 4979 | ··········regexp:·(?i)^\s*name_format\s*=\s* | 4979 | ··········regexp:·(?i)^\s*name_format\s*=\s* |
| 4980 | ··········line:·name_format·=·hostname | 4980 | ··········line:·name_format·=·hostname |
| 4981 | ··········state:·present | 4981 | ··········state:·present |
| 4982 | ······when: | 4982 | ······when: |
| 4983 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4984 | ······-·'"audit"·in·ansible_facts.packages' | 4983 | ······-·'"audit"·in·ansible_facts.packages' |
| 4984 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4985 | ······tags: | 4985 | ······tags: |
| 4986 | ······-·DISA-STIG-OL08-00-030062 | 4986 | ······-·DISA-STIG-OL08-00-030062 |
| 4987 | ······-·NIST-800-53-AU-3 | 4987 | ······-·NIST-800-53-AU-3 |
| 4988 | ······-·NIST-800-53-CM-6 | 4988 | ······-·NIST-800-53-CM-6 |
| 4989 | ······-·auditd_name_format | 4989 | ······-·auditd_name_format |
| 4990 | ······-·low_complexity | 4990 | ······-·low_complexity |
| 4991 | ······-·low_disruption | 4991 | ······-·low_disruption |
| Offset 5031, 16 lines modified | Offset 5031, 16 lines modified | ||
| 5031 | ········lineinfile: | 5031 | ········lineinfile: |
| 5032 | ··········path:·/etc/audit/auditd.conf | 5032 | ··········path:·/etc/audit/auditd.conf |
| 5033 | ··········create:·true | 5033 | ··········create:·true |
| 5034 | ··········regexp:·(?i)^\s*write_logs\s*=\s* | 5034 | ··········regexp:·(?i)^\s*write_logs\s*=\s* |
| 5035 | ··········line:·write_logs·=·yes | 5035 | ··········line:·write_logs·=·yes |
| 5036 | ··········state:·present | 5036 | ··········state:·present |
| 5037 | ······when: | 5037 | ······when: |
| 5038 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5039 | ······-·'"audit"·in·ansible_facts.packages' | 5038 | ······-·'"audit"·in·ansible_facts.packages' |
| 5039 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 5040 | ······tags: | 5040 | ······tags: |
| 5041 | ······-·NIST-800-53-CM-6 | 5041 | ······-·NIST-800-53-CM-6 |
| 5042 | ······-·auditd_write_logs | 5042 | ······-·auditd_write_logs |
| 5043 | ······-·low_complexity | 5043 | ······-·low_complexity |
| 5044 | ······-·low_disruption | 5044 | ······-·low_disruption |
| 5045 | ······-·medium_severity | 5045 | ······-·medium_severity |
| 5046 | ······-·no_reboot_needed | 5046 | ······-·no_reboot_needed |
| Offset 4699, 16 lines modified | Offset 4699, 16 lines modified | ||
| 4699 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 4699 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 4700 | ······find: | 4700 | ······find: |
| 4701 | ········paths:·/etc/audit/rules.d/ | 4701 | ········paths:·/etc/audit/rules.d/ |
| 4702 | ········patterns:·'*.rules' | 4702 | ········patterns:·'*.rules' |
| 4703 | ······register:·find_rules_d | 4703 | ······register:·find_rules_d |
| 4704 | ······when: | 4704 | ······when: |
| 4705 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4706 | ······-·'"audit"·in·ansible_facts.packages' | 4705 | ······-·'"audit"·in·ansible_facts.packages' |
| 4706 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4707 | ······tags: | 4707 | ······tags: |
| 4708 | ······-·CJIS-5.4.1.1 | 4708 | ······-·CJIS-5.4.1.1 |
| 4709 | ······-·DISA-STIG-OL08-00-030121 | 4709 | ······-·DISA-STIG-OL08-00-030121 |
| 4710 | ······-·NIST-800-171-3.3.1 | 4710 | ······-·NIST-800-171-3.3.1 |
| 4711 | ······-·NIST-800-171-3.4.3 | 4711 | ······-·NIST-800-171-3.4.3 |
| 4712 | ······-·NIST-800-53-AC-6(9) | 4712 | ······-·NIST-800-53-AC-6(9) |
| 4713 | ······-·NIST-800-53-CM-6(a) | 4713 | ······-·NIST-800-53-CM-6(a) |
| Offset 4724, 16 lines modified | Offset 4724, 16 lines modified | ||
| 4724 | ······lineinfile: | 4724 | ······lineinfile: |
| 4725 | ········path:·'{{·item·}}' | 4725 | ········path:·'{{·item·}}' |
| 4726 | ········regexp:·^\s*(?:-e)\s+.*$ | 4726 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 4727 | ········state:·absent | 4727 | ········state:·absent |
| 4728 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 4728 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 4729 | ········}}' | 4729 | ········}}' |
| 4730 | ······when: | 4730 | ······when: |
| 4731 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4732 | ······-·'"audit"·in·ansible_facts.packages' | 4731 | ······-·'"audit"·in·ansible_facts.packages' |
| 4732 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4733 | ······tags: | 4733 | ······tags: |
| 4734 | ······-·CJIS-5.4.1.1 | 4734 | ······-·CJIS-5.4.1.1 |
| 4735 | ······-·DISA-STIG-OL08-00-030121 | 4735 | ······-·DISA-STIG-OL08-00-030121 |
| 4736 | ······-·NIST-800-171-3.3.1 | 4736 | ······-·NIST-800-171-3.3.1 |
| 4737 | ······-·NIST-800-171-3.4.3 | 4737 | ······-·NIST-800-171-3.4.3 |
| 4738 | ······-·NIST-800-53-AC-6(9) | 4738 | ······-·NIST-800-53-AC-6(9) |
| 4739 | ······-·NIST-800-53-CM-6(a) | 4739 | ······-·NIST-800-53-CM-6(a) |
| Offset 4751, 16 lines modified | Offset 4751, 16 lines modified | ||
| 4751 | ········create:·true | 4751 | ········create:·true |
| 4752 | ········line:·-e·2 | 4752 | ········line:·-e·2 |
| 4753 | ········mode:·o-rwx | 4753 | ········mode:·o-rwx |
| 4754 | ······loop: | 4754 | ······loop: |
| 4755 | ······-·/etc/audit/audit.rules | 4755 | ······-·/etc/audit/audit.rules |
| 4756 | ······-·/etc/audit/rules.d/immutable.rules | 4756 | ······-·/etc/audit/rules.d/immutable.rules |
| 4757 | ······when: | 4757 | ······when: |
| 4758 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4759 | ······-·'"audit"·in·ansible_facts.packages' | 4758 | ······-·'"audit"·in·ansible_facts.packages' |
| 4759 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4760 | ······tags: | 4760 | ······tags: |
| 4761 | ······-·CJIS-5.4.1.1 | 4761 | ······-·CJIS-5.4.1.1 |
| 4762 | ······-·DISA-STIG-OL08-00-030121 | 4762 | ······-·DISA-STIG-OL08-00-030121 |
| 4763 | ······-·NIST-800-171-3.3.1 | 4763 | ······-·NIST-800-171-3.3.1 |
| 4764 | ······-·NIST-800-171-3.4.3 | 4764 | ······-·NIST-800-171-3.4.3 |
| 4765 | ······-·NIST-800-53-AC-6(9) | 4765 | ······-·NIST-800-53-AC-6(9) |
| 4766 | ······-·NIST-800-53-CM-6(a) | 4766 | ······-·NIST-800-53-CM-6(a) |
| Offset 4793, 16 lines modified | Offset 4793, 16 lines modified | ||
| 4793 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 4793 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 4794 | ······find: | 4794 | ······find: |
| 4795 | ········paths:·/etc/audit/rules.d | 4795 | ········paths:·/etc/audit/rules.d |
| 4796 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 4796 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 4797 | ········patterns:·'*.rules' | 4797 | ········patterns:·'*.rules' |
| 4798 | ······register:·find_existing_watch_rules_d | 4798 | ······register:·find_existing_watch_rules_d |
| 4799 | ······when: | 4799 | ······when: |
| 4800 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4801 | ······-·'"audit"·in·ansible_facts.packages' | 4800 | ······-·'"audit"·in·ansible_facts.packages' |
| 4801 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4802 | ······tags: | 4802 | ······tags: |
| 4803 | ······-·CJIS-5.4.1.1 | 4803 | ······-·CJIS-5.4.1.1 |
| 4804 | ······-·NIST-800-171-3.1.8 | 4804 | ······-·NIST-800-171-3.1.8 |
| 4805 | ······-·NIST-800-53-AU-12(c) | 4805 | ······-·NIST-800-53-AU-12(c) |
| 4806 | ······-·NIST-800-53-AU-2(d) | 4806 | ······-·NIST-800-53-AU-2(d) |
| 4807 | ······-·NIST-800-53-CM-6(a) | 4807 | ······-·NIST-800-53-CM-6(a) |
| 4808 | ······-·PCI-DSS-Req-10.5.5 | 4808 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 4816, 16 lines modified | Offset 4816, 16 lines modified | ||
| 4816 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 4816 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 4817 | ······find: | 4817 | ······find: |
| 4818 | ········paths:·/etc/audit/rules.d | 4818 | ········paths:·/etc/audit/rules.d |
| 4819 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 4819 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 4820 | ········patterns:·'*.rules' | 4820 | ········patterns:·'*.rules' |
| 4821 | ······register:·find_watch_key | 4821 | ······register:·find_watch_key |
| 4822 | ······when: | 4822 | ······when: |
| 4823 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4824 | ······-·'"audit"·in·ansible_facts.packages' | 4823 | ······-·'"audit"·in·ansible_facts.packages' |
| 4824 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4825 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 4825 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 4826 | ········==·0 | 4826 | ········==·0 |
| 4827 | ······tags: | 4827 | ······tags: |
| 4828 | ······-·CJIS-5.4.1.1 | 4828 | ······-·CJIS-5.4.1.1 |
| 4829 | ······-·NIST-800-171-3.1.8 | 4829 | ······-·NIST-800-171-3.1.8 |
| 4830 | ······-·NIST-800-53-AU-12(c) | 4830 | ······-·NIST-800-53-AU-12(c) |
| 4831 | ······-·NIST-800-53-AU-2(d) | 4831 | ······-·NIST-800-53-AU-2(d) |
| Offset 4839, 16 lines modified | Offset 4839, 16 lines modified | ||
| 4839 | ······-·restrict_strategy | 4839 | ······-·restrict_strategy |
| 4840 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 4840 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 4841 | ······set_fact: | 4841 | ······set_fact: |
| 4842 | ········all_files: | 4842 | ········all_files: |
| 4843 | ········-·/etc/audit/rules.d/MAC-policy.rules | 4843 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 4844 | ······when: | 4844 | ······when: |
| 4845 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4846 | ······-·'"audit"·in·ansible_facts.packages' | 4845 | ······-·'"audit"·in·ansible_facts.packages' |
| 4846 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4847 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 4847 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 4848 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 4848 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 4849 | ······tags: | 4849 | ······tags: |
| 4850 | ······-·CJIS-5.4.1.1 | 4850 | ······-·CJIS-5.4.1.1 |
| 4851 | ······-·NIST-800-171-3.1.8 | 4851 | ······-·NIST-800-171-3.1.8 |
| 4852 | ······-·NIST-800-53-AU-12(c) | 4852 | ······-·NIST-800-53-AU-12(c) |
| 4853 | ······-·NIST-800-53-AU-2(d) | 4853 | ······-·NIST-800-53-AU-2(d) |
| Offset 4862, 16 lines modified | Offset 4862, 16 lines modified | ||
| 4862 | ······-·restrict_strategy | 4862 | ······-·restrict_strategy |
| 4863 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 4863 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 4864 | ······set_fact: | 4864 | ······set_fact: |
| 4865 | ········all_files: | 4865 | ········all_files: |
| 4866 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 4866 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 4867 | ······when: | 4867 | ······when: |
| 4868 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4869 | ······-·'"audit"·in·ansible_facts.packages' | 4868 | ······-·'"audit"·in·ansible_facts.packages' |
| 4869 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 4870 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 4870 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 4871 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 4871 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 4872 | ······tags: | 4872 | ······tags: |
| 4873 | ······-·CJIS-5.4.1.1 | 4873 | ······-·CJIS-5.4.1.1 |
| 4874 | ······-·NIST-800-171-3.1.8 | 4874 | ······-·NIST-800-171-3.1.8 |
| 4875 | ······-·NIST-800-53-AU-12(c) | 4875 | ······-·NIST-800-53-AU-12(c) |
| 4876 | ······-·NIST-800-53-AU-2(d) | 4876 | ······-·NIST-800-53-AU-2(d) |
| Offset 4887, 16 lines modified | Offset 4887, 16 lines modified | ||
| 4887 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 4887 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 170169/175222 bytes (97.12%) of diff not shown. | |||
| Offset 708, 16 lines modified | Offset 708, 16 lines modified | ||
| 708 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ | 708 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/rules.d/ |
| 709 | ······find: | 709 | ······find: |
| 710 | ········paths:·/etc/audit/rules.d | 710 | ········paths:·/etc/audit/rules.d |
| 711 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 711 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 712 | ········patterns:·'*.rules' | 712 | ········patterns:·'*.rules' |
| 713 | ······register:·find_existing_watch_rules_d | 713 | ······register:·find_existing_watch_rules_d |
| 714 | ······when: | 714 | ······when: |
| 715 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 716 | ······-·'"audit"·in·ansible_facts.packages' | 715 | ······-·'"audit"·in·ansible_facts.packages' |
| 716 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 717 | ······tags: | 717 | ······tags: |
| 718 | ······-·CJIS-5.4.1.1 | 718 | ······-·CJIS-5.4.1.1 |
| 719 | ······-·NIST-800-171-3.1.8 | 719 | ······-·NIST-800-171-3.1.8 |
| 720 | ······-·NIST-800-53-AU-12(c) | 720 | ······-·NIST-800-53-AU-12(c) |
| 721 | ······-·NIST-800-53-AU-2(d) | 721 | ······-·NIST-800-53-AU-2(d) |
| 722 | ······-·NIST-800-53-CM-6(a) | 722 | ······-·NIST-800-53-CM-6(a) |
| 723 | ······-·PCI-DSS-Req-10.5.5 | 723 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 731, 16 lines modified | Offset 731, 16 lines modified | ||
| 731 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy | 731 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·MAC-policy |
| 732 | ······find: | 732 | ······find: |
| 733 | ········paths:·/etc/audit/rules.d | 733 | ········paths:·/etc/audit/rules.d |
| 734 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ | 734 | ········contains:·^.*(?:-F·key=|-k\s+)MAC-policy$ |
| 735 | ········patterns:·'*.rules' | 735 | ········patterns:·'*.rules' |
| 736 | ······register:·find_watch_key | 736 | ······register:·find_watch_key |
| 737 | ······when: | 737 | ······when: |
| 738 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 739 | ······-·'"audit"·in·ansible_facts.packages' | 738 | ······-·'"audit"·in·ansible_facts.packages' |
| 739 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 740 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 740 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 741 | ········==·0 | 741 | ········==·0 |
| 742 | ······tags: | 742 | ······tags: |
| 743 | ······-·CJIS-5.4.1.1 | 743 | ······-·CJIS-5.4.1.1 |
| 744 | ······-·NIST-800-171-3.1.8 | 744 | ······-·NIST-800-171-3.1.8 |
| 745 | ······-·NIST-800-53-AU-12(c) | 745 | ······-·NIST-800-53-AU-12(c) |
| 746 | ······-·NIST-800-53-AU-2(d) | 746 | ······-·NIST-800-53-AU-2(d) |
| Offset 754, 16 lines modified | Offset 754, 16 lines modified | ||
| 754 | ······-·restrict_strategy | 754 | ······-·restrict_strategy |
| 755 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule | 755 | ····-·name:·Use·/etc/audit/rules.d/MAC-policy.rules·as·the·recipient·for·the·rule |
| 756 | ······set_fact: | 756 | ······set_fact: |
| 757 | ········all_files: | 757 | ········all_files: |
| 758 | ········-·/etc/audit/rules.d/MAC-policy.rules | 758 | ········-·/etc/audit/rules.d/MAC-policy.rules |
| 759 | ······when: | 759 | ······when: |
| 760 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 761 | ······-·'"audit"·in·ansible_facts.packages' | 760 | ······-·'"audit"·in·ansible_facts.packages' |
| 761 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 762 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 762 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 763 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 763 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 764 | ······tags: | 764 | ······tags: |
| 765 | ······-·CJIS-5.4.1.1 | 765 | ······-·CJIS-5.4.1.1 |
| 766 | ······-·NIST-800-171-3.1.8 | 766 | ······-·NIST-800-171-3.1.8 |
| 767 | ······-·NIST-800-53-AU-12(c) | 767 | ······-·NIST-800-53-AU-12(c) |
| 768 | ······-·NIST-800-53-AU-2(d) | 768 | ······-·NIST-800-53-AU-2(d) |
| Offset 777, 16 lines modified | Offset 777, 16 lines modified | ||
| 777 | ······-·restrict_strategy | 777 | ······-·restrict_strategy |
| 778 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule | 778 | ····-·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 779 | ······set_fact: | 779 | ······set_fact: |
| 780 | ········all_files: | 780 | ········all_files: |
| 781 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 781 | ········-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 782 | ······when: | 782 | ······when: |
| 783 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 784 | ······-·'"audit"·in·ansible_facts.packages' | 783 | ······-·'"audit"·in·ansible_facts.packages' |
| 784 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 785 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 785 | ······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 786 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 | 786 | ········is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 787 | ······tags: | 787 | ······tags: |
| 788 | ······-·CJIS-5.4.1.1 | 788 | ······-·CJIS-5.4.1.1 |
| 789 | ······-·NIST-800-171-3.1.8 | 789 | ······-·NIST-800-171-3.1.8 |
| 790 | ······-·NIST-800-53-AU-12(c) | 790 | ······-·NIST-800-53-AU-12(c) |
| 791 | ······-·NIST-800-53-AU-2(d) | 791 | ······-·NIST-800-53-AU-2(d) |
| Offset 802, 16 lines modified | Offset 802, 16 lines modified | ||
| 802 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ | 802 | ····-·name:·Add·watch·rule·for·/etc/selinux/·in·/etc/audit/rules.d/ |
| 803 | ······lineinfile: | 803 | ······lineinfile: |
| 804 | ········path:·'{{·all_files[0]·}}' | 804 | ········path:·'{{·all_files[0]·}}' |
| 805 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy | 805 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy |
| 806 | ········create:·true | 806 | ········create:·true |
| 807 | ········mode:·'0640' | 807 | ········mode:·'0640' |
| 808 | ······when: | 808 | ······when: |
| 809 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 810 | ······-·'"audit"·in·ansible_facts.packages' | 809 | ······-·'"audit"·in·ansible_facts.packages' |
| 810 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 811 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 811 | ······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 812 | ········==·0 | 812 | ········==·0 |
| 813 | ······tags: | 813 | ······tags: |
| 814 | ······-·CJIS-5.4.1.1 | 814 | ······-·CJIS-5.4.1.1 |
| 815 | ······-·NIST-800-171-3.1.8 | 815 | ······-·NIST-800-171-3.1.8 |
| 816 | ······-·NIST-800-53-AU-12(c) | 816 | ······-·NIST-800-53-AU-12(c) |
| 817 | ······-·NIST-800-53-AU-2(d) | 817 | ······-·NIST-800-53-AU-2(d) |
| Offset 827, 16 lines modified | Offset 827, 16 lines modified | ||
| 827 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/audit.rules | 827 | ····-·name:·Check·if·watch·rule·for·/etc/selinux/·already·exists·in·/etc/audit/audit.rules |
| 828 | ······find: | 828 | ······find: |
| 829 | ········paths:·/etc/audit/ | 829 | ········paths:·/etc/audit/ |
| 830 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ | 830 | ········contains:·^\s*-w\s+/etc/selinux/\s+-p\s+wa(\s|$)+ |
| 831 | ········patterns:·audit.rules | 831 | ········patterns:·audit.rules |
| 832 | ······register:·find_existing_watch_audit_rules | 832 | ······register:·find_existing_watch_audit_rules |
| 833 | ······when: | 833 | ······when: |
| 834 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 835 | ······-·'"audit"·in·ansible_facts.packages' | 834 | ······-·'"audit"·in·ansible_facts.packages' |
| 835 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 836 | ······tags: | 836 | ······tags: |
| 837 | ······-·CJIS-5.4.1.1 | 837 | ······-·CJIS-5.4.1.1 |
| 838 | ······-·NIST-800-171-3.1.8 | 838 | ······-·NIST-800-171-3.1.8 |
| 839 | ······-·NIST-800-53-AU-12(c) | 839 | ······-·NIST-800-53-AU-12(c) |
| 840 | ······-·NIST-800-53-AU-2(d) | 840 | ······-·NIST-800-53-AU-2(d) |
| 841 | ······-·NIST-800-53-CM-6(a) | 841 | ······-·NIST-800-53-CM-6(a) |
| 842 | ······-·PCI-DSS-Req-10.5.5 | 842 | ······-·PCI-DSS-Req-10.5.5 |
| Offset 851, 16 lines modified | Offset 851, 16 lines modified | ||
| 851 | ······lineinfile: | 851 | ······lineinfile: |
| 852 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy | 852 | ········line:·-w·/etc/selinux/·-p·wa·-k·MAC-policy |
| 853 | ········state:·present | 853 | ········state:·present |
| 854 | ········dest:·/etc/audit/audit.rules | 854 | ········dest:·/etc/audit/audit.rules |
| 855 | ········create:·true | 855 | ········create:·true |
| 856 | ········mode:·'0640' | 856 | ········mode:·'0640' |
| 857 | ······when: | 857 | ······when: |
| 858 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 859 | ······-·'"audit"·in·ansible_facts.packages' | 858 | ······-·'"audit"·in·ansible_facts.packages' |
| 859 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 860 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched | 860 | ······-·find_existing_watch_audit_rules.matched·is·defined·and·find_existing_watch_audit_rules.matched |
| 861 | ········==·0 | 861 | ········==·0 |
| 862 | ······tags: | 862 | ······tags: |
| 863 | ······-·CJIS-5.4.1.1 | 863 | ······-·CJIS-5.4.1.1 |
| 864 | ······-·NIST-800-171-3.1.8 | 864 | ······-·NIST-800-171-3.1.8 |
| 865 | ······-·NIST-800-53-AU-12(c) | 865 | ······-·NIST-800-53-AU-12(c) |
| 866 | ······-·NIST-800-53-AU-2(d) | 866 | ······-·NIST-800-53-AU-2(d) |
| Offset 893, 16 lines modified | Offset 893, 16 lines modified | ||
| 893 | ······-·reboot_required | 893 | ······-·reboot_required |
| Max diff block lines reached; 95475/100691 bytes (94.82%) of diff not shown. | |||
| Offset 12670, 16 lines modified | Offset 12670, 16 lines modified | ||
| 12670 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 12670 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 12671 | ······find: | 12671 | ······find: |
| 12672 | ········paths:·/etc/audit/rules.d/ | 12672 | ········paths:·/etc/audit/rules.d/ |
| 12673 | ········patterns:·'*.rules' | 12673 | ········patterns:·'*.rules' |
| 12674 | ······register:·find_rules_d | 12674 | ······register:·find_rules_d |
| 12675 | ······when: | 12675 | ······when: |
| 12676 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12677 | ······-·'"audit"·in·ansible_facts.packages' | 12676 | ······-·'"audit"·in·ansible_facts.packages' |
| 12677 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12678 | ······tags: | 12678 | ······tags: |
| 12679 | ······-·CJIS-5.4.1.1 | 12679 | ······-·CJIS-5.4.1.1 |
| 12680 | ······-·DISA-STIG-OL08-00-030121 | 12680 | ······-·DISA-STIG-OL08-00-030121 |
| 12681 | ······-·NIST-800-171-3.3.1 | 12681 | ······-·NIST-800-171-3.3.1 |
| 12682 | ······-·NIST-800-171-3.4.3 | 12682 | ······-·NIST-800-171-3.4.3 |
| 12683 | ······-·NIST-800-53-AC-6(9) | 12683 | ······-·NIST-800-53-AC-6(9) |
| 12684 | ······-·NIST-800-53-CM-6(a) | 12684 | ······-·NIST-800-53-CM-6(a) |
| Offset 12695, 16 lines modified | Offset 12695, 16 lines modified | ||
| 12695 | ······lineinfile: | 12695 | ······lineinfile: |
| 12696 | ········path:·'{{·item·}}' | 12696 | ········path:·'{{·item·}}' |
| 12697 | ········regexp:·^\s*(?:-e)\s+.*$ | 12697 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 12698 | ········state:·absent | 12698 | ········state:·absent |
| 12699 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 12699 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 12700 | ········}}' | 12700 | ········}}' |
| 12701 | ······when: | 12701 | ······when: |
| 12702 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12703 | ······-·'"audit"·in·ansible_facts.packages' | 12702 | ······-·'"audit"·in·ansible_facts.packages' |
| 12703 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12704 | ······tags: | 12704 | ······tags: |
| 12705 | ······-·CJIS-5.4.1.1 | 12705 | ······-·CJIS-5.4.1.1 |
| 12706 | ······-·DISA-STIG-OL08-00-030121 | 12706 | ······-·DISA-STIG-OL08-00-030121 |
| 12707 | ······-·NIST-800-171-3.3.1 | 12707 | ······-·NIST-800-171-3.3.1 |
| 12708 | ······-·NIST-800-171-3.4.3 | 12708 | ······-·NIST-800-171-3.4.3 |
| 12709 | ······-·NIST-800-53-AC-6(9) | 12709 | ······-·NIST-800-53-AC-6(9) |
| 12710 | ······-·NIST-800-53-CM-6(a) | 12710 | ······-·NIST-800-53-CM-6(a) |
| Offset 12722, 16 lines modified | Offset 12722, 16 lines modified | ||
| 12722 | ········create:·true | 12722 | ········create:·true |
| 12723 | ········line:·-e·2 | 12723 | ········line:·-e·2 |
| 12724 | ········mode:·o-rwx | 12724 | ········mode:·o-rwx |
| 12725 | ······loop: | 12725 | ······loop: |
| 12726 | ······-·/etc/audit/audit.rules | 12726 | ······-·/etc/audit/audit.rules |
| 12727 | ······-·/etc/audit/rules.d/immutable.rules | 12727 | ······-·/etc/audit/rules.d/immutable.rules |
| 12728 | ······when: | 12728 | ······when: |
| 12729 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12730 | ······-·'"audit"·in·ansible_facts.packages' | 12729 | ······-·'"audit"·in·ansible_facts.packages' |
| 12730 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12731 | ······tags: | 12731 | ······tags: |
| 12732 | ······-·CJIS-5.4.1.1 | 12732 | ······-·CJIS-5.4.1.1 |
| 12733 | ······-·DISA-STIG-OL08-00-030121 | 12733 | ······-·DISA-STIG-OL08-00-030121 |
| 12734 | ······-·NIST-800-171-3.3.1 | 12734 | ······-·NIST-800-171-3.3.1 |
| 12735 | ······-·NIST-800-171-3.4.3 | 12735 | ······-·NIST-800-171-3.4.3 |
| 12736 | ······-·NIST-800-53-AC-6(9) | 12736 | ······-·NIST-800-53-AC-6(9) |
| 12737 | ······-·NIST-800-53-CM-6(a) | 12737 | ······-·NIST-800-53-CM-6(a) |
| Offset 12763, 16 lines modified | Offset 12763, 16 lines modified | ||
| 12763 | ······-·reboot_required | 12763 | ······-·reboot_required |
| 12764 | ······-·restrict_strategy | 12764 | ······-·restrict_strategy |
| 12765 | ····-·name:·Set·architecture·for·audit·mount·tasks | 12765 | ····-·name:·Set·architecture·for·audit·mount·tasks |
| 12766 | ······set_fact: | 12766 | ······set_fact: |
| 12767 | ········audit_arch:·b64 | 12767 | ········audit_arch:·b64 |
| 12768 | ······when: | 12768 | ······when: |
| 12769 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12770 | ······-·'"audit"·in·ansible_facts.packages' | 12769 | ······-·'"audit"·in·ansible_facts.packages' |
| 12770 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12771 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 12771 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 12772 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 12772 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 12773 | ······tags: | 12773 | ······tags: |
| 12774 | ······-·CJIS-5.4.1.1 | 12774 | ······-·CJIS-5.4.1.1 |
| 12775 | ······-·DISA-STIG-OL08-00-030302 | 12775 | ······-·DISA-STIG-OL08-00-030302 |
| 12776 | ······-·NIST-800-171-3.1.7 | 12776 | ······-·NIST-800-171-3.1.7 |
| 12777 | ······-·NIST-800-53-AC-6(9) | 12777 | ······-·NIST-800-53-AC-6(9) |
| Offset 12904, 16 lines modified | Offset 12904, 16 lines modified | ||
| 12904 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 12904 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 12905 | ············-F·auid!=unset·-F·key=perm_mod | 12905 | ············-F·auid!=unset·-F·key=perm_mod |
| 12906 | ··········create:·true | 12906 | ··········create:·true |
| 12907 | ··········mode:·o-rwx | 12907 | ··········mode:·o-rwx |
| 12908 | ··········state:·present | 12908 | ··········state:·present |
| 12909 | ········when:·syscalls_found·|·length·==·0 | 12909 | ········when:·syscalls_found·|·length·==·0 |
| 12910 | ······when: | 12910 | ······when: |
| 12911 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12912 | ······-·'"audit"·in·ansible_facts.packages' | 12911 | ······-·'"audit"·in·ansible_facts.packages' |
| 12912 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12913 | ······tags: | 12913 | ······tags: |
| 12914 | ······-·CJIS-5.4.1.1 | 12914 | ······-·CJIS-5.4.1.1 |
| 12915 | ······-·DISA-STIG-OL08-00-030302 | 12915 | ······-·DISA-STIG-OL08-00-030302 |
| 12916 | ······-·NIST-800-171-3.1.7 | 12916 | ······-·NIST-800-171-3.1.7 |
| 12917 | ······-·NIST-800-53-AC-6(9) | 12917 | ······-·NIST-800-53-AC-6(9) |
| 12918 | ······-·NIST-800-53-AU-12(c) | 12918 | ······-·NIST-800-53-AU-12(c) |
| 12919 | ······-·NIST-800-53-AU-2(d) | 12919 | ······-·NIST-800-53-AU-2(d) |
| Offset 13043, 16 lines modified | Offset 13043, 16 lines modified | ||
| 13043 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 13043 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 13044 | ············-F·auid!=unset·-F·key=perm_mod | 13044 | ············-F·auid!=unset·-F·key=perm_mod |
| 13045 | ··········create:·true | 13045 | ··········create:·true |
| 13046 | ··········mode:·o-rwx | 13046 | ··········mode:·o-rwx |
| 13047 | ··········state:·present | 13047 | ··········state:·present |
| 13048 | ········when:·syscalls_found·|·length·==·0 | 13048 | ········when:·syscalls_found·|·length·==·0 |
| 13049 | ······when: | 13049 | ······when: |
| 13050 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13051 | ······-·'"audit"·in·ansible_facts.packages' | 13050 | ······-·'"audit"·in·ansible_facts.packages' |
| 13051 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13052 | ······-·audit_arch·==·"b64" | 13052 | ······-·audit_arch·==·"b64" |
| 13053 | ······tags: | 13053 | ······tags: |
| 13054 | ······-·CJIS-5.4.1.1 | 13054 | ······-·CJIS-5.4.1.1 |
| 13055 | ······-·DISA-STIG-OL08-00-030302 | 13055 | ······-·DISA-STIG-OL08-00-030302 |
| 13056 | ······-·NIST-800-171-3.1.7 | 13056 | ······-·NIST-800-171-3.1.7 |
| 13057 | ······-·NIST-800-53-AC-6(9) | 13057 | ······-·NIST-800-53-AC-6(9) |
| 13058 | ······-·NIST-800-53-AU-12(c) | 13058 | ······-·NIST-800-53-AU-12(c) |
| Offset 13082, 16 lines modified | Offset 13082, 16 lines modified | ||
| 13082 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 13082 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 13083 | ······find: | 13083 | ······find: |
| 13084 | ········paths:·/etc/audit/rules.d | 13084 | ········paths:·/etc/audit/rules.d |
| 13085 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 13085 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 13086 | ········patterns:·'*.rules' | 13086 | ········patterns:·'*.rules' |
| 13087 | ······register:·find_existing_watch_rules_d | 13087 | ······register:·find_existing_watch_rules_d |
| 13088 | ······when: | 13088 | ······when: |
| 13089 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13090 | ······-·'"audit"·in·ansible_facts.packages' | 13089 | ······-·'"audit"·in·ansible_facts.packages' |
| 13090 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13091 | ······tags: | 13091 | ······tags: |
| 13092 | ······-·DISA-STIG-OL08-00-030171 | 13092 | ······-·DISA-STIG-OL08-00-030171 |
| 13093 | ······-·audit_rules_sudoers | 13093 | ······-·audit_rules_sudoers |
| 13094 | ······-·low_complexity | 13094 | ······-·low_complexity |
| 13095 | ······-·low_disruption | 13095 | ······-·low_disruption |
| 13096 | ······-·medium_severity | 13096 | ······-·medium_severity |
| 13097 | ······-·no_reboot_needed | 13097 | ······-·no_reboot_needed |
| Offset 13100, 16 lines modified | Offset 13100, 16 lines modified | ||
| 13100 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 13100 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| Max diff block lines reached; 143731/148655 bytes (96.69%) of diff not shown. | |||
| Offset 12675, 16 lines modified | Offset 12675, 16 lines modified | ||
| 12675 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 12675 | ····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 12676 | ······find: | 12676 | ······find: |
| 12677 | ········paths:·/etc/audit/rules.d/ | 12677 | ········paths:·/etc/audit/rules.d/ |
| 12678 | ········patterns:·'*.rules' | 12678 | ········patterns:·'*.rules' |
| 12679 | ······register:·find_rules_d | 12679 | ······register:·find_rules_d |
| 12680 | ······when: | 12680 | ······when: |
| 12681 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12682 | ······-·'"audit"·in·ansible_facts.packages' | 12681 | ······-·'"audit"·in·ansible_facts.packages' |
| 12682 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12683 | ······tags: | 12683 | ······tags: |
| 12684 | ······-·CJIS-5.4.1.1 | 12684 | ······-·CJIS-5.4.1.1 |
| 12685 | ······-·DISA-STIG-OL08-00-030121 | 12685 | ······-·DISA-STIG-OL08-00-030121 |
| 12686 | ······-·NIST-800-171-3.3.1 | 12686 | ······-·NIST-800-171-3.3.1 |
| 12687 | ······-·NIST-800-171-3.4.3 | 12687 | ······-·NIST-800-171-3.4.3 |
| 12688 | ······-·NIST-800-53-AC-6(9) | 12688 | ······-·NIST-800-53-AC-6(9) |
| 12689 | ······-·NIST-800-53-CM-6(a) | 12689 | ······-·NIST-800-53-CM-6(a) |
| Offset 12700, 16 lines modified | Offset 12700, 16 lines modified | ||
| 12700 | ······lineinfile: | 12700 | ······lineinfile: |
| 12701 | ········path:·'{{·item·}}' | 12701 | ········path:·'{{·item·}}' |
| 12702 | ········regexp:·^\s*(?:-e)\s+.*$ | 12702 | ········regexp:·^\s*(?:-e)\s+.*$ |
| 12703 | ········state:·absent | 12703 | ········state:·absent |
| 12704 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 12704 | ······loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 12705 | ········}}' | 12705 | ········}}' |
| 12706 | ······when: | 12706 | ······when: |
| 12707 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12708 | ······-·'"audit"·in·ansible_facts.packages' | 12707 | ······-·'"audit"·in·ansible_facts.packages' |
| 12708 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12709 | ······tags: | 12709 | ······tags: |
| 12710 | ······-·CJIS-5.4.1.1 | 12710 | ······-·CJIS-5.4.1.1 |
| 12711 | ······-·DISA-STIG-OL08-00-030121 | 12711 | ······-·DISA-STIG-OL08-00-030121 |
| 12712 | ······-·NIST-800-171-3.3.1 | 12712 | ······-·NIST-800-171-3.3.1 |
| 12713 | ······-·NIST-800-171-3.4.3 | 12713 | ······-·NIST-800-171-3.4.3 |
| 12714 | ······-·NIST-800-53-AC-6(9) | 12714 | ······-·NIST-800-53-AC-6(9) |
| 12715 | ······-·NIST-800-53-CM-6(a) | 12715 | ······-·NIST-800-53-CM-6(a) |
| Offset 12727, 16 lines modified | Offset 12727, 16 lines modified | ||
| 12727 | ········create:·true | 12727 | ········create:·true |
| 12728 | ········line:·-e·2 | 12728 | ········line:·-e·2 |
| 12729 | ········mode:·o-rwx | 12729 | ········mode:·o-rwx |
| 12730 | ······loop: | 12730 | ······loop: |
| 12731 | ······-·/etc/audit/audit.rules | 12731 | ······-·/etc/audit/audit.rules |
| 12732 | ······-·/etc/audit/rules.d/immutable.rules | 12732 | ······-·/etc/audit/rules.d/immutable.rules |
| 12733 | ······when: | 12733 | ······when: |
| 12734 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12735 | ······-·'"audit"·in·ansible_facts.packages' | 12734 | ······-·'"audit"·in·ansible_facts.packages' |
| 12735 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12736 | ······tags: | 12736 | ······tags: |
| 12737 | ······-·CJIS-5.4.1.1 | 12737 | ······-·CJIS-5.4.1.1 |
| 12738 | ······-·DISA-STIG-OL08-00-030121 | 12738 | ······-·DISA-STIG-OL08-00-030121 |
| 12739 | ······-·NIST-800-171-3.3.1 | 12739 | ······-·NIST-800-171-3.3.1 |
| 12740 | ······-·NIST-800-171-3.4.3 | 12740 | ······-·NIST-800-171-3.4.3 |
| 12741 | ······-·NIST-800-53-AC-6(9) | 12741 | ······-·NIST-800-53-AC-6(9) |
| 12742 | ······-·NIST-800-53-CM-6(a) | 12742 | ······-·NIST-800-53-CM-6(a) |
| Offset 12768, 16 lines modified | Offset 12768, 16 lines modified | ||
| 12768 | ······-·reboot_required | 12768 | ······-·reboot_required |
| 12769 | ······-·restrict_strategy | 12769 | ······-·restrict_strategy |
| 12770 | ····-·name:·Set·architecture·for·audit·mount·tasks | 12770 | ····-·name:·Set·architecture·for·audit·mount·tasks |
| 12771 | ······set_fact: | 12771 | ······set_fact: |
| 12772 | ········audit_arch:·b64 | 12772 | ········audit_arch:·b64 |
| 12773 | ······when: | 12773 | ······when: |
| 12774 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12775 | ······-·'"audit"·in·ansible_facts.packages' | 12774 | ······-·'"audit"·in·ansible_facts.packages' |
| 12775 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12776 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 12776 | ······-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 12777 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 12777 | ········==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 12778 | ······tags: | 12778 | ······tags: |
| 12779 | ······-·CJIS-5.4.1.1 | 12779 | ······-·CJIS-5.4.1.1 |
| 12780 | ······-·DISA-STIG-OL08-00-030302 | 12780 | ······-·DISA-STIG-OL08-00-030302 |
| 12781 | ······-·NIST-800-171-3.1.7 | 12781 | ······-·NIST-800-171-3.1.7 |
| 12782 | ······-·NIST-800-53-AC-6(9) | 12782 | ······-·NIST-800-53-AC-6(9) |
| Offset 12909, 16 lines modified | Offset 12909, 16 lines modified | ||
| 12909 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 12909 | ··········line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 12910 | ············-F·auid!=unset·-F·key=perm_mod | 12910 | ············-F·auid!=unset·-F·key=perm_mod |
| 12911 | ··········create:·true | 12911 | ··········create:·true |
| 12912 | ··········mode:·o-rwx | 12912 | ··········mode:·o-rwx |
| 12913 | ··········state:·present | 12913 | ··········state:·present |
| 12914 | ········when:·syscalls_found·|·length·==·0 | 12914 | ········when:·syscalls_found·|·length·==·0 |
| 12915 | ······when: | 12915 | ······when: |
| 12916 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12917 | ······-·'"audit"·in·ansible_facts.packages' | 12916 | ······-·'"audit"·in·ansible_facts.packages' |
| 12917 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12918 | ······tags: | 12918 | ······tags: |
| 12919 | ······-·CJIS-5.4.1.1 | 12919 | ······-·CJIS-5.4.1.1 |
| 12920 | ······-·DISA-STIG-OL08-00-030302 | 12920 | ······-·DISA-STIG-OL08-00-030302 |
| 12921 | ······-·NIST-800-171-3.1.7 | 12921 | ······-·NIST-800-171-3.1.7 |
| 12922 | ······-·NIST-800-53-AC-6(9) | 12922 | ······-·NIST-800-53-AC-6(9) |
| 12923 | ······-·NIST-800-53-AU-12(c) | 12923 | ······-·NIST-800-53-AU-12(c) |
| 12924 | ······-·NIST-800-53-AU-2(d) | 12924 | ······-·NIST-800-53-AU-2(d) |
| Offset 13048, 16 lines modified | Offset 13048, 16 lines modified | ||
| 13048 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 | 13048 | ··········line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·auid>=1000 |
| 13049 | ············-F·auid!=unset·-F·key=perm_mod | 13049 | ············-F·auid!=unset·-F·key=perm_mod |
| 13050 | ··········create:·true | 13050 | ··········create:·true |
| 13051 | ··········mode:·o-rwx | 13051 | ··········mode:·o-rwx |
| 13052 | ··········state:·present | 13052 | ··········state:·present |
| 13053 | ········when:·syscalls_found·|·length·==·0 | 13053 | ········when:·syscalls_found·|·length·==·0 |
| 13054 | ······when: | 13054 | ······when: |
| 13055 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13056 | ······-·'"audit"·in·ansible_facts.packages' | 13055 | ······-·'"audit"·in·ansible_facts.packages' |
| 13056 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13057 | ······-·audit_arch·==·"b64" | 13057 | ······-·audit_arch·==·"b64" |
| 13058 | ······tags: | 13058 | ······tags: |
| 13059 | ······-·CJIS-5.4.1.1 | 13059 | ······-·CJIS-5.4.1.1 |
| 13060 | ······-·DISA-STIG-OL08-00-030302 | 13060 | ······-·DISA-STIG-OL08-00-030302 |
| 13061 | ······-·NIST-800-171-3.1.7 | 13061 | ······-·NIST-800-171-3.1.7 |
| 13062 | ······-·NIST-800-53-AC-6(9) | 13062 | ······-·NIST-800-53-AC-6(9) |
| 13063 | ······-·NIST-800-53-AU-12(c) | 13063 | ······-·NIST-800-53-AU-12(c) |
| Offset 13087, 16 lines modified | Offset 13087, 16 lines modified | ||
| 13087 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 13087 | ····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 13088 | ······find: | 13088 | ······find: |
| 13089 | ········paths:·/etc/audit/rules.d | 13089 | ········paths:·/etc/audit/rules.d |
| 13090 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 13090 | ········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 13091 | ········patterns:·'*.rules' | 13091 | ········patterns:·'*.rules' |
| 13092 | ······register:·find_existing_watch_rules_d | 13092 | ······register:·find_existing_watch_rules_d |
| 13093 | ······when: | 13093 | ······when: |
| 13094 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13095 | ······-·'"audit"·in·ansible_facts.packages' | 13094 | ······-·'"audit"·in·ansible_facts.packages' |
| 13095 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 13096 | ······tags: | 13096 | ······tags: |
| 13097 | ······-·DISA-STIG-OL08-00-030171 | 13097 | ······-·DISA-STIG-OL08-00-030171 |
| 13098 | ······-·audit_rules_sudoers | 13098 | ······-·audit_rules_sudoers |
| 13099 | ······-·low_complexity | 13099 | ······-·low_complexity |
| 13100 | ······-·low_disruption | 13100 | ······-·low_disruption |
| 13101 | ······-·medium_severity | 13101 | ······-·medium_severity |
| 13102 | ······-·no_reboot_needed | 13102 | ······-·no_reboot_needed |
| Offset 13105, 16 lines modified | Offset 13105, 16 lines modified | ||
| 13105 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 13105 | ····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| Max diff block lines reached; 143731/148655 bytes (96.69%) of diff not shown. | |||
| Offset 32428, 16 lines modified | Offset 32428, 16 lines modified | ||
| 32428 | ········lineinfile: | 32428 | ········lineinfile: |
| 32429 | ··········path:·/etc/postfix/main.cf | 32429 | ··········path:·/etc/postfix/main.cf |
| 32430 | ··········create:·true | 32430 | ··········create:·true |
| 32431 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 32431 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 32432 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 32432 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 32433 | ··········state:·present | 32433 | ··········state:·present |
| 32434 | ······when: | 32434 | ······when: |
| 32435 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 32436 | ······-·'"postfix"·in·ansible_facts.packages' | 32435 | ······-·'"postfix"·in·ansible_facts.packages' |
| 32436 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 32437 | ······tags: | 32437 | ······tags: |
| 32438 | ······-·low_complexity | 32438 | ······-·low_complexity |
| 32439 | ······-·low_disruption | 32439 | ······-·low_disruption |
| 32440 | ······-·medium_severity | 32440 | ······-·medium_severity |
| 32441 | ······-·no_reboot_needed | 32441 | ······-·no_reboot_needed |
| 32442 | ······-·postfix_prevent_unrestricted_relay | 32442 | ······-·postfix_prevent_unrestricted_relay |
| 32443 | ······-·restrict_strategy | 32443 | ······-·restrict_strategy |
| Offset 32433, 16 lines modified | Offset 32433, 16 lines modified | ||
| 32433 | ········lineinfile: | 32433 | ········lineinfile: |
| 32434 | ··········path:·/etc/postfix/main.cf | 32434 | ··········path:·/etc/postfix/main.cf |
| 32435 | ··········create:·true | 32435 | ··········create:·true |
| 32436 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 32436 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 32437 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 32437 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 32438 | ··········state:·present | 32438 | ··········state:·present |
| 32439 | ······when: | 32439 | ······when: |
| 32440 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 32441 | ······-·'"postfix"·in·ansible_facts.packages' | 32440 | ······-·'"postfix"·in·ansible_facts.packages' |
| 32441 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 32442 | ······tags: | 32442 | ······tags: |
| 32443 | ······-·low_complexity | 32443 | ······-·low_complexity |
| 32444 | ······-·low_disruption | 32444 | ······-·low_disruption |
| 32445 | ······-·medium_severity | 32445 | ······-·medium_severity |
| 32446 | ······-·no_reboot_needed | 32446 | ······-·no_reboot_needed |
| 32447 | ······-·postfix_prevent_unrestricted_relay | 32447 | ······-·postfix_prevent_unrestricted_relay |
| 32448 | ······-·restrict_strategy | 32448 | ······-·restrict_strategy |
| Offset 19209, 16 lines modified | Offset 19209, 16 lines modified | ||
| 19209 | ······-·no_reboot_needed | 19209 | ······-·no_reboot_needed |
| 19210 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 19210 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 19211 | ······stat: | 19211 | ······stat: |
| 19212 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19212 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19213 | ······register:·file_exists | 19213 | ······register:·file_exists |
| 19214 | ······when: | 19214 | ······when: |
| 19215 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19216 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19215 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19216 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19217 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19217 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19218 | ······tags: | 19218 | ······tags: |
| 19219 | ······-·CCE-83430-9 | 19219 | ······-·CCE-83430-9 |
| 19220 | ······-·CJIS-5.5.2.2 | 19220 | ······-·CJIS-5.5.2.2 |
| 19221 | ······-·NIST-800-171-3.4.5 | 19221 | ······-·NIST-800-171-3.4.5 |
| 19222 | ······-·NIST-800-53-AC-6(1) | 19222 | ······-·NIST-800-53-AC-6(1) |
| 19223 | ······-·NIST-800-53-CM-6(a) | 19223 | ······-·NIST-800-53-CM-6(a) |
| Offset 19231, 16 lines modified | Offset 19231, 16 lines modified | ||
| 19231 | ······-·no_reboot_needed | 19231 | ······-·no_reboot_needed |
| 19232 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 19232 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 19233 | ······file: | 19233 | ······file: |
| 19234 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19234 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19235 | ········group:·'0' | 19235 | ········group:·'0' |
| 19236 | ······when: | 19236 | ······when: |
| 19237 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19238 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19237 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19238 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 19240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 19241 | ······tags: | 19241 | ······tags: |
| 19242 | ······-·CCE-83430-9 | 19242 | ······-·CCE-83430-9 |
| 19243 | ······-·CJIS-5.5.2.2 | 19243 | ······-·CJIS-5.5.2.2 |
| 19244 | ······-·NIST-800-171-3.4.5 | 19244 | ······-·NIST-800-171-3.4.5 |
| 19245 | ······-·NIST-800-53-AC-6(1) | 19245 | ······-·NIST-800-53-AC-6(1) |
| Offset 19272, 16 lines modified | Offset 19272, 16 lines modified | ||
| 19272 | ······-·no_reboot_needed | 19272 | ······-·no_reboot_needed |
| 19273 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 19273 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 19274 | ······stat: | 19274 | ······stat: |
| 19275 | ········path:·/boot/efi/EFI/redhat/user.cfg | 19275 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 19276 | ······register:·file_exists | 19276 | ······register:·file_exists |
| 19277 | ······when: | 19277 | ······when: |
| 19278 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19279 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19278 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19279 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19280 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19280 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19281 | ······tags: | 19281 | ······tags: |
| 19282 | ······-·CCE-86011-4 | 19282 | ······-·CCE-86011-4 |
| 19283 | ······-·CJIS-5.5.2.2 | 19283 | ······-·CJIS-5.5.2.2 |
| 19284 | ······-·NIST-800-171-3.4.5 | 19284 | ······-·NIST-800-171-3.4.5 |
| 19285 | ······-·NIST-800-53-AC-6(1) | 19285 | ······-·NIST-800-53-AC-6(1) |
| 19286 | ······-·NIST-800-53-CM-6(a) | 19286 | ······-·NIST-800-53-CM-6(a) |
| Offset 19294, 16 lines modified | Offset 19294, 16 lines modified | ||
| 19294 | ······-·no_reboot_needed | 19294 | ······-·no_reboot_needed |
| 19295 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 19295 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 19296 | ······file: | 19296 | ······file: |
| 19297 | ········path:·/boot/efi/EFI/redhat/user.cfg | 19297 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 19298 | ········group:·'0' | 19298 | ········group:·'0' |
| 19299 | ······when: | 19299 | ······when: |
| 19300 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19301 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19300 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19301 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19302 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19302 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19303 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 19303 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 19304 | ······tags: | 19304 | ······tags: |
| 19305 | ······-·CCE-86011-4 | 19305 | ······-·CCE-86011-4 |
| 19306 | ······-·CJIS-5.5.2.2 | 19306 | ······-·CJIS-5.5.2.2 |
| 19307 | ······-·NIST-800-171-3.4.5 | 19307 | ······-·NIST-800-171-3.4.5 |
| 19308 | ······-·NIST-800-53-AC-6(1) | 19308 | ······-·NIST-800-53-AC-6(1) |
| Offset 19335, 16 lines modified | Offset 19335, 16 lines modified | ||
| 19335 | ······-·no_reboot_needed | 19335 | ······-·no_reboot_needed |
| 19336 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 19336 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 19337 | ······stat: | 19337 | ······stat: |
| 19338 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19338 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19339 | ······register:·file_exists | 19339 | ······register:·file_exists |
| 19340 | ······when: | 19340 | ······when: |
| 19341 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19342 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19341 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19342 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19344 | ······tags: | 19344 | ······tags: |
| 19345 | ······-·CCE-83429-1 | 19345 | ······-·CCE-83429-1 |
| 19346 | ······-·CJIS-5.5.2.2 | 19346 | ······-·CJIS-5.5.2.2 |
| 19347 | ······-·NIST-800-171-3.4.5 | 19347 | ······-·NIST-800-171-3.4.5 |
| 19348 | ······-·NIST-800-53-AC-6(1) | 19348 | ······-·NIST-800-53-AC-6(1) |
| 19349 | ······-·NIST-800-53-CM-6(a) | 19349 | ······-·NIST-800-53-CM-6(a) |
| Offset 19357, 16 lines modified | Offset 19357, 16 lines modified | ||
| 19357 | ······-·no_reboot_needed | 19357 | ······-·no_reboot_needed |
| 19358 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 19358 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 19359 | ······file: | 19359 | ······file: |
| 19360 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19360 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19361 | ········owner:·'0' | 19361 | ········owner:·'0' |
| 19362 | ······when: | 19362 | ······when: |
| 19363 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19364 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19363 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19364 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19365 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19365 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19366 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 19366 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 19367 | ······tags: | 19367 | ······tags: |
| 19368 | ······-·CCE-83429-1 | 19368 | ······-·CCE-83429-1 |
| 19369 | ······-·CJIS-5.5.2.2 | 19369 | ······-·CJIS-5.5.2.2 |
| 19370 | ······-·NIST-800-171-3.4.5 | 19370 | ······-·NIST-800-171-3.4.5 |
| 19371 | ······-·NIST-800-53-AC-6(1) | 19371 | ······-·NIST-800-53-AC-6(1) |
| Offset 19398, 16 lines modified | Offset 19398, 16 lines modified | ||
| 19398 | ······-·no_reboot_needed | 19398 | ······-·no_reboot_needed |
| 19399 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 19399 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 19400 | ······stat: | 19400 | ······stat: |
| 19401 | ········path:·/boot/efi/EFI/redhat/user.cfg | 19401 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 19402 | ······register:·file_exists | 19402 | ······register:·file_exists |
| 19403 | ······when: | 19403 | ······when: |
| 19404 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19405 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19404 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19405 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19406 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19406 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19407 | ······tags: | 19407 | ······tags: |
| 19408 | ······-·CCE-86019-7 | 19408 | ······-·CCE-86019-7 |
| 19409 | ······-·CJIS-5.5.2.2 | 19409 | ······-·CJIS-5.5.2.2 |
| 19410 | ······-·NIST-800-171-3.4.5 | 19410 | ······-·NIST-800-171-3.4.5 |
| 19411 | ······-·NIST-800-53-AC-6(1) | 19411 | ······-·NIST-800-53-AC-6(1) |
| 19412 | ······-·NIST-800-53-CM-6(a) | 19412 | ······-·NIST-800-53-CM-6(a) |
| Offset 19420, 16 lines modified | Offset 19420, 16 lines modified | ||
| 19420 | ······-·no_reboot_needed | 19420 | ······-·no_reboot_needed |
| Max diff block lines reached; 3375/8076 bytes (41.79%) of diff not shown. | |||
| Offset 3252, 16 lines modified | Offset 3252, 16 lines modified | ||
| 3252 | ······-·no_reboot_needed | 3252 | ······-·no_reboot_needed |
| 3253 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 3253 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 3254 | ······stat: | 3254 | ······stat: |
| 3255 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3255 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3256 | ······register:·file_exists | 3256 | ······register:·file_exists |
| 3257 | ······when: | 3257 | ······when: |
| 3258 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3259 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3258 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3259 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3260 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3260 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3261 | ······tags: | 3261 | ······tags: |
| 3262 | ······-·CCE-83430-9 | 3262 | ······-·CCE-83430-9 |
| 3263 | ······-·CJIS-5.5.2.2 | 3263 | ······-·CJIS-5.5.2.2 |
| 3264 | ······-·NIST-800-171-3.4.5 | 3264 | ······-·NIST-800-171-3.4.5 |
| 3265 | ······-·NIST-800-53-AC-6(1) | 3265 | ······-·NIST-800-53-AC-6(1) |
| 3266 | ······-·NIST-800-53-CM-6(a) | 3266 | ······-·NIST-800-53-CM-6(a) |
| Offset 3274, 16 lines modified | Offset 3274, 16 lines modified | ||
| 3274 | ······-·no_reboot_needed | 3274 | ······-·no_reboot_needed |
| 3275 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 3275 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 3276 | ······file: | 3276 | ······file: |
| 3277 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3277 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3278 | ········group:·'0' | 3278 | ········group:·'0' |
| 3279 | ······when: | 3279 | ······when: |
| 3280 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3281 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3280 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3281 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3282 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3282 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3283 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3283 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3284 | ······tags: | 3284 | ······tags: |
| 3285 | ······-·CCE-83430-9 | 3285 | ······-·CCE-83430-9 |
| 3286 | ······-·CJIS-5.5.2.2 | 3286 | ······-·CJIS-5.5.2.2 |
| 3287 | ······-·NIST-800-171-3.4.5 | 3287 | ······-·NIST-800-171-3.4.5 |
| 3288 | ······-·NIST-800-53-AC-6(1) | 3288 | ······-·NIST-800-53-AC-6(1) |
| Offset 3315, 16 lines modified | Offset 3315, 16 lines modified | ||
| 3315 | ······-·no_reboot_needed | 3315 | ······-·no_reboot_needed |
| 3316 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 3316 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 3317 | ······stat: | 3317 | ······stat: |
| 3318 | ········path:·/boot/efi/EFI/redhat/user.cfg | 3318 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 3319 | ······register:·file_exists | 3319 | ······register:·file_exists |
| 3320 | ······when: | 3320 | ······when: |
| 3321 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3322 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3321 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3322 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3324 | ······tags: | 3324 | ······tags: |
| 3325 | ······-·CCE-86011-4 | 3325 | ······-·CCE-86011-4 |
| 3326 | ······-·CJIS-5.5.2.2 | 3326 | ······-·CJIS-5.5.2.2 |
| 3327 | ······-·NIST-800-171-3.4.5 | 3327 | ······-·NIST-800-171-3.4.5 |
| 3328 | ······-·NIST-800-53-AC-6(1) | 3328 | ······-·NIST-800-53-AC-6(1) |
| 3329 | ······-·NIST-800-53-CM-6(a) | 3329 | ······-·NIST-800-53-CM-6(a) |
| Offset 3337, 16 lines modified | Offset 3337, 16 lines modified | ||
| 3337 | ······-·no_reboot_needed | 3337 | ······-·no_reboot_needed |
| 3338 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 3338 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 3339 | ······file: | 3339 | ······file: |
| 3340 | ········path:·/boot/efi/EFI/redhat/user.cfg | 3340 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 3341 | ········group:·'0' | 3341 | ········group:·'0' |
| 3342 | ······when: | 3342 | ······when: |
| 3343 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3344 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3343 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3344 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3345 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3345 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3346 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3346 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3347 | ······tags: | 3347 | ······tags: |
| 3348 | ······-·CCE-86011-4 | 3348 | ······-·CCE-86011-4 |
| 3349 | ······-·CJIS-5.5.2.2 | 3349 | ······-·CJIS-5.5.2.2 |
| 3350 | ······-·NIST-800-171-3.4.5 | 3350 | ······-·NIST-800-171-3.4.5 |
| 3351 | ······-·NIST-800-53-AC-6(1) | 3351 | ······-·NIST-800-53-AC-6(1) |
| Offset 3378, 16 lines modified | Offset 3378, 16 lines modified | ||
| 3378 | ······-·no_reboot_needed | 3378 | ······-·no_reboot_needed |
| 3379 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 3379 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 3380 | ······stat: | 3380 | ······stat: |
| 3381 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3381 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3382 | ······register:·file_exists | 3382 | ······register:·file_exists |
| 3383 | ······when: | 3383 | ······when: |
| 3384 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3385 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3384 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3385 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3386 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3386 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3387 | ······tags: | 3387 | ······tags: |
| 3388 | ······-·CCE-83429-1 | 3388 | ······-·CCE-83429-1 |
| 3389 | ······-·CJIS-5.5.2.2 | 3389 | ······-·CJIS-5.5.2.2 |
| 3390 | ······-·NIST-800-171-3.4.5 | 3390 | ······-·NIST-800-171-3.4.5 |
| 3391 | ······-·NIST-800-53-AC-6(1) | 3391 | ······-·NIST-800-53-AC-6(1) |
| 3392 | ······-·NIST-800-53-CM-6(a) | 3392 | ······-·NIST-800-53-CM-6(a) |
| Offset 3400, 16 lines modified | Offset 3400, 16 lines modified | ||
| 3400 | ······-·no_reboot_needed | 3400 | ······-·no_reboot_needed |
| 3401 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 3401 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 3402 | ······file: | 3402 | ······file: |
| 3403 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3403 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3404 | ········owner:·'0' | 3404 | ········owner:·'0' |
| 3405 | ······when: | 3405 | ······when: |
| 3406 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3407 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3406 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3407 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3408 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3408 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3409 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3409 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3410 | ······tags: | 3410 | ······tags: |
| 3411 | ······-·CCE-83429-1 | 3411 | ······-·CCE-83429-1 |
| 3412 | ······-·CJIS-5.5.2.2 | 3412 | ······-·CJIS-5.5.2.2 |
| 3413 | ······-·NIST-800-171-3.4.5 | 3413 | ······-·NIST-800-171-3.4.5 |
| 3414 | ······-·NIST-800-53-AC-6(1) | 3414 | ······-·NIST-800-53-AC-6(1) |
| Offset 3441, 16 lines modified | Offset 3441, 16 lines modified | ||
| 3441 | ······-·no_reboot_needed | 3441 | ······-·no_reboot_needed |
| 3442 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 3442 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 3443 | ······stat: | 3443 | ······stat: |
| 3444 | ········path:·/boot/efi/EFI/redhat/user.cfg | 3444 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 3445 | ······register:·file_exists | 3445 | ······register:·file_exists |
| 3446 | ······when: | 3446 | ······when: |
| 3447 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3448 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3447 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3448 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3449 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3449 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3450 | ······tags: | 3450 | ······tags: |
| 3451 | ······-·CCE-86019-7 | 3451 | ······-·CCE-86019-7 |
| 3452 | ······-·CJIS-5.5.2.2 | 3452 | ······-·CJIS-5.5.2.2 |
| 3453 | ······-·NIST-800-171-3.4.5 | 3453 | ······-·NIST-800-171-3.4.5 |
| 3454 | ······-·NIST-800-53-AC-6(1) | 3454 | ······-·NIST-800-53-AC-6(1) |
| 3455 | ······-·NIST-800-53-CM-6(a) | 3455 | ······-·NIST-800-53-CM-6(a) |
| Offset 3463, 16 lines modified | Offset 3463, 16 lines modified | ||
| 3463 | ······-·no_reboot_needed | 3463 | ······-·no_reboot_needed |
| Max diff block lines reached; 3367/8052 bytes (41.82%) of diff not shown. | |||
| Offset 3252, 16 lines modified | Offset 3252, 16 lines modified | ||
| 3252 | ······-·no_reboot_needed | 3252 | ······-·no_reboot_needed |
| 3253 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 3253 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 3254 | ······stat: | 3254 | ······stat: |
| 3255 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3255 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3256 | ······register:·file_exists | 3256 | ······register:·file_exists |
| 3257 | ······when: | 3257 | ······when: |
| 3258 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3259 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3258 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3259 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3260 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3260 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3261 | ······tags: | 3261 | ······tags: |
| 3262 | ······-·CCE-83430-9 | 3262 | ······-·CCE-83430-9 |
| 3263 | ······-·CJIS-5.5.2.2 | 3263 | ······-·CJIS-5.5.2.2 |
| 3264 | ······-·NIST-800-171-3.4.5 | 3264 | ······-·NIST-800-171-3.4.5 |
| 3265 | ······-·NIST-800-53-AC-6(1) | 3265 | ······-·NIST-800-53-AC-6(1) |
| 3266 | ······-·NIST-800-53-CM-6(a) | 3266 | ······-·NIST-800-53-CM-6(a) |
| Offset 3274, 16 lines modified | Offset 3274, 16 lines modified | ||
| 3274 | ······-·no_reboot_needed | 3274 | ······-·no_reboot_needed |
| 3275 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 3275 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 3276 | ······file: | 3276 | ······file: |
| 3277 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3277 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3278 | ········group:·'0' | 3278 | ········group:·'0' |
| 3279 | ······when: | 3279 | ······when: |
| 3280 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3281 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3280 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3281 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3282 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3282 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3283 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3283 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3284 | ······tags: | 3284 | ······tags: |
| 3285 | ······-·CCE-83430-9 | 3285 | ······-·CCE-83430-9 |
| 3286 | ······-·CJIS-5.5.2.2 | 3286 | ······-·CJIS-5.5.2.2 |
| 3287 | ······-·NIST-800-171-3.4.5 | 3287 | ······-·NIST-800-171-3.4.5 |
| 3288 | ······-·NIST-800-53-AC-6(1) | 3288 | ······-·NIST-800-53-AC-6(1) |
| Offset 3315, 16 lines modified | Offset 3315, 16 lines modified | ||
| 3315 | ······-·no_reboot_needed | 3315 | ······-·no_reboot_needed |
| 3316 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 3316 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 3317 | ······stat: | 3317 | ······stat: |
| 3318 | ········path:·/boot/efi/EFI/redhat/user.cfg | 3318 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 3319 | ······register:·file_exists | 3319 | ······register:·file_exists |
| 3320 | ······when: | 3320 | ······when: |
| 3321 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3322 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3321 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3322 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3324 | ······tags: | 3324 | ······tags: |
| 3325 | ······-·CCE-86011-4 | 3325 | ······-·CCE-86011-4 |
| 3326 | ······-·CJIS-5.5.2.2 | 3326 | ······-·CJIS-5.5.2.2 |
| 3327 | ······-·NIST-800-171-3.4.5 | 3327 | ······-·NIST-800-171-3.4.5 |
| 3328 | ······-·NIST-800-53-AC-6(1) | 3328 | ······-·NIST-800-53-AC-6(1) |
| 3329 | ······-·NIST-800-53-CM-6(a) | 3329 | ······-·NIST-800-53-CM-6(a) |
| Offset 3337, 16 lines modified | Offset 3337, 16 lines modified | ||
| 3337 | ······-·no_reboot_needed | 3337 | ······-·no_reboot_needed |
| 3338 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 3338 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 3339 | ······file: | 3339 | ······file: |
| 3340 | ········path:·/boot/efi/EFI/redhat/user.cfg | 3340 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 3341 | ········group:·'0' | 3341 | ········group:·'0' |
| 3342 | ······when: | 3342 | ······when: |
| 3343 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3344 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3343 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3344 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3345 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3345 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3346 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3346 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3347 | ······tags: | 3347 | ······tags: |
| 3348 | ······-·CCE-86011-4 | 3348 | ······-·CCE-86011-4 |
| 3349 | ······-·CJIS-5.5.2.2 | 3349 | ······-·CJIS-5.5.2.2 |
| 3350 | ······-·NIST-800-171-3.4.5 | 3350 | ······-·NIST-800-171-3.4.5 |
| 3351 | ······-·NIST-800-53-AC-6(1) | 3351 | ······-·NIST-800-53-AC-6(1) |
| Offset 3378, 16 lines modified | Offset 3378, 16 lines modified | ||
| 3378 | ······-·no_reboot_needed | 3378 | ······-·no_reboot_needed |
| 3379 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 3379 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 3380 | ······stat: | 3380 | ······stat: |
| 3381 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3381 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3382 | ······register:·file_exists | 3382 | ······register:·file_exists |
| 3383 | ······when: | 3383 | ······when: |
| 3384 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3385 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3384 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3385 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3386 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3386 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3387 | ······tags: | 3387 | ······tags: |
| 3388 | ······-·CCE-83429-1 | 3388 | ······-·CCE-83429-1 |
| 3389 | ······-·CJIS-5.5.2.2 | 3389 | ······-·CJIS-5.5.2.2 |
| 3390 | ······-·NIST-800-171-3.4.5 | 3390 | ······-·NIST-800-171-3.4.5 |
| 3391 | ······-·NIST-800-53-AC-6(1) | 3391 | ······-·NIST-800-53-AC-6(1) |
| 3392 | ······-·NIST-800-53-CM-6(a) | 3392 | ······-·NIST-800-53-CM-6(a) |
| Offset 3400, 16 lines modified | Offset 3400, 16 lines modified | ||
| 3400 | ······-·no_reboot_needed | 3400 | ······-·no_reboot_needed |
| 3401 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 3401 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 3402 | ······file: | 3402 | ······file: |
| 3403 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 3403 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 3404 | ········owner:·'0' | 3404 | ········owner:·'0' |
| 3405 | ······when: | 3405 | ······when: |
| 3406 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3407 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3406 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3407 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3408 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3408 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3409 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3409 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3410 | ······tags: | 3410 | ······tags: |
| 3411 | ······-·CCE-83429-1 | 3411 | ······-·CCE-83429-1 |
| 3412 | ······-·CJIS-5.5.2.2 | 3412 | ······-·CJIS-5.5.2.2 |
| 3413 | ······-·NIST-800-171-3.4.5 | 3413 | ······-·NIST-800-171-3.4.5 |
| 3414 | ······-·NIST-800-53-AC-6(1) | 3414 | ······-·NIST-800-53-AC-6(1) |
| Offset 3441, 16 lines modified | Offset 3441, 16 lines modified | ||
| 3441 | ······-·no_reboot_needed | 3441 | ······-·no_reboot_needed |
| 3442 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 3442 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 3443 | ······stat: | 3443 | ······stat: |
| 3444 | ········path:·/boot/efi/EFI/redhat/user.cfg | 3444 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 3445 | ······register:·file_exists | 3445 | ······register:·file_exists |
| 3446 | ······when: | 3446 | ······when: |
| 3447 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3448 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3447 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3448 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3449 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3449 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3450 | ······tags: | 3450 | ······tags: |
| 3451 | ······-·CCE-86019-7 | 3451 | ······-·CCE-86019-7 |
| 3452 | ······-·CJIS-5.5.2.2 | 3452 | ······-·CJIS-5.5.2.2 |
| 3453 | ······-·NIST-800-171-3.4.5 | 3453 | ······-·NIST-800-171-3.4.5 |
| 3454 | ······-·NIST-800-53-AC-6(1) | 3454 | ······-·NIST-800-53-AC-6(1) |
| 3455 | ······-·NIST-800-53-CM-6(a) | 3455 | ······-·NIST-800-53-CM-6(a) |
| Offset 3463, 16 lines modified | Offset 3463, 16 lines modified | ||
| 3463 | ······-·no_reboot_needed | 3463 | ······-·no_reboot_needed |
| Max diff block lines reached; 3367/8052 bytes (41.82%) of diff not shown. | |||
| Offset 19209, 16 lines modified | Offset 19209, 16 lines modified | ||
| 19209 | ······-·no_reboot_needed | 19209 | ······-·no_reboot_needed |
| 19210 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 19210 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 19211 | ······stat: | 19211 | ······stat: |
| 19212 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19212 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19213 | ······register:·file_exists | 19213 | ······register:·file_exists |
| 19214 | ······when: | 19214 | ······when: |
| 19215 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19216 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19215 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19216 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19217 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19217 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19218 | ······tags: | 19218 | ······tags: |
| 19219 | ······-·CCE-83430-9 | 19219 | ······-·CCE-83430-9 |
| 19220 | ······-·CJIS-5.5.2.2 | 19220 | ······-·CJIS-5.5.2.2 |
| 19221 | ······-·NIST-800-171-3.4.5 | 19221 | ······-·NIST-800-171-3.4.5 |
| 19222 | ······-·NIST-800-53-AC-6(1) | 19222 | ······-·NIST-800-53-AC-6(1) |
| 19223 | ······-·NIST-800-53-CM-6(a) | 19223 | ······-·NIST-800-53-CM-6(a) |
| Offset 19231, 16 lines modified | Offset 19231, 16 lines modified | ||
| 19231 | ······-·no_reboot_needed | 19231 | ······-·no_reboot_needed |
| 19232 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 19232 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 19233 | ······file: | 19233 | ······file: |
| 19234 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19234 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19235 | ········group:·'0' | 19235 | ········group:·'0' |
| 19236 | ······when: | 19236 | ······when: |
| 19237 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19238 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19237 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19238 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19239 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 19240 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 19241 | ······tags: | 19241 | ······tags: |
| 19242 | ······-·CCE-83430-9 | 19242 | ······-·CCE-83430-9 |
| 19243 | ······-·CJIS-5.5.2.2 | 19243 | ······-·CJIS-5.5.2.2 |
| 19244 | ······-·NIST-800-171-3.4.5 | 19244 | ······-·NIST-800-171-3.4.5 |
| 19245 | ······-·NIST-800-53-AC-6(1) | 19245 | ······-·NIST-800-53-AC-6(1) |
| Offset 19272, 16 lines modified | Offset 19272, 16 lines modified | ||
| 19272 | ······-·no_reboot_needed | 19272 | ······-·no_reboot_needed |
| 19273 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 19273 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 19274 | ······stat: | 19274 | ······stat: |
| 19275 | ········path:·/boot/efi/EFI/redhat/user.cfg | 19275 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 19276 | ······register:·file_exists | 19276 | ······register:·file_exists |
| 19277 | ······when: | 19277 | ······when: |
| 19278 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19279 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19278 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19279 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19280 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19280 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19281 | ······tags: | 19281 | ······tags: |
| 19282 | ······-·CCE-86011-4 | 19282 | ······-·CCE-86011-4 |
| 19283 | ······-·CJIS-5.5.2.2 | 19283 | ······-·CJIS-5.5.2.2 |
| 19284 | ······-·NIST-800-171-3.4.5 | 19284 | ······-·NIST-800-171-3.4.5 |
| 19285 | ······-·NIST-800-53-AC-6(1) | 19285 | ······-·NIST-800-53-AC-6(1) |
| 19286 | ······-·NIST-800-53-CM-6(a) | 19286 | ······-·NIST-800-53-CM-6(a) |
| Offset 19294, 16 lines modified | Offset 19294, 16 lines modified | ||
| 19294 | ······-·no_reboot_needed | 19294 | ······-·no_reboot_needed |
| 19295 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 19295 | ····-·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 19296 | ······file: | 19296 | ······file: |
| 19297 | ········path:·/boot/efi/EFI/redhat/user.cfg | 19297 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 19298 | ········group:·'0' | 19298 | ········group:·'0' |
| 19299 | ······when: | 19299 | ······when: |
| 19300 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19301 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19300 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19301 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19302 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19302 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19303 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 19303 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 19304 | ······tags: | 19304 | ······tags: |
| 19305 | ······-·CCE-86011-4 | 19305 | ······-·CCE-86011-4 |
| 19306 | ······-·CJIS-5.5.2.2 | 19306 | ······-·CJIS-5.5.2.2 |
| 19307 | ······-·NIST-800-171-3.4.5 | 19307 | ······-·NIST-800-171-3.4.5 |
| 19308 | ······-·NIST-800-53-AC-6(1) | 19308 | ······-·NIST-800-53-AC-6(1) |
| Offset 19335, 16 lines modified | Offset 19335, 16 lines modified | ||
| 19335 | ······-·no_reboot_needed | 19335 | ······-·no_reboot_needed |
| 19336 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 19336 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 19337 | ······stat: | 19337 | ······stat: |
| 19338 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19338 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19339 | ······register:·file_exists | 19339 | ······register:·file_exists |
| 19340 | ······when: | 19340 | ······when: |
| 19341 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19342 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19341 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19342 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19344 | ······tags: | 19344 | ······tags: |
| 19345 | ······-·CCE-83429-1 | 19345 | ······-·CCE-83429-1 |
| 19346 | ······-·CJIS-5.5.2.2 | 19346 | ······-·CJIS-5.5.2.2 |
| 19347 | ······-·NIST-800-171-3.4.5 | 19347 | ······-·NIST-800-171-3.4.5 |
| 19348 | ······-·NIST-800-53-AC-6(1) | 19348 | ······-·NIST-800-53-AC-6(1) |
| 19349 | ······-·NIST-800-53-CM-6(a) | 19349 | ······-·NIST-800-53-CM-6(a) |
| Offset 19357, 16 lines modified | Offset 19357, 16 lines modified | ||
| 19357 | ······-·no_reboot_needed | 19357 | ······-·no_reboot_needed |
| 19358 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 19358 | ····-·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 19359 | ······file: | 19359 | ······file: |
| 19360 | ········path:·/boot/efi/EFI/redhat/grub.cfg | 19360 | ········path:·/boot/efi/EFI/redhat/grub.cfg |
| 19361 | ········owner:·'0' | 19361 | ········owner:·'0' |
| 19362 | ······when: | 19362 | ······when: |
| 19363 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19364 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19363 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19364 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19365 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19365 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19366 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 19366 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 19367 | ······tags: | 19367 | ······tags: |
| 19368 | ······-·CCE-83429-1 | 19368 | ······-·CCE-83429-1 |
| 19369 | ······-·CJIS-5.5.2.2 | 19369 | ······-·CJIS-5.5.2.2 |
| 19370 | ······-·NIST-800-171-3.4.5 | 19370 | ······-·NIST-800-171-3.4.5 |
| 19371 | ······-·NIST-800-53-AC-6(1) | 19371 | ······-·NIST-800-53-AC-6(1) |
| Offset 19398, 16 lines modified | Offset 19398, 16 lines modified | ||
| 19398 | ······-·no_reboot_needed | 19398 | ······-·no_reboot_needed |
| 19399 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 19399 | ····-·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 19400 | ······stat: | 19400 | ······stat: |
| 19401 | ········path:·/boot/efi/EFI/redhat/user.cfg | 19401 | ········path:·/boot/efi/EFI/redhat/user.cfg |
| 19402 | ······register:·file_exists | 19402 | ······register:·file_exists |
| 19403 | ······when: | 19403 | ······when: |
| 19404 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19405 | ······-·'"grub2-common"·in·ansible_facts.packages' | 19404 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 19405 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 19406 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 19406 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 19407 | ······tags: | 19407 | ······tags: |
| 19408 | ······-·CCE-86019-7 | 19408 | ······-·CCE-86019-7 |
| 19409 | ······-·CJIS-5.5.2.2 | 19409 | ······-·CJIS-5.5.2.2 |
| 19410 | ······-·NIST-800-171-3.4.5 | 19410 | ······-·NIST-800-171-3.4.5 |
| 19411 | ······-·NIST-800-53-AC-6(1) | 19411 | ······-·NIST-800-53-AC-6(1) |
| 19412 | ······-·NIST-800-53-CM-6(a) | 19412 | ······-·NIST-800-53-CM-6(a) |
| Offset 19420, 16 lines modified | Offset 19420, 16 lines modified | ||
| 19420 | ······-·no_reboot_needed | 19420 | ······-·no_reboot_needed |
| Max diff block lines reached; 3375/8076 bytes (41.79%) of diff not shown. | |||
| Offset 29197, 16 lines modified | Offset 29197, 16 lines modified | ||
| 29197 | ········lineinfile: | 29197 | ········lineinfile: |
| 29198 | ··········path:·/etc/postfix/main.cf | 29198 | ··········path:·/etc/postfix/main.cf |
| 29199 | ··········create:·true | 29199 | ··········create:·true |
| 29200 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 29200 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 29201 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 29201 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 29202 | ··········state:·present | 29202 | ··········state:·present |
| 29203 | ······when: | 29203 | ······when: |
| 29204 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 29205 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29204 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29205 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 29206 | ······tags: | 29206 | ······tags: |
| 29207 | ······-·CCE-80512-7 | 29207 | ······-·CCE-80512-7 |
| 29208 | ······-·DISA-STIG-RHEL-07-040680 | 29208 | ······-·DISA-STIG-RHEL-07-040680 |
| 29209 | ······-·low_complexity | 29209 | ······-·low_complexity |
| 29210 | ······-·low_disruption | 29210 | ······-·low_disruption |
| 29211 | ······-·medium_severity | 29211 | ······-·medium_severity |
| 29212 | ······-·no_reboot_needed | 29212 | ······-·no_reboot_needed |
| Offset 29202, 16 lines modified | Offset 29202, 16 lines modified | ||
| 29202 | ········lineinfile: | 29202 | ········lineinfile: |
| 29203 | ··········path:·/etc/postfix/main.cf | 29203 | ··········path:·/etc/postfix/main.cf |
| 29204 | ··········create:·true | 29204 | ··········create:·true |
| 29205 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 29205 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 29206 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 29206 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 29207 | ··········state:·present | 29207 | ··········state:·present |
| 29208 | ······when: | 29208 | ······when: |
| 29209 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 29210 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29209 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29210 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 29211 | ······tags: | 29211 | ······tags: |
| 29212 | ······-·CCE-80512-7 | 29212 | ······-·CCE-80512-7 |
| 29213 | ······-·DISA-STIG-RHEL-07-040680 | 29213 | ······-·DISA-STIG-RHEL-07-040680 |
| 29214 | ······-·low_complexity | 29214 | ······-·low_complexity |
| 29215 | ······-·low_disruption | 29215 | ······-·low_disruption |
| 29216 | ······-·medium_severity | 29216 | ······-·medium_severity |
| 29217 | ······-·no_reboot_needed | 29217 | ······-·no_reboot_needed |
| Offset 22273, 16 lines modified | Offset 22273, 16 lines modified | ||
| 22273 | ······-·no_reboot_needed | 22273 | ······-·no_reboot_needed |
| 22274 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22274 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22275 | ······stat: | 22275 | ······stat: |
| 22276 | ········path:·/boot/grub2/grub.cfg | 22276 | ········path:·/boot/grub2/grub.cfg |
| 22277 | ······register:·file_exists | 22277 | ······register:·file_exists |
| 22278 | ······when: | 22278 | ······when: |
| 22279 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22280 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22279 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22280 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22281 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22281 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22282 | ······tags: | 22282 | ······tags: |
| 22283 | ······-·CCE-80800-6 | 22283 | ······-·CCE-80800-6 |
| 22284 | ······-·CJIS-5.5.2.2 | 22284 | ······-·CJIS-5.5.2.2 |
| 22285 | ······-·NIST-800-171-3.4.5 | 22285 | ······-·NIST-800-171-3.4.5 |
| 22286 | ······-·NIST-800-53-AC-6(1) | 22286 | ······-·NIST-800-53-AC-6(1) |
| 22287 | ······-·NIST-800-53-CM-6(a) | 22287 | ······-·NIST-800-53-CM-6(a) |
| Offset 22295, 16 lines modified | Offset 22295, 16 lines modified | ||
| 22295 | ······-·no_reboot_needed | 22295 | ······-·no_reboot_needed |
| 22296 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 22296 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 22297 | ······file: | 22297 | ······file: |
| 22298 | ········path:·/boot/grub2/grub.cfg | 22298 | ········path:·/boot/grub2/grub.cfg |
| 22299 | ········group:·'0' | 22299 | ········group:·'0' |
| 22300 | ······when: | 22300 | ······when: |
| 22301 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22302 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22301 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22302 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22303 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22303 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22304 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22304 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22305 | ······tags: | 22305 | ······tags: |
| 22306 | ······-·CCE-80800-6 | 22306 | ······-·CCE-80800-6 |
| 22307 | ······-·CJIS-5.5.2.2 | 22307 | ······-·CJIS-5.5.2.2 |
| 22308 | ······-·NIST-800-171-3.4.5 | 22308 | ······-·NIST-800-171-3.4.5 |
| 22309 | ······-·NIST-800-53-AC-6(1) | 22309 | ······-·NIST-800-53-AC-6(1) |
| Offset 22336, 16 lines modified | Offset 22336, 16 lines modified | ||
| 22336 | ······-·no_reboot_needed | 22336 | ······-·no_reboot_needed |
| 22337 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22337 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22338 | ······stat: | 22338 | ······stat: |
| 22339 | ········path:·/boot/grub2/user.cfg | 22339 | ········path:·/boot/grub2/user.cfg |
| 22340 | ······register:·file_exists | 22340 | ······register:·file_exists |
| 22341 | ······when: | 22341 | ······when: |
| 22342 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22343 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22342 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22343 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22344 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22344 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22345 | ······tags: | 22345 | ······tags: |
| 22346 | ······-·CCE-86009-8 | 22346 | ······-·CCE-86009-8 |
| 22347 | ······-·CJIS-5.5.2.2 | 22347 | ······-·CJIS-5.5.2.2 |
| 22348 | ······-·NIST-800-171-3.4.5 | 22348 | ······-·NIST-800-171-3.4.5 |
| 22349 | ······-·NIST-800-53-AC-6(1) | 22349 | ······-·NIST-800-53-AC-6(1) |
| 22350 | ······-·NIST-800-53-CM-6(a) | 22350 | ······-·NIST-800-53-CM-6(a) |
| Offset 22358, 16 lines modified | Offset 22358, 16 lines modified | ||
| 22358 | ······-·no_reboot_needed | 22358 | ······-·no_reboot_needed |
| 22359 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 22359 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 22360 | ······file: | 22360 | ······file: |
| 22361 | ········path:·/boot/grub2/user.cfg | 22361 | ········path:·/boot/grub2/user.cfg |
| 22362 | ········group:·'0' | 22362 | ········group:·'0' |
| 22363 | ······when: | 22363 | ······when: |
| 22364 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22365 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22364 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22365 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22366 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22366 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22367 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22367 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22368 | ······tags: | 22368 | ······tags: |
| 22369 | ······-·CCE-86009-8 | 22369 | ······-·CCE-86009-8 |
| 22370 | ······-·CJIS-5.5.2.2 | 22370 | ······-·CJIS-5.5.2.2 |
| 22371 | ······-·NIST-800-171-3.4.5 | 22371 | ······-·NIST-800-171-3.4.5 |
| 22372 | ······-·NIST-800-53-AC-6(1) | 22372 | ······-·NIST-800-53-AC-6(1) |
| Offset 22399, 16 lines modified | Offset 22399, 16 lines modified | ||
| 22399 | ······-·no_reboot_needed | 22399 | ······-·no_reboot_needed |
| 22400 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22400 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22401 | ······stat: | 22401 | ······stat: |
| 22402 | ········path:·/boot/grub2/grub.cfg | 22402 | ········path:·/boot/grub2/grub.cfg |
| 22403 | ······register:·file_exists | 22403 | ······register:·file_exists |
| 22404 | ······when: | 22404 | ······when: |
| 22405 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22406 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22405 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22406 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22407 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22407 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22408 | ······tags: | 22408 | ······tags: |
| 22409 | ······-·CCE-80805-5 | 22409 | ······-·CCE-80805-5 |
| 22410 | ······-·CJIS-5.5.2.2 | 22410 | ······-·CJIS-5.5.2.2 |
| 22411 | ······-·NIST-800-171-3.4.5 | 22411 | ······-·NIST-800-171-3.4.5 |
| 22412 | ······-·NIST-800-53-AC-6(1) | 22412 | ······-·NIST-800-53-AC-6(1) |
| 22413 | ······-·NIST-800-53-CM-6(a) | 22413 | ······-·NIST-800-53-CM-6(a) |
| Offset 22421, 16 lines modified | Offset 22421, 16 lines modified | ||
| 22421 | ······-·no_reboot_needed | 22421 | ······-·no_reboot_needed |
| 22422 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 22422 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 22423 | ······file: | 22423 | ······file: |
| 22424 | ········path:·/boot/grub2/grub.cfg | 22424 | ········path:·/boot/grub2/grub.cfg |
| 22425 | ········owner:·'0' | 22425 | ········owner:·'0' |
| 22426 | ······when: | 22426 | ······when: |
| 22427 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22428 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22427 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22428 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22429 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22429 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22430 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22430 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22431 | ······tags: | 22431 | ······tags: |
| 22432 | ······-·CCE-80805-5 | 22432 | ······-·CCE-80805-5 |
| 22433 | ······-·CJIS-5.5.2.2 | 22433 | ······-·CJIS-5.5.2.2 |
| 22434 | ······-·NIST-800-171-3.4.5 | 22434 | ······-·NIST-800-171-3.4.5 |
| 22435 | ······-·NIST-800-53-AC-6(1) | 22435 | ······-·NIST-800-53-AC-6(1) |
| Offset 22462, 16 lines modified | Offset 22462, 16 lines modified | ||
| 22462 | ······-·no_reboot_needed | 22462 | ······-·no_reboot_needed |
| 22463 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22463 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22464 | ······stat: | 22464 | ······stat: |
| 22465 | ········path:·/boot/grub2/user.cfg | 22465 | ········path:·/boot/grub2/user.cfg |
| 22466 | ······register:·file_exists | 22466 | ······register:·file_exists |
| 22467 | ······when: | 22467 | ······when: |
| 22468 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22469 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22468 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22469 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22470 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22470 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22471 | ······tags: | 22471 | ······tags: |
| 22472 | ······-·CCE-86015-5 | 22472 | ······-·CCE-86015-5 |
| 22473 | ······-·CJIS-5.5.2.2 | 22473 | ······-·CJIS-5.5.2.2 |
| 22474 | ······-·NIST-800-171-3.4.5 | 22474 | ······-·NIST-800-171-3.4.5 |
| 22475 | ······-·NIST-800-53-AC-6(1) | 22475 | ······-·NIST-800-53-AC-6(1) |
| 22476 | ······-·NIST-800-53-CM-6(a) | 22476 | ······-·NIST-800-53-CM-6(a) |
| Offset 22484, 16 lines modified | Offset 22484, 16 lines modified | ||
| 22484 | ······-·no_reboot_needed | 22484 | ······-·no_reboot_needed |
| Max diff block lines reached; 11403/16034 bytes (71.12%) of diff not shown. | |||
| Offset 5473, 16 lines modified | Offset 5473, 16 lines modified | ||
| 5473 | ······-·no_reboot_needed | 5473 | ······-·no_reboot_needed |
| 5474 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5474 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5475 | ······stat: | 5475 | ······stat: |
| 5476 | ········path:·/boot/grub2/grub.cfg | 5476 | ········path:·/boot/grub2/grub.cfg |
| 5477 | ······register:·file_exists | 5477 | ······register:·file_exists |
| 5478 | ······when: | 5478 | ······when: |
| 5479 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5480 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5479 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5480 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5481 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5481 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5482 | ······tags: | 5482 | ······tags: |
| 5483 | ······-·CCE-80800-6 | 5483 | ······-·CCE-80800-6 |
| 5484 | ······-·CJIS-5.5.2.2 | 5484 | ······-·CJIS-5.5.2.2 |
| 5485 | ······-·NIST-800-171-3.4.5 | 5485 | ······-·NIST-800-171-3.4.5 |
| 5486 | ······-·NIST-800-53-AC-6(1) | 5486 | ······-·NIST-800-53-AC-6(1) |
| 5487 | ······-·NIST-800-53-CM-6(a) | 5487 | ······-·NIST-800-53-CM-6(a) |
| Offset 5495, 16 lines modified | Offset 5495, 16 lines modified | ||
| 5495 | ······-·no_reboot_needed | 5495 | ······-·no_reboot_needed |
| 5496 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5496 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5497 | ······file: | 5497 | ······file: |
| 5498 | ········path:·/boot/grub2/grub.cfg | 5498 | ········path:·/boot/grub2/grub.cfg |
| 5499 | ········group:·'0' | 5499 | ········group:·'0' |
| 5500 | ······when: | 5500 | ······when: |
| 5501 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5502 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5501 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5502 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5503 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5503 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5504 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5504 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5505 | ······tags: | 5505 | ······tags: |
| 5506 | ······-·CCE-80800-6 | 5506 | ······-·CCE-80800-6 |
| 5507 | ······-·CJIS-5.5.2.2 | 5507 | ······-·CJIS-5.5.2.2 |
| 5508 | ······-·NIST-800-171-3.4.5 | 5508 | ······-·NIST-800-171-3.4.5 |
| 5509 | ······-·NIST-800-53-AC-6(1) | 5509 | ······-·NIST-800-53-AC-6(1) |
| Offset 5536, 16 lines modified | Offset 5536, 16 lines modified | ||
| 5536 | ······-·no_reboot_needed | 5536 | ······-·no_reboot_needed |
| 5537 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5537 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5538 | ······stat: | 5538 | ······stat: |
| 5539 | ········path:·/boot/grub2/user.cfg | 5539 | ········path:·/boot/grub2/user.cfg |
| 5540 | ······register:·file_exists | 5540 | ······register:·file_exists |
| 5541 | ······when: | 5541 | ······when: |
| 5542 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5543 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5542 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5543 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5544 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5544 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5545 | ······tags: | 5545 | ······tags: |
| 5546 | ······-·CCE-86009-8 | 5546 | ······-·CCE-86009-8 |
| 5547 | ······-·CJIS-5.5.2.2 | 5547 | ······-·CJIS-5.5.2.2 |
| 5548 | ······-·NIST-800-171-3.4.5 | 5548 | ······-·NIST-800-171-3.4.5 |
| 5549 | ······-·NIST-800-53-AC-6(1) | 5549 | ······-·NIST-800-53-AC-6(1) |
| 5550 | ······-·NIST-800-53-CM-6(a) | 5550 | ······-·NIST-800-53-CM-6(a) |
| Offset 5558, 16 lines modified | Offset 5558, 16 lines modified | ||
| 5558 | ······-·no_reboot_needed | 5558 | ······-·no_reboot_needed |
| 5559 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5559 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5560 | ······file: | 5560 | ······file: |
| 5561 | ········path:·/boot/grub2/user.cfg | 5561 | ········path:·/boot/grub2/user.cfg |
| 5562 | ········group:·'0' | 5562 | ········group:·'0' |
| 5563 | ······when: | 5563 | ······when: |
| 5564 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5565 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5564 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5565 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5566 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5566 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5567 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5567 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5568 | ······tags: | 5568 | ······tags: |
| 5569 | ······-·CCE-86009-8 | 5569 | ······-·CCE-86009-8 |
| 5570 | ······-·CJIS-5.5.2.2 | 5570 | ······-·CJIS-5.5.2.2 |
| 5571 | ······-·NIST-800-171-3.4.5 | 5571 | ······-·NIST-800-171-3.4.5 |
| 5572 | ······-·NIST-800-53-AC-6(1) | 5572 | ······-·NIST-800-53-AC-6(1) |
| Offset 5599, 16 lines modified | Offset 5599, 16 lines modified | ||
| 5599 | ······-·no_reboot_needed | 5599 | ······-·no_reboot_needed |
| 5600 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5600 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5601 | ······stat: | 5601 | ······stat: |
| 5602 | ········path:·/boot/grub2/grub.cfg | 5602 | ········path:·/boot/grub2/grub.cfg |
| 5603 | ······register:·file_exists | 5603 | ······register:·file_exists |
| 5604 | ······when: | 5604 | ······when: |
| 5605 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5606 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5605 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5606 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5607 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5607 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5608 | ······tags: | 5608 | ······tags: |
| 5609 | ······-·CCE-80805-5 | 5609 | ······-·CCE-80805-5 |
| 5610 | ······-·CJIS-5.5.2.2 | 5610 | ······-·CJIS-5.5.2.2 |
| 5611 | ······-·NIST-800-171-3.4.5 | 5611 | ······-·NIST-800-171-3.4.5 |
| 5612 | ······-·NIST-800-53-AC-6(1) | 5612 | ······-·NIST-800-53-AC-6(1) |
| 5613 | ······-·NIST-800-53-CM-6(a) | 5613 | ······-·NIST-800-53-CM-6(a) |
| Offset 5621, 16 lines modified | Offset 5621, 16 lines modified | ||
| 5621 | ······-·no_reboot_needed | 5621 | ······-·no_reboot_needed |
| 5622 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5622 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5623 | ······file: | 5623 | ······file: |
| 5624 | ········path:·/boot/grub2/grub.cfg | 5624 | ········path:·/boot/grub2/grub.cfg |
| 5625 | ········owner:·'0' | 5625 | ········owner:·'0' |
| 5626 | ······when: | 5626 | ······when: |
| 5627 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5628 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5627 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5628 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5629 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5629 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5630 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5630 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5631 | ······tags: | 5631 | ······tags: |
| 5632 | ······-·CCE-80805-5 | 5632 | ······-·CCE-80805-5 |
| 5633 | ······-·CJIS-5.5.2.2 | 5633 | ······-·CJIS-5.5.2.2 |
| 5634 | ······-·NIST-800-171-3.4.5 | 5634 | ······-·NIST-800-171-3.4.5 |
| 5635 | ······-·NIST-800-53-AC-6(1) | 5635 | ······-·NIST-800-53-AC-6(1) |
| Offset 5662, 16 lines modified | Offset 5662, 16 lines modified | ||
| 5662 | ······-·no_reboot_needed | 5662 | ······-·no_reboot_needed |
| 5663 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5663 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5664 | ······stat: | 5664 | ······stat: |
| 5665 | ········path:·/boot/grub2/user.cfg | 5665 | ········path:·/boot/grub2/user.cfg |
| 5666 | ······register:·file_exists | 5666 | ······register:·file_exists |
| 5667 | ······when: | 5667 | ······when: |
| 5668 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5669 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5668 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5669 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5670 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5670 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5671 | ······tags: | 5671 | ······tags: |
| 5672 | ······-·CCE-86015-5 | 5672 | ······-·CCE-86015-5 |
| 5673 | ······-·CJIS-5.5.2.2 | 5673 | ······-·CJIS-5.5.2.2 |
| 5674 | ······-·NIST-800-171-3.4.5 | 5674 | ······-·NIST-800-171-3.4.5 |
| 5675 | ······-·NIST-800-53-AC-6(1) | 5675 | ······-·NIST-800-53-AC-6(1) |
| 5676 | ······-·NIST-800-53-CM-6(a) | 5676 | ······-·NIST-800-53-CM-6(a) |
| Offset 5684, 16 lines modified | Offset 5684, 16 lines modified | ||
| 5684 | ······-·no_reboot_needed | 5684 | ······-·no_reboot_needed |
| Max diff block lines reached; 11371/15986 bytes (71.13%) of diff not shown. | |||
| Offset 5473, 16 lines modified | Offset 5473, 16 lines modified | ||
| 5473 | ······-·no_reboot_needed | 5473 | ······-·no_reboot_needed |
| 5474 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5474 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5475 | ······stat: | 5475 | ······stat: |
| 5476 | ········path:·/boot/grub2/grub.cfg | 5476 | ········path:·/boot/grub2/grub.cfg |
| 5477 | ······register:·file_exists | 5477 | ······register:·file_exists |
| 5478 | ······when: | 5478 | ······when: |
| 5479 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5480 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5479 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5480 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5481 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5481 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5482 | ······tags: | 5482 | ······tags: |
| 5483 | ······-·CCE-80800-6 | 5483 | ······-·CCE-80800-6 |
| 5484 | ······-·CJIS-5.5.2.2 | 5484 | ······-·CJIS-5.5.2.2 |
| 5485 | ······-·NIST-800-171-3.4.5 | 5485 | ······-·NIST-800-171-3.4.5 |
| 5486 | ······-·NIST-800-53-AC-6(1) | 5486 | ······-·NIST-800-53-AC-6(1) |
| 5487 | ······-·NIST-800-53-CM-6(a) | 5487 | ······-·NIST-800-53-CM-6(a) |
| Offset 5495, 16 lines modified | Offset 5495, 16 lines modified | ||
| 5495 | ······-·no_reboot_needed | 5495 | ······-·no_reboot_needed |
| 5496 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 5496 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 5497 | ······file: | 5497 | ······file: |
| 5498 | ········path:·/boot/grub2/grub.cfg | 5498 | ········path:·/boot/grub2/grub.cfg |
| 5499 | ········group:·'0' | 5499 | ········group:·'0' |
| 5500 | ······when: | 5500 | ······when: |
| 5501 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5502 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5501 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5502 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5503 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5503 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5504 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5504 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5505 | ······tags: | 5505 | ······tags: |
| 5506 | ······-·CCE-80800-6 | 5506 | ······-·CCE-80800-6 |
| 5507 | ······-·CJIS-5.5.2.2 | 5507 | ······-·CJIS-5.5.2.2 |
| 5508 | ······-·NIST-800-171-3.4.5 | 5508 | ······-·NIST-800-171-3.4.5 |
| 5509 | ······-·NIST-800-53-AC-6(1) | 5509 | ······-·NIST-800-53-AC-6(1) |
| Offset 5536, 16 lines modified | Offset 5536, 16 lines modified | ||
| 5536 | ······-·no_reboot_needed | 5536 | ······-·no_reboot_needed |
| 5537 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5537 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5538 | ······stat: | 5538 | ······stat: |
| 5539 | ········path:·/boot/grub2/user.cfg | 5539 | ········path:·/boot/grub2/user.cfg |
| 5540 | ······register:·file_exists | 5540 | ······register:·file_exists |
| 5541 | ······when: | 5541 | ······when: |
| 5542 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5543 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5542 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5543 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5544 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5544 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5545 | ······tags: | 5545 | ······tags: |
| 5546 | ······-·CCE-86009-8 | 5546 | ······-·CCE-86009-8 |
| 5547 | ······-·CJIS-5.5.2.2 | 5547 | ······-·CJIS-5.5.2.2 |
| 5548 | ······-·NIST-800-171-3.4.5 | 5548 | ······-·NIST-800-171-3.4.5 |
| 5549 | ······-·NIST-800-53-AC-6(1) | 5549 | ······-·NIST-800-53-AC-6(1) |
| 5550 | ······-·NIST-800-53-CM-6(a) | 5550 | ······-·NIST-800-53-CM-6(a) |
| Offset 5558, 16 lines modified | Offset 5558, 16 lines modified | ||
| 5558 | ······-·no_reboot_needed | 5558 | ······-·no_reboot_needed |
| 5559 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5559 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5560 | ······file: | 5560 | ······file: |
| 5561 | ········path:·/boot/grub2/user.cfg | 5561 | ········path:·/boot/grub2/user.cfg |
| 5562 | ········group:·'0' | 5562 | ········group:·'0' |
| 5563 | ······when: | 5563 | ······when: |
| 5564 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5565 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5564 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5565 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5566 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5566 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5567 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5567 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5568 | ······tags: | 5568 | ······tags: |
| 5569 | ······-·CCE-86009-8 | 5569 | ······-·CCE-86009-8 |
| 5570 | ······-·CJIS-5.5.2.2 | 5570 | ······-·CJIS-5.5.2.2 |
| 5571 | ······-·NIST-800-171-3.4.5 | 5571 | ······-·NIST-800-171-3.4.5 |
| 5572 | ······-·NIST-800-53-AC-6(1) | 5572 | ······-·NIST-800-53-AC-6(1) |
| Offset 5599, 16 lines modified | Offset 5599, 16 lines modified | ||
| 5599 | ······-·no_reboot_needed | 5599 | ······-·no_reboot_needed |
| 5600 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5600 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5601 | ······stat: | 5601 | ······stat: |
| 5602 | ········path:·/boot/grub2/grub.cfg | 5602 | ········path:·/boot/grub2/grub.cfg |
| 5603 | ······register:·file_exists | 5603 | ······register:·file_exists |
| 5604 | ······when: | 5604 | ······when: |
| 5605 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5606 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5605 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5606 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5607 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5607 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5608 | ······tags: | 5608 | ······tags: |
| 5609 | ······-·CCE-80805-5 | 5609 | ······-·CCE-80805-5 |
| 5610 | ······-·CJIS-5.5.2.2 | 5610 | ······-·CJIS-5.5.2.2 |
| 5611 | ······-·NIST-800-171-3.4.5 | 5611 | ······-·NIST-800-171-3.4.5 |
| 5612 | ······-·NIST-800-53-AC-6(1) | 5612 | ······-·NIST-800-53-AC-6(1) |
| 5613 | ······-·NIST-800-53-CM-6(a) | 5613 | ······-·NIST-800-53-CM-6(a) |
| Offset 5621, 16 lines modified | Offset 5621, 16 lines modified | ||
| 5621 | ······-·no_reboot_needed | 5621 | ······-·no_reboot_needed |
| 5622 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 5622 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 5623 | ······file: | 5623 | ······file: |
| 5624 | ········path:·/boot/grub2/grub.cfg | 5624 | ········path:·/boot/grub2/grub.cfg |
| 5625 | ········owner:·'0' | 5625 | ········owner:·'0' |
| 5626 | ······when: | 5626 | ······when: |
| 5627 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5628 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5627 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5628 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5629 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5629 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5630 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5630 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5631 | ······tags: | 5631 | ······tags: |
| 5632 | ······-·CCE-80805-5 | 5632 | ······-·CCE-80805-5 |
| 5633 | ······-·CJIS-5.5.2.2 | 5633 | ······-·CJIS-5.5.2.2 |
| 5634 | ······-·NIST-800-171-3.4.5 | 5634 | ······-·NIST-800-171-3.4.5 |
| 5635 | ······-·NIST-800-53-AC-6(1) | 5635 | ······-·NIST-800-53-AC-6(1) |
| Offset 5662, 16 lines modified | Offset 5662, 16 lines modified | ||
| 5662 | ······-·no_reboot_needed | 5662 | ······-·no_reboot_needed |
| 5663 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5663 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5664 | ······stat: | 5664 | ······stat: |
| 5665 | ········path:·/boot/grub2/user.cfg | 5665 | ········path:·/boot/grub2/user.cfg |
| 5666 | ······register:·file_exists | 5666 | ······register:·file_exists |
| 5667 | ······when: | 5667 | ······when: |
| 5668 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5669 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5668 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5669 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5670 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5670 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5671 | ······tags: | 5671 | ······tags: |
| 5672 | ······-·CCE-86015-5 | 5672 | ······-·CCE-86015-5 |
| 5673 | ······-·CJIS-5.5.2.2 | 5673 | ······-·CJIS-5.5.2.2 |
| 5674 | ······-·NIST-800-171-3.4.5 | 5674 | ······-·NIST-800-171-3.4.5 |
| 5675 | ······-·NIST-800-53-AC-6(1) | 5675 | ······-·NIST-800-53-AC-6(1) |
| 5676 | ······-·NIST-800-53-CM-6(a) | 5676 | ······-·NIST-800-53-CM-6(a) |
| Offset 5684, 16 lines modified | Offset 5684, 16 lines modified | ||
| 5684 | ······-·no_reboot_needed | 5684 | ······-·no_reboot_needed |
| Max diff block lines reached; 11371/15986 bytes (71.13%) of diff not shown. | |||
| Offset 22273, 16 lines modified | Offset 22273, 16 lines modified | ||
| 22273 | ······-·no_reboot_needed | 22273 | ······-·no_reboot_needed |
| 22274 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22274 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22275 | ······stat: | 22275 | ······stat: |
| 22276 | ········path:·/boot/grub2/grub.cfg | 22276 | ········path:·/boot/grub2/grub.cfg |
| 22277 | ······register:·file_exists | 22277 | ······register:·file_exists |
| 22278 | ······when: | 22278 | ······when: |
| 22279 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22280 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22279 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22280 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22281 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22281 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22282 | ······tags: | 22282 | ······tags: |
| 22283 | ······-·CCE-80800-6 | 22283 | ······-·CCE-80800-6 |
| 22284 | ······-·CJIS-5.5.2.2 | 22284 | ······-·CJIS-5.5.2.2 |
| 22285 | ······-·NIST-800-171-3.4.5 | 22285 | ······-·NIST-800-171-3.4.5 |
| 22286 | ······-·NIST-800-53-AC-6(1) | 22286 | ······-·NIST-800-53-AC-6(1) |
| 22287 | ······-·NIST-800-53-CM-6(a) | 22287 | ······-·NIST-800-53-CM-6(a) |
| Offset 22295, 16 lines modified | Offset 22295, 16 lines modified | ||
| 22295 | ······-·no_reboot_needed | 22295 | ······-·no_reboot_needed |
| 22296 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 22296 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 22297 | ······file: | 22297 | ······file: |
| 22298 | ········path:·/boot/grub2/grub.cfg | 22298 | ········path:·/boot/grub2/grub.cfg |
| 22299 | ········group:·'0' | 22299 | ········group:·'0' |
| 22300 | ······when: | 22300 | ······when: |
| 22301 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22302 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22301 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22302 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22303 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22303 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22304 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22304 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22305 | ······tags: | 22305 | ······tags: |
| 22306 | ······-·CCE-80800-6 | 22306 | ······-·CCE-80800-6 |
| 22307 | ······-·CJIS-5.5.2.2 | 22307 | ······-·CJIS-5.5.2.2 |
| 22308 | ······-·NIST-800-171-3.4.5 | 22308 | ······-·NIST-800-171-3.4.5 |
| 22309 | ······-·NIST-800-53-AC-6(1) | 22309 | ······-·NIST-800-53-AC-6(1) |
| Offset 22336, 16 lines modified | Offset 22336, 16 lines modified | ||
| 22336 | ······-·no_reboot_needed | 22336 | ······-·no_reboot_needed |
| 22337 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22337 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22338 | ······stat: | 22338 | ······stat: |
| 22339 | ········path:·/boot/grub2/user.cfg | 22339 | ········path:·/boot/grub2/user.cfg |
| 22340 | ······register:·file_exists | 22340 | ······register:·file_exists |
| 22341 | ······when: | 22341 | ······when: |
| 22342 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22343 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22342 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22343 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22344 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22344 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22345 | ······tags: | 22345 | ······tags: |
| 22346 | ······-·CCE-86009-8 | 22346 | ······-·CCE-86009-8 |
| 22347 | ······-·CJIS-5.5.2.2 | 22347 | ······-·CJIS-5.5.2.2 |
| 22348 | ······-·NIST-800-171-3.4.5 | 22348 | ······-·NIST-800-171-3.4.5 |
| 22349 | ······-·NIST-800-53-AC-6(1) | 22349 | ······-·NIST-800-53-AC-6(1) |
| 22350 | ······-·NIST-800-53-CM-6(a) | 22350 | ······-·NIST-800-53-CM-6(a) |
| Offset 22358, 16 lines modified | Offset 22358, 16 lines modified | ||
| 22358 | ······-·no_reboot_needed | 22358 | ······-·no_reboot_needed |
| 22359 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 22359 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 22360 | ······file: | 22360 | ······file: |
| 22361 | ········path:·/boot/grub2/user.cfg | 22361 | ········path:·/boot/grub2/user.cfg |
| 22362 | ········group:·'0' | 22362 | ········group:·'0' |
| 22363 | ······when: | 22363 | ······when: |
| 22364 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22365 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22364 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22365 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22366 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22366 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22367 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22367 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22368 | ······tags: | 22368 | ······tags: |
| 22369 | ······-·CCE-86009-8 | 22369 | ······-·CCE-86009-8 |
| 22370 | ······-·CJIS-5.5.2.2 | 22370 | ······-·CJIS-5.5.2.2 |
| 22371 | ······-·NIST-800-171-3.4.5 | 22371 | ······-·NIST-800-171-3.4.5 |
| 22372 | ······-·NIST-800-53-AC-6(1) | 22372 | ······-·NIST-800-53-AC-6(1) |
| Offset 22399, 16 lines modified | Offset 22399, 16 lines modified | ||
| 22399 | ······-·no_reboot_needed | 22399 | ······-·no_reboot_needed |
| 22400 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22400 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22401 | ······stat: | 22401 | ······stat: |
| 22402 | ········path:·/boot/grub2/grub.cfg | 22402 | ········path:·/boot/grub2/grub.cfg |
| 22403 | ······register:·file_exists | 22403 | ······register:·file_exists |
| 22404 | ······when: | 22404 | ······when: |
| 22405 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22406 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22405 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22406 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22407 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22407 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22408 | ······tags: | 22408 | ······tags: |
| 22409 | ······-·CCE-80805-5 | 22409 | ······-·CCE-80805-5 |
| 22410 | ······-·CJIS-5.5.2.2 | 22410 | ······-·CJIS-5.5.2.2 |
| 22411 | ······-·NIST-800-171-3.4.5 | 22411 | ······-·NIST-800-171-3.4.5 |
| 22412 | ······-·NIST-800-53-AC-6(1) | 22412 | ······-·NIST-800-53-AC-6(1) |
| 22413 | ······-·NIST-800-53-CM-6(a) | 22413 | ······-·NIST-800-53-CM-6(a) |
| Offset 22421, 16 lines modified | Offset 22421, 16 lines modified | ||
| 22421 | ······-·no_reboot_needed | 22421 | ······-·no_reboot_needed |
| 22422 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 22422 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 22423 | ······file: | 22423 | ······file: |
| 22424 | ········path:·/boot/grub2/grub.cfg | 22424 | ········path:·/boot/grub2/grub.cfg |
| 22425 | ········owner:·'0' | 22425 | ········owner:·'0' |
| 22426 | ······when: | 22426 | ······when: |
| 22427 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22428 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22427 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22428 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22429 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22429 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22430 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22430 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22431 | ······tags: | 22431 | ······tags: |
| 22432 | ······-·CCE-80805-5 | 22432 | ······-·CCE-80805-5 |
| 22433 | ······-·CJIS-5.5.2.2 | 22433 | ······-·CJIS-5.5.2.2 |
| 22434 | ······-·NIST-800-171-3.4.5 | 22434 | ······-·NIST-800-171-3.4.5 |
| 22435 | ······-·NIST-800-53-AC-6(1) | 22435 | ······-·NIST-800-53-AC-6(1) |
| Offset 22462, 16 lines modified | Offset 22462, 16 lines modified | ||
| 22462 | ······-·no_reboot_needed | 22462 | ······-·no_reboot_needed |
| 22463 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22463 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22464 | ······stat: | 22464 | ······stat: |
| 22465 | ········path:·/boot/grub2/user.cfg | 22465 | ········path:·/boot/grub2/user.cfg |
| 22466 | ······register:·file_exists | 22466 | ······register:·file_exists |
| 22467 | ······when: | 22467 | ······when: |
| 22468 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22469 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22468 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22469 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22470 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22470 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22471 | ······tags: | 22471 | ······tags: |
| 22472 | ······-·CCE-86015-5 | 22472 | ······-·CCE-86015-5 |
| 22473 | ······-·CJIS-5.5.2.2 | 22473 | ······-·CJIS-5.5.2.2 |
| 22474 | ······-·NIST-800-171-3.4.5 | 22474 | ······-·NIST-800-171-3.4.5 |
| 22475 | ······-·NIST-800-53-AC-6(1) | 22475 | ······-·NIST-800-53-AC-6(1) |
| 22476 | ······-·NIST-800-53-CM-6(a) | 22476 | ······-·NIST-800-53-CM-6(a) |
| Offset 22484, 16 lines modified | Offset 22484, 16 lines modified | ||
| 22484 | ······-·no_reboot_needed | 22484 | ······-·no_reboot_needed |
| Max diff block lines reached; 11403/16034 bytes (71.12%) of diff not shown. | |||
| Offset 13831, 16 lines modified | Offset 13831, 16 lines modified | ||
| 13831 | ······-·no_reboot_needed | 13831 | ······-·no_reboot_needed |
| 13832 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 13832 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 13833 | ······stat: | 13833 | ······stat: |
| 13834 | ········path:·/boot/grub2/grub.cfg | 13834 | ········path:·/boot/grub2/grub.cfg |
| 13835 | ······register:·file_exists | 13835 | ······register:·file_exists |
| 13836 | ······when: | 13836 | ······when: |
| 13837 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13838 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13837 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13838 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13839 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13839 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13840 | ······tags: | 13840 | ······tags: |
| 13841 | ······-·CCE-80800-6 | 13841 | ······-·CCE-80800-6 |
| 13842 | ······-·CJIS-5.5.2.2 | 13842 | ······-·CJIS-5.5.2.2 |
| 13843 | ······-·NIST-800-171-3.4.5 | 13843 | ······-·NIST-800-171-3.4.5 |
| 13844 | ······-·NIST-800-53-AC-6(1) | 13844 | ······-·NIST-800-53-AC-6(1) |
| 13845 | ······-·NIST-800-53-CM-6(a) | 13845 | ······-·NIST-800-53-CM-6(a) |
| Offset 13853, 16 lines modified | Offset 13853, 16 lines modified | ||
| 13853 | ······-·no_reboot_needed | 13853 | ······-·no_reboot_needed |
| 13854 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 13854 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 13855 | ······file: | 13855 | ······file: |
| 13856 | ········path:·/boot/grub2/grub.cfg | 13856 | ········path:·/boot/grub2/grub.cfg |
| 13857 | ········group:·'0' | 13857 | ········group:·'0' |
| 13858 | ······when: | 13858 | ······when: |
| 13859 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13860 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13859 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13860 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13861 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13861 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13862 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 13862 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 13863 | ······tags: | 13863 | ······tags: |
| 13864 | ······-·CCE-80800-6 | 13864 | ······-·CCE-80800-6 |
| 13865 | ······-·CJIS-5.5.2.2 | 13865 | ······-·CJIS-5.5.2.2 |
| 13866 | ······-·NIST-800-171-3.4.5 | 13866 | ······-·NIST-800-171-3.4.5 |
| 13867 | ······-·NIST-800-53-AC-6(1) | 13867 | ······-·NIST-800-53-AC-6(1) |
| Offset 13894, 16 lines modified | Offset 13894, 16 lines modified | ||
| 13894 | ······-·no_reboot_needed | 13894 | ······-·no_reboot_needed |
| 13895 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 13895 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 13896 | ······stat: | 13896 | ······stat: |
| 13897 | ········path:·/boot/grub2/grub.cfg | 13897 | ········path:·/boot/grub2/grub.cfg |
| 13898 | ······register:·file_exists | 13898 | ······register:·file_exists |
| 13899 | ······when: | 13899 | ······when: |
| 13900 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13901 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13900 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13901 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13902 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13902 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13903 | ······tags: | 13903 | ······tags: |
| 13904 | ······-·CCE-80805-5 | 13904 | ······-·CCE-80805-5 |
| 13905 | ······-·CJIS-5.5.2.2 | 13905 | ······-·CJIS-5.5.2.2 |
| 13906 | ······-·NIST-800-171-3.4.5 | 13906 | ······-·NIST-800-171-3.4.5 |
| 13907 | ······-·NIST-800-53-AC-6(1) | 13907 | ······-·NIST-800-53-AC-6(1) |
| 13908 | ······-·NIST-800-53-CM-6(a) | 13908 | ······-·NIST-800-53-CM-6(a) |
| Offset 13916, 16 lines modified | Offset 13916, 16 lines modified | ||
| 13916 | ······-·no_reboot_needed | 13916 | ······-·no_reboot_needed |
| 13917 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 13917 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 13918 | ······file: | 13918 | ······file: |
| 13919 | ········path:·/boot/grub2/grub.cfg | 13919 | ········path:·/boot/grub2/grub.cfg |
| 13920 | ········owner:·'0' | 13920 | ········owner:·'0' |
| 13921 | ······when: | 13921 | ······when: |
| 13922 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13923 | ······-·'"grub2-common"·in·ansible_facts.packages' | 13922 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 13923 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 13924 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13924 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13925 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 13925 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 13926 | ······tags: | 13926 | ······tags: |
| 13927 | ······-·CCE-80805-5 | 13927 | ······-·CCE-80805-5 |
| 13928 | ······-·CJIS-5.5.2.2 | 13928 | ······-·CJIS-5.5.2.2 |
| 13929 | ······-·NIST-800-171-3.4.5 | 13929 | ······-·NIST-800-171-3.4.5 |
| 13930 | ······-·NIST-800-53-AC-6(1) | 13930 | ······-·NIST-800-53-AC-6(1) |
| Offset 22603, 16 lines modified | Offset 22603, 16 lines modified | ||
| 22603 | ······-·no_reboot_needed | 22603 | ······-·no_reboot_needed |
| 22604 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22604 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22605 | ······stat: | 22605 | ······stat: |
| 22606 | ········path:·/boot/grub2/grub.cfg | 22606 | ········path:·/boot/grub2/grub.cfg |
| 22607 | ······register:·file_exists | 22607 | ······register:·file_exists |
| 22608 | ······when: | 22608 | ······when: |
| 22609 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22610 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22609 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22610 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22611 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22611 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22612 | ······tags: | 22612 | ······tags: |
| 22613 | ······-·CCE-80800-6 | 22613 | ······-·CCE-80800-6 |
| 22614 | ······-·CJIS-5.5.2.2 | 22614 | ······-·CJIS-5.5.2.2 |
| 22615 | ······-·NIST-800-171-3.4.5 | 22615 | ······-·NIST-800-171-3.4.5 |
| 22616 | ······-·NIST-800-53-AC-6(1) | 22616 | ······-·NIST-800-53-AC-6(1) |
| 22617 | ······-·NIST-800-53-CM-6(a) | 22617 | ······-·NIST-800-53-CM-6(a) |
| Offset 22625, 16 lines modified | Offset 22625, 16 lines modified | ||
| 22625 | ······-·no_reboot_needed | 22625 | ······-·no_reboot_needed |
| 22626 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 22626 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 22627 | ······file: | 22627 | ······file: |
| 22628 | ········path:·/boot/grub2/grub.cfg | 22628 | ········path:·/boot/grub2/grub.cfg |
| 22629 | ········group:·'0' | 22629 | ········group:·'0' |
| 22630 | ······when: | 22630 | ······when: |
| 22631 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22632 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22631 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22632 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22633 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22633 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22634 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22634 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22635 | ······tags: | 22635 | ······tags: |
| 22636 | ······-·CCE-80800-6 | 22636 | ······-·CCE-80800-6 |
| 22637 | ······-·CJIS-5.5.2.2 | 22637 | ······-·CJIS-5.5.2.2 |
| 22638 | ······-·NIST-800-171-3.4.5 | 22638 | ······-·NIST-800-171-3.4.5 |
| 22639 | ······-·NIST-800-53-AC-6(1) | 22639 | ······-·NIST-800-53-AC-6(1) |
| Offset 22666, 16 lines modified | Offset 22666, 16 lines modified | ||
| 22666 | ······-·no_reboot_needed | 22666 | ······-·no_reboot_needed |
| 22667 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22667 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22668 | ······stat: | 22668 | ······stat: |
| 22669 | ········path:·/boot/grub2/grub.cfg | 22669 | ········path:·/boot/grub2/grub.cfg |
| 22670 | ······register:·file_exists | 22670 | ······register:·file_exists |
| 22671 | ······when: | 22671 | ······when: |
| 22672 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22673 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22672 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22673 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22674 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22674 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22675 | ······tags: | 22675 | ······tags: |
| 22676 | ······-·CCE-80805-5 | 22676 | ······-·CCE-80805-5 |
| 22677 | ······-·CJIS-5.5.2.2 | 22677 | ······-·CJIS-5.5.2.2 |
| 22678 | ······-·NIST-800-171-3.4.5 | 22678 | ······-·NIST-800-171-3.4.5 |
| 22679 | ······-·NIST-800-53-AC-6(1) | 22679 | ······-·NIST-800-53-AC-6(1) |
| 22680 | ······-·NIST-800-53-CM-6(a) | 22680 | ······-·NIST-800-53-CM-6(a) |
| Offset 22688, 16 lines modified | Offset 22688, 16 lines modified | ||
| 22688 | ······-·no_reboot_needed | 22688 | ······-·no_reboot_needed |
| 22689 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 22689 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 22690 | ······file: | 22690 | ······file: |
| 22691 | ········path:·/boot/grub2/grub.cfg | 22691 | ········path:·/boot/grub2/grub.cfg |
| 22692 | ········owner:·'0' | 22692 | ········owner:·'0' |
| 22693 | ······when: | 22693 | ······when: |
| 22694 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22695 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22694 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22695 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22696 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22696 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22697 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22697 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22698 | ······tags: | 22698 | ······tags: |
| 22699 | ······-·CCE-80805-5 | 22699 | ······-·CCE-80805-5 |
| 22700 | ······-·CJIS-5.5.2.2 | 22700 | ······-·CJIS-5.5.2.2 |
| 22701 | ······-·NIST-800-171-3.4.5 | 22701 | ······-·NIST-800-171-3.4.5 |
| 22702 | ······-·NIST-800-53-AC-6(1) | 22702 | ······-·NIST-800-53-AC-6(1) |
| Offset 23406, 16 lines modified | Offset 23406, 16 lines modified | ||
| 23406 | ······-·no_reboot_needed | 23406 | ······-·no_reboot_needed |
| 23407 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 23407 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 23408 | ······stat: | 23408 | ······stat: |
| 23409 | ········path:·/boot/grub2/grub.cfg | 23409 | ········path:·/boot/grub2/grub.cfg |
| 23410 | ······register:·file_exists | 23410 | ······register:·file_exists |
| 23411 | ······when: | 23411 | ······when: |
| 23412 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23413 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23412 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23413 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23414 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23414 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23415 | ······tags: | 23415 | ······tags: |
| 23416 | ······-·CCE-80800-6 | 23416 | ······-·CCE-80800-6 |
| 23417 | ······-·CJIS-5.5.2.2 | 23417 | ······-·CJIS-5.5.2.2 |
| 23418 | ······-·NIST-800-171-3.4.5 | 23418 | ······-·NIST-800-171-3.4.5 |
| 23419 | ······-·NIST-800-53-AC-6(1) | 23419 | ······-·NIST-800-53-AC-6(1) |
| 23420 | ······-·NIST-800-53-CM-6(a) | 23420 | ······-·NIST-800-53-CM-6(a) |
| Offset 23428, 16 lines modified | Offset 23428, 16 lines modified | ||
| 23428 | ······-·no_reboot_needed | 23428 | ······-·no_reboot_needed |
| 23429 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 23429 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 23430 | ······file: | 23430 | ······file: |
| 23431 | ········path:·/boot/grub2/grub.cfg | 23431 | ········path:·/boot/grub2/grub.cfg |
| 23432 | ········group:·'0' | 23432 | ········group:·'0' |
| 23433 | ······when: | 23433 | ······when: |
| 23434 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23435 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23434 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23435 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23436 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23436 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23437 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 23437 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 23438 | ······tags: | 23438 | ······tags: |
| 23439 | ······-·CCE-80800-6 | 23439 | ······-·CCE-80800-6 |
| 23440 | ······-·CJIS-5.5.2.2 | 23440 | ······-·CJIS-5.5.2.2 |
| 23441 | ······-·NIST-800-171-3.4.5 | 23441 | ······-·NIST-800-171-3.4.5 |
| 23442 | ······-·NIST-800-53-AC-6(1) | 23442 | ······-·NIST-800-53-AC-6(1) |
| Offset 23469, 16 lines modified | Offset 23469, 16 lines modified | ||
| 23469 | ······-·no_reboot_needed | 23469 | ······-·no_reboot_needed |
| 23470 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 23470 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 23471 | ······stat: | 23471 | ······stat: |
| 23472 | ········path:·/boot/grub2/grub.cfg | 23472 | ········path:·/boot/grub2/grub.cfg |
| 23473 | ······register:·file_exists | 23473 | ······register:·file_exists |
| 23474 | ······when: | 23474 | ······when: |
| 23475 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23476 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23475 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23476 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23477 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23477 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23478 | ······tags: | 23478 | ······tags: |
| 23479 | ······-·CCE-80805-5 | 23479 | ······-·CCE-80805-5 |
| 23480 | ······-·CJIS-5.5.2.2 | 23480 | ······-·CJIS-5.5.2.2 |
| 23481 | ······-·NIST-800-171-3.4.5 | 23481 | ······-·NIST-800-171-3.4.5 |
| 23482 | ······-·NIST-800-53-AC-6(1) | 23482 | ······-·NIST-800-53-AC-6(1) |
| 23483 | ······-·NIST-800-53-CM-6(a) | 23483 | ······-·NIST-800-53-CM-6(a) |
| Offset 23491, 16 lines modified | Offset 23491, 16 lines modified | ||
| 23491 | ······-·no_reboot_needed | 23491 | ······-·no_reboot_needed |
| 23492 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 23492 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 23493 | ······file: | 23493 | ······file: |
| 23494 | ········path:·/boot/grub2/grub.cfg | 23494 | ········path:·/boot/grub2/grub.cfg |
| 23495 | ········owner:·'0' | 23495 | ········owner:·'0' |
| 23496 | ······when: | 23496 | ······when: |
| 23497 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23498 | ······-·'"grub2-common"·in·ansible_facts.packages' | 23497 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 23498 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 23499 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 23499 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 23500 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 23500 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 23501 | ······tags: | 23501 | ······tags: |
| 23502 | ······-·CCE-80805-5 | 23502 | ······-·CCE-80805-5 |
| 23503 | ······-·CJIS-5.5.2.2 | 23503 | ······-·CJIS-5.5.2.2 |
| 23504 | ······-·NIST-800-171-3.4.5 | 23504 | ······-·NIST-800-171-3.4.5 |
| 23505 | ······-·NIST-800-53-AC-6(1) | 23505 | ······-·NIST-800-53-AC-6(1) |
| Offset 3276, 16 lines modified | Offset 3276, 16 lines modified | ||
| 3276 | ······-·no_reboot_needed | 3276 | ······-·no_reboot_needed |
| 3277 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 3277 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3278 | ······stat: | 3278 | ······stat: |
| 3279 | ········path:·/boot/grub2/grub.cfg | 3279 | ········path:·/boot/grub2/grub.cfg |
| 3280 | ······register:·file_exists | 3280 | ······register:·file_exists |
| 3281 | ······when: | 3281 | ······when: |
| 3282 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3283 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3282 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3283 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3285 | ······tags: | 3285 | ······tags: |
| 3286 | ······-·CCE-80800-6 | 3286 | ······-·CCE-80800-6 |
| 3287 | ······-·CJIS-5.5.2.2 | 3287 | ······-·CJIS-5.5.2.2 |
| 3288 | ······-·NIST-800-171-3.4.5 | 3288 | ······-·NIST-800-171-3.4.5 |
| 3289 | ······-·NIST-800-53-AC-6(1) | 3289 | ······-·NIST-800-53-AC-6(1) |
| 3290 | ······-·NIST-800-53-CM-6(a) | 3290 | ······-·NIST-800-53-CM-6(a) |
| Offset 3298, 16 lines modified | Offset 3298, 16 lines modified | ||
| 3298 | ······-·no_reboot_needed | 3298 | ······-·no_reboot_needed |
| 3299 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 3299 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 3300 | ······file: | 3300 | ······file: |
| 3301 | ········path:·/boot/grub2/grub.cfg | 3301 | ········path:·/boot/grub2/grub.cfg |
| 3302 | ········group:·'0' | 3302 | ········group:·'0' |
| 3303 | ······when: | 3303 | ······when: |
| 3304 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3305 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3304 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3305 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3306 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3306 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3307 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3307 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3308 | ······tags: | 3308 | ······tags: |
| 3309 | ······-·CCE-80800-6 | 3309 | ······-·CCE-80800-6 |
| 3310 | ······-·CJIS-5.5.2.2 | 3310 | ······-·CJIS-5.5.2.2 |
| 3311 | ······-·NIST-800-171-3.4.5 | 3311 | ······-·NIST-800-171-3.4.5 |
| 3312 | ······-·NIST-800-53-AC-6(1) | 3312 | ······-·NIST-800-53-AC-6(1) |
| Offset 3339, 16 lines modified | Offset 3339, 16 lines modified | ||
| 3339 | ······-·no_reboot_needed | 3339 | ······-·no_reboot_needed |
| 3340 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 3340 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3341 | ······stat: | 3341 | ······stat: |
| 3342 | ········path:·/boot/grub2/grub.cfg | 3342 | ········path:·/boot/grub2/grub.cfg |
| 3343 | ······register:·file_exists | 3343 | ······register:·file_exists |
| 3344 | ······when: | 3344 | ······when: |
| 3345 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3346 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3345 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3346 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3347 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3347 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3348 | ······tags: | 3348 | ······tags: |
| 3349 | ······-·CCE-80805-5 | 3349 | ······-·CCE-80805-5 |
| 3350 | ······-·CJIS-5.5.2.2 | 3350 | ······-·CJIS-5.5.2.2 |
| 3351 | ······-·NIST-800-171-3.4.5 | 3351 | ······-·NIST-800-171-3.4.5 |
| 3352 | ······-·NIST-800-53-AC-6(1) | 3352 | ······-·NIST-800-53-AC-6(1) |
| 3353 | ······-·NIST-800-53-CM-6(a) | 3353 | ······-·NIST-800-53-CM-6(a) |
| Offset 3361, 16 lines modified | Offset 3361, 16 lines modified | ||
| 3361 | ······-·no_reboot_needed | 3361 | ······-·no_reboot_needed |
| 3362 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 3362 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 3363 | ······file: | 3363 | ······file: |
| 3364 | ········path:·/boot/grub2/grub.cfg | 3364 | ········path:·/boot/grub2/grub.cfg |
| 3365 | ········owner:·'0' | 3365 | ········owner:·'0' |
| 3366 | ······when: | 3366 | ······when: |
| 3367 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3368 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3367 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3368 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3369 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3369 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3370 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3370 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3371 | ······tags: | 3371 | ······tags: |
| 3372 | ······-·CCE-80805-5 | 3372 | ······-·CCE-80805-5 |
| 3373 | ······-·CJIS-5.5.2.2 | 3373 | ······-·CJIS-5.5.2.2 |
| 3374 | ······-·NIST-800-171-3.4.5 | 3374 | ······-·NIST-800-171-3.4.5 |
| 3375 | ······-·NIST-800-53-AC-6(1) | 3375 | ······-·NIST-800-53-AC-6(1) |
| Offset 3400, 16 lines modified | Offset 3400, 16 lines modified | ||
| 3400 | ······-·no_reboot_needed | 3400 | ······-·no_reboot_needed |
| 3401 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 3401 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 3402 | ······stat: | 3402 | ······stat: |
| 3403 | ········path:·/boot/grub2/grub.cfg | 3403 | ········path:·/boot/grub2/grub.cfg |
| 3404 | ······register:·file_exists | 3404 | ······register:·file_exists |
| 3405 | ······when: | 3405 | ······when: |
| 3406 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3407 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3406 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3407 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3408 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3408 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3409 | ······tags: | 3409 | ······tags: |
| 3410 | ······-·CCE-80814-7 | 3410 | ······-·CCE-80814-7 |
| 3411 | ······-·NIST-800-171-3.4.5 | 3411 | ······-·NIST-800-171-3.4.5 |
| 3412 | ······-·NIST-800-53-AC-6(1) | 3412 | ······-·NIST-800-53-AC-6(1) |
| 3413 | ······-·NIST-800-53-CM-6(a) | 3413 | ······-·NIST-800-53-CM-6(a) |
| 3414 | ······-·configure_strategy | 3414 | ······-·configure_strategy |
| Offset 3420, 16 lines modified | Offset 3420, 16 lines modified | ||
| 3420 | ······-·no_reboot_needed | 3420 | ······-·no_reboot_needed |
| 3421 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 3421 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 3422 | ······file: | 3422 | ······file: |
| 3423 | ········path:·/boot/grub2/grub.cfg | 3423 | ········path:·/boot/grub2/grub.cfg |
| 3424 | ········mode:·u-xs,g-xwrs,o-xwrt | 3424 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 3425 | ······when: | 3425 | ······when: |
| 3426 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3427 | ······-·'"grub2-common"·in·ansible_facts.packages' | 3426 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 3427 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 3428 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3428 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3429 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 3429 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 3430 | ······tags: | 3430 | ······tags: |
| 3431 | ······-·CCE-80814-7 | 3431 | ······-·CCE-80814-7 |
| 3432 | ······-·NIST-800-171-3.4.5 | 3432 | ······-·NIST-800-171-3.4.5 |
| 3433 | ······-·NIST-800-53-AC-6(1) | 3433 | ······-·NIST-800-53-AC-6(1) |
| 3434 | ······-·NIST-800-53-CM-6(a) | 3434 | ······-·NIST-800-53-CM-6(a) |
| Offset 38420, 16 lines modified | Offset 38420, 16 lines modified | ||
| 38420 | ········lineinfile: | 38420 | ········lineinfile: |
| 38421 | ··········path:·/etc/postfix/main.cf | 38421 | ··········path:·/etc/postfix/main.cf |
| 38422 | ··········create:·true | 38422 | ··········create:·true |
| 38423 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 38423 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 38424 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 38424 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 38425 | ··········state:·present | 38425 | ··········state:·present |
| 38426 | ······when: | 38426 | ······when: |
| 38427 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 38428 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38427 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38428 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 38429 | ······tags: | 38429 | ······tags: |
| 38430 | ······-·CCE-84054-6 | 38430 | ······-·CCE-84054-6 |
| 38431 | ······-·DISA-STIG-RHEL-08-040290 | 38431 | ······-·DISA-STIG-RHEL-08-040290 |
| 38432 | ······-·low_complexity | 38432 | ······-·low_complexity |
| 38433 | ······-·low_disruption | 38433 | ······-·low_disruption |
| 38434 | ······-·medium_severity | 38434 | ······-·medium_severity |
| 38435 | ······-·no_reboot_needed | 38435 | ······-·no_reboot_needed |
| Offset 38410, 16 lines modified | Offset 38410, 16 lines modified | ||
| 38410 | ········lineinfile: | 38410 | ········lineinfile: |
| 38411 | ··········path:·/etc/postfix/main.cf | 38411 | ··········path:·/etc/postfix/main.cf |
| 38412 | ··········create:·true | 38412 | ··········create:·true |
| 38413 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 38413 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 38414 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 38414 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 38415 | ··········state:·present | 38415 | ··········state:·present |
| 38416 | ······when: | 38416 | ······when: |
| 38417 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 38418 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 38417 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 38418 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 38419 | ······tags: | 38419 | ······tags: |
| 38420 | ······-·CCE-84054-6 | 38420 | ······-·CCE-84054-6 |
| 38421 | ······-·DISA-STIG-RHEL-08-040290 | 38421 | ······-·DISA-STIG-RHEL-08-040290 |
| 38422 | ······-·low_complexity | 38422 | ······-·low_complexity |
| 38423 | ······-·low_disruption | 38423 | ······-·low_disruption |
| 38424 | ······-·medium_severity | 38424 | ······-·medium_severity |
| 38425 | ······-·no_reboot_needed | 38425 | ······-·no_reboot_needed |
| Offset 22191, 16 lines modified | Offset 22191, 16 lines modified | ||
| 22191 | ······-·no_reboot_needed | 22191 | ······-·no_reboot_needed |
| 22192 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22192 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22193 | ······stat: | 22193 | ······stat: |
| 22194 | ········path:·/boot/grub2/user.cfg | 22194 | ········path:·/boot/grub2/user.cfg |
| 22195 | ······register:·file_exists | 22195 | ······register:·file_exists |
| 22196 | ······when: | 22196 | ······when: |
| 22197 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22198 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22197 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22198 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22199 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22199 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22200 | ······tags: | 22200 | ······tags: |
| 22201 | ······-·CCE-86013-0 | 22201 | ······-·CCE-86013-0 |
| 22202 | ······-·CJIS-5.5.2.2 | 22202 | ······-·CJIS-5.5.2.2 |
| 22203 | ······-·NIST-800-171-3.4.5 | 22203 | ······-·NIST-800-171-3.4.5 |
| 22204 | ······-·NIST-800-53-AC-6(1) | 22204 | ······-·NIST-800-53-AC-6(1) |
| 22205 | ······-·NIST-800-53-CM-6(a) | 22205 | ······-·NIST-800-53-CM-6(a) |
| Offset 22213, 16 lines modified | Offset 22213, 16 lines modified | ||
| 22213 | ······-·no_reboot_needed | 22213 | ······-·no_reboot_needed |
| 22214 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 22214 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 22215 | ······file: | 22215 | ······file: |
| 22216 | ········path:·/boot/grub2/user.cfg | 22216 | ········path:·/boot/grub2/user.cfg |
| 22217 | ········group:·'0' | 22217 | ········group:·'0' |
| 22218 | ······when: | 22218 | ······when: |
| 22219 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22220 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22219 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22220 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22221 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22221 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22222 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22222 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22223 | ······tags: | 22223 | ······tags: |
| 22224 | ······-·CCE-86013-0 | 22224 | ······-·CCE-86013-0 |
| 22225 | ······-·CJIS-5.5.2.2 | 22225 | ······-·CJIS-5.5.2.2 |
| 22226 | ······-·NIST-800-171-3.4.5 | 22226 | ······-·NIST-800-171-3.4.5 |
| 22227 | ······-·NIST-800-53-AC-6(1) | 22227 | ······-·NIST-800-53-AC-6(1) |
| Offset 22254, 16 lines modified | Offset 22254, 16 lines modified | ||
| 22254 | ······-·no_reboot_needed | 22254 | ······-·no_reboot_needed |
| 22255 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22255 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22256 | ······stat: | 22256 | ······stat: |
| 22257 | ········path:·/boot/grub2/user.cfg | 22257 | ········path:·/boot/grub2/user.cfg |
| 22258 | ······register:·file_exists | 22258 | ······register:·file_exists |
| 22259 | ······when: | 22259 | ······when: |
| 22260 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22261 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22260 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22261 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22262 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22262 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22263 | ······tags: | 22263 | ······tags: |
| 22264 | ······-·CCE-86022-1 | 22264 | ······-·CCE-86022-1 |
| 22265 | ······-·CJIS-5.5.2.2 | 22265 | ······-·CJIS-5.5.2.2 |
| 22266 | ······-·NIST-800-171-3.4.5 | 22266 | ······-·NIST-800-171-3.4.5 |
| 22267 | ······-·NIST-800-53-AC-6(1) | 22267 | ······-·NIST-800-53-AC-6(1) |
| 22268 | ······-·NIST-800-53-CM-6(a) | 22268 | ······-·NIST-800-53-CM-6(a) |
| Offset 22276, 16 lines modified | Offset 22276, 16 lines modified | ||
| 22276 | ······-·no_reboot_needed | 22276 | ······-·no_reboot_needed |
| 22277 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 22277 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 22278 | ······file: | 22278 | ······file: |
| 22279 | ········path:·/boot/grub2/user.cfg | 22279 | ········path:·/boot/grub2/user.cfg |
| 22280 | ········owner:·'0' | 22280 | ········owner:·'0' |
| 22281 | ······when: | 22281 | ······when: |
| 22282 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22283 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22282 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22283 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22285 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22285 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22286 | ······tags: | 22286 | ······tags: |
| 22287 | ······-·CCE-86022-1 | 22287 | ······-·CCE-86022-1 |
| 22288 | ······-·CJIS-5.5.2.2 | 22288 | ······-·CJIS-5.5.2.2 |
| 22289 | ······-·NIST-800-171-3.4.5 | 22289 | ······-·NIST-800-171-3.4.5 |
| 22290 | ······-·NIST-800-53-AC-6(1) | 22290 | ······-·NIST-800-53-AC-6(1) |
| Offset 22315, 16 lines modified | Offset 22315, 16 lines modified | ||
| 22315 | ······-·no_reboot_needed | 22315 | ······-·no_reboot_needed |
| 22316 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22316 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22317 | ······stat: | 22317 | ······stat: |
| 22318 | ········path:·/boot/grub2/grub.cfg | 22318 | ········path:·/boot/grub2/grub.cfg |
| 22319 | ······register:·file_exists | 22319 | ······register:·file_exists |
| 22320 | ······when: | 22320 | ······when: |
| 22321 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22322 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22321 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22322 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22324 | ······tags: | 22324 | ······tags: |
| 22325 | ······-·CCE-85925-6 | 22325 | ······-·CCE-85925-6 |
| 22326 | ······-·NIST-800-171-3.4.5 | 22326 | ······-·NIST-800-171-3.4.5 |
| 22327 | ······-·NIST-800-53-AC-6(1) | 22327 | ······-·NIST-800-53-AC-6(1) |
| 22328 | ······-·NIST-800-53-CM-6(a) | 22328 | ······-·NIST-800-53-CM-6(a) |
| 22329 | ······-·configure_strategy | 22329 | ······-·configure_strategy |
| Offset 22335, 16 lines modified | Offset 22335, 16 lines modified | ||
| 22335 | ······-·no_reboot_needed | 22335 | ······-·no_reboot_needed |
| 22336 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 22336 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 22337 | ······file: | 22337 | ······file: |
| 22338 | ········path:·/boot/grub2/grub.cfg | 22338 | ········path:·/boot/grub2/grub.cfg |
| 22339 | ········mode:·u-s,g-xwrs,o-xwrt | 22339 | ········mode:·u-s,g-xwrs,o-xwrt |
| 22340 | ······when: | 22340 | ······when: |
| 22341 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22342 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22341 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22342 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22344 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22344 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22345 | ······tags: | 22345 | ······tags: |
| 22346 | ······-·CCE-85925-6 | 22346 | ······-·CCE-85925-6 |
| 22347 | ······-·NIST-800-171-3.4.5 | 22347 | ······-·NIST-800-171-3.4.5 |
| 22348 | ······-·NIST-800-53-AC-6(1) | 22348 | ······-·NIST-800-53-AC-6(1) |
| 22349 | ······-·NIST-800-53-CM-6(a) | 22349 | ······-·NIST-800-53-CM-6(a) |
| Offset 22372, 16 lines modified | Offset 22372, 16 lines modified | ||
| 22372 | ······-·no_reboot_needed | 22372 | ······-·no_reboot_needed |
| 22373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22374 | ······stat: | 22374 | ······stat: |
| 22375 | ········path:·/boot/grub2/user.cfg | 22375 | ········path:·/boot/grub2/user.cfg |
| 22376 | ······register:·file_exists | 22376 | ······register:·file_exists |
| 22377 | ······when: | 22377 | ······when: |
| 22378 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22379 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22378 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22379 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22381 | ······tags: | 22381 | ······tags: |
| 22382 | ······-·CCE-86029-6 | 22382 | ······-·CCE-86029-6 |
| 22383 | ······-·NIST-800-171-3.4.5 | 22383 | ······-·NIST-800-171-3.4.5 |
| 22384 | ······-·NIST-800-53-AC-6(1) | 22384 | ······-·NIST-800-53-AC-6(1) |
| 22385 | ······-·NIST-800-53-CM-6(a) | 22385 | ······-·NIST-800-53-CM-6(a) |
| 22386 | ······-·configure_strategy | 22386 | ······-·configure_strategy |
| Offset 22392, 16 lines modified | Offset 22392, 16 lines modified | ||
| 22392 | ······-·no_reboot_needed | 22392 | ······-·no_reboot_needed |
| Max diff block lines reached; 648/5270 bytes (12.30%) of diff not shown. | |||
| Offset 5572, 16 lines modified | Offset 5572, 16 lines modified | ||
| 5572 | ······-·no_reboot_needed | 5572 | ······-·no_reboot_needed |
| 5573 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5573 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5574 | ······stat: | 5574 | ······stat: |
| 5575 | ········path:·/boot/grub2/user.cfg | 5575 | ········path:·/boot/grub2/user.cfg |
| 5576 | ······register:·file_exists | 5576 | ······register:·file_exists |
| 5577 | ······when: | 5577 | ······when: |
| 5578 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5579 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5578 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5579 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5580 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5580 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5581 | ······tags: | 5581 | ······tags: |
| 5582 | ······-·CCE-86013-0 | 5582 | ······-·CCE-86013-0 |
| 5583 | ······-·CJIS-5.5.2.2 | 5583 | ······-·CJIS-5.5.2.2 |
| 5584 | ······-·NIST-800-171-3.4.5 | 5584 | ······-·NIST-800-171-3.4.5 |
| 5585 | ······-·NIST-800-53-AC-6(1) | 5585 | ······-·NIST-800-53-AC-6(1) |
| 5586 | ······-·NIST-800-53-CM-6(a) | 5586 | ······-·NIST-800-53-CM-6(a) |
| Offset 5594, 16 lines modified | Offset 5594, 16 lines modified | ||
| 5594 | ······-·no_reboot_needed | 5594 | ······-·no_reboot_needed |
| 5595 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5595 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5596 | ······file: | 5596 | ······file: |
| 5597 | ········path:·/boot/grub2/user.cfg | 5597 | ········path:·/boot/grub2/user.cfg |
| 5598 | ········group:·'0' | 5598 | ········group:·'0' |
| 5599 | ······when: | 5599 | ······when: |
| 5600 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5601 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5600 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5601 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5602 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5602 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5603 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5603 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5604 | ······tags: | 5604 | ······tags: |
| 5605 | ······-·CCE-86013-0 | 5605 | ······-·CCE-86013-0 |
| 5606 | ······-·CJIS-5.5.2.2 | 5606 | ······-·CJIS-5.5.2.2 |
| 5607 | ······-·NIST-800-171-3.4.5 | 5607 | ······-·NIST-800-171-3.4.5 |
| 5608 | ······-·NIST-800-53-AC-6(1) | 5608 | ······-·NIST-800-53-AC-6(1) |
| Offset 5635, 16 lines modified | Offset 5635, 16 lines modified | ||
| 5635 | ······-·no_reboot_needed | 5635 | ······-·no_reboot_needed |
| 5636 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5636 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5637 | ······stat: | 5637 | ······stat: |
| 5638 | ········path:·/boot/grub2/user.cfg | 5638 | ········path:·/boot/grub2/user.cfg |
| 5639 | ······register:·file_exists | 5639 | ······register:·file_exists |
| 5640 | ······when: | 5640 | ······when: |
| 5641 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5642 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5641 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5642 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5643 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5643 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5644 | ······tags: | 5644 | ······tags: |
| 5645 | ······-·CCE-86022-1 | 5645 | ······-·CCE-86022-1 |
| 5646 | ······-·CJIS-5.5.2.2 | 5646 | ······-·CJIS-5.5.2.2 |
| 5647 | ······-·NIST-800-171-3.4.5 | 5647 | ······-·NIST-800-171-3.4.5 |
| 5648 | ······-·NIST-800-53-AC-6(1) | 5648 | ······-·NIST-800-53-AC-6(1) |
| 5649 | ······-·NIST-800-53-CM-6(a) | 5649 | ······-·NIST-800-53-CM-6(a) |
| Offset 5657, 16 lines modified | Offset 5657, 16 lines modified | ||
| 5657 | ······-·no_reboot_needed | 5657 | ······-·no_reboot_needed |
| 5658 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 5658 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 5659 | ······file: | 5659 | ······file: |
| 5660 | ········path:·/boot/grub2/user.cfg | 5660 | ········path:·/boot/grub2/user.cfg |
| 5661 | ········owner:·'0' | 5661 | ········owner:·'0' |
| 5662 | ······when: | 5662 | ······when: |
| 5663 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5664 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5663 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5664 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5665 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5665 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5666 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5666 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5667 | ······tags: | 5667 | ······tags: |
| 5668 | ······-·CCE-86022-1 | 5668 | ······-·CCE-86022-1 |
| 5669 | ······-·CJIS-5.5.2.2 | 5669 | ······-·CJIS-5.5.2.2 |
| 5670 | ······-·NIST-800-171-3.4.5 | 5670 | ······-·NIST-800-171-3.4.5 |
| 5671 | ······-·NIST-800-53-AC-6(1) | 5671 | ······-·NIST-800-53-AC-6(1) |
| Offset 5696, 16 lines modified | Offset 5696, 16 lines modified | ||
| 5696 | ······-·no_reboot_needed | 5696 | ······-·no_reboot_needed |
| 5697 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5697 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5698 | ······stat: | 5698 | ······stat: |
| 5699 | ········path:·/boot/grub2/grub.cfg | 5699 | ········path:·/boot/grub2/grub.cfg |
| 5700 | ······register:·file_exists | 5700 | ······register:·file_exists |
| 5701 | ······when: | 5701 | ······when: |
| 5702 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5703 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5702 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5703 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5704 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5704 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5705 | ······tags: | 5705 | ······tags: |
| 5706 | ······-·CCE-85925-6 | 5706 | ······-·CCE-85925-6 |
| 5707 | ······-·NIST-800-171-3.4.5 | 5707 | ······-·NIST-800-171-3.4.5 |
| 5708 | ······-·NIST-800-53-AC-6(1) | 5708 | ······-·NIST-800-53-AC-6(1) |
| 5709 | ······-·NIST-800-53-CM-6(a) | 5709 | ······-·NIST-800-53-CM-6(a) |
| 5710 | ······-·configure_strategy | 5710 | ······-·configure_strategy |
| Offset 5716, 16 lines modified | Offset 5716, 16 lines modified | ||
| 5716 | ······-·no_reboot_needed | 5716 | ······-·no_reboot_needed |
| 5717 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5717 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5718 | ······file: | 5718 | ······file: |
| 5719 | ········path:·/boot/grub2/grub.cfg | 5719 | ········path:·/boot/grub2/grub.cfg |
| 5720 | ········mode:·u-s,g-xwrs,o-xwrt | 5720 | ········mode:·u-s,g-xwrs,o-xwrt |
| 5721 | ······when: | 5721 | ······when: |
| 5722 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5723 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5722 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5723 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5724 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5724 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5725 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5725 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5726 | ······tags: | 5726 | ······tags: |
| 5727 | ······-·CCE-85925-6 | 5727 | ······-·CCE-85925-6 |
| 5728 | ······-·NIST-800-171-3.4.5 | 5728 | ······-·NIST-800-171-3.4.5 |
| 5729 | ······-·NIST-800-53-AC-6(1) | 5729 | ······-·NIST-800-53-AC-6(1) |
| 5730 | ······-·NIST-800-53-CM-6(a) | 5730 | ······-·NIST-800-53-CM-6(a) |
| Offset 5753, 16 lines modified | Offset 5753, 16 lines modified | ||
| 5753 | ······-·no_reboot_needed | 5753 | ······-·no_reboot_needed |
| 5754 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5754 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5755 | ······stat: | 5755 | ······stat: |
| 5756 | ········path:·/boot/grub2/user.cfg | 5756 | ········path:·/boot/grub2/user.cfg |
| 5757 | ······register:·file_exists | 5757 | ······register:·file_exists |
| 5758 | ······when: | 5758 | ······when: |
| 5759 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5760 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5759 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5760 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5761 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5761 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5762 | ······tags: | 5762 | ······tags: |
| 5763 | ······-·CCE-86029-6 | 5763 | ······-·CCE-86029-6 |
| 5764 | ······-·NIST-800-171-3.4.5 | 5764 | ······-·NIST-800-171-3.4.5 |
| 5765 | ······-·NIST-800-53-AC-6(1) | 5765 | ······-·NIST-800-53-AC-6(1) |
| 5766 | ······-·NIST-800-53-CM-6(a) | 5766 | ······-·NIST-800-53-CM-6(a) |
| 5767 | ······-·configure_strategy | 5767 | ······-·configure_strategy |
| Offset 5773, 16 lines modified | Offset 5773, 16 lines modified | ||
| 5773 | ······-·no_reboot_needed | 5773 | ······-·no_reboot_needed |
| Max diff block lines reached; 648/5254 bytes (12.33%) of diff not shown. | |||
| Offset 5572, 16 lines modified | Offset 5572, 16 lines modified | ||
| 5572 | ······-·no_reboot_needed | 5572 | ······-·no_reboot_needed |
| 5573 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5573 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5574 | ······stat: | 5574 | ······stat: |
| 5575 | ········path:·/boot/grub2/user.cfg | 5575 | ········path:·/boot/grub2/user.cfg |
| 5576 | ······register:·file_exists | 5576 | ······register:·file_exists |
| 5577 | ······when: | 5577 | ······when: |
| 5578 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5579 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5578 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5579 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5580 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5580 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5581 | ······tags: | 5581 | ······tags: |
| 5582 | ······-·CCE-86013-0 | 5582 | ······-·CCE-86013-0 |
| 5583 | ······-·CJIS-5.5.2.2 | 5583 | ······-·CJIS-5.5.2.2 |
| 5584 | ······-·NIST-800-171-3.4.5 | 5584 | ······-·NIST-800-171-3.4.5 |
| 5585 | ······-·NIST-800-53-AC-6(1) | 5585 | ······-·NIST-800-53-AC-6(1) |
| 5586 | ······-·NIST-800-53-CM-6(a) | 5586 | ······-·NIST-800-53-CM-6(a) |
| Offset 5594, 16 lines modified | Offset 5594, 16 lines modified | ||
| 5594 | ······-·no_reboot_needed | 5594 | ······-·no_reboot_needed |
| 5595 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 5595 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 5596 | ······file: | 5596 | ······file: |
| 5597 | ········path:·/boot/grub2/user.cfg | 5597 | ········path:·/boot/grub2/user.cfg |
| 5598 | ········group:·'0' | 5598 | ········group:·'0' |
| 5599 | ······when: | 5599 | ······when: |
| 5600 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5601 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5600 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5601 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5602 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5602 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5603 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5603 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5604 | ······tags: | 5604 | ······tags: |
| 5605 | ······-·CCE-86013-0 | 5605 | ······-·CCE-86013-0 |
| 5606 | ······-·CJIS-5.5.2.2 | 5606 | ······-·CJIS-5.5.2.2 |
| 5607 | ······-·NIST-800-171-3.4.5 | 5607 | ······-·NIST-800-171-3.4.5 |
| 5608 | ······-·NIST-800-53-AC-6(1) | 5608 | ······-·NIST-800-53-AC-6(1) |
| Offset 5635, 16 lines modified | Offset 5635, 16 lines modified | ||
| 5635 | ······-·no_reboot_needed | 5635 | ······-·no_reboot_needed |
| 5636 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5636 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5637 | ······stat: | 5637 | ······stat: |
| 5638 | ········path:·/boot/grub2/user.cfg | 5638 | ········path:·/boot/grub2/user.cfg |
| 5639 | ······register:·file_exists | 5639 | ······register:·file_exists |
| 5640 | ······when: | 5640 | ······when: |
| 5641 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5642 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5641 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5642 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5643 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5643 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5644 | ······tags: | 5644 | ······tags: |
| 5645 | ······-·CCE-86022-1 | 5645 | ······-·CCE-86022-1 |
| 5646 | ······-·CJIS-5.5.2.2 | 5646 | ······-·CJIS-5.5.2.2 |
| 5647 | ······-·NIST-800-171-3.4.5 | 5647 | ······-·NIST-800-171-3.4.5 |
| 5648 | ······-·NIST-800-53-AC-6(1) | 5648 | ······-·NIST-800-53-AC-6(1) |
| 5649 | ······-·NIST-800-53-CM-6(a) | 5649 | ······-·NIST-800-53-CM-6(a) |
| Offset 5657, 16 lines modified | Offset 5657, 16 lines modified | ||
| 5657 | ······-·no_reboot_needed | 5657 | ······-·no_reboot_needed |
| 5658 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 5658 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 5659 | ······file: | 5659 | ······file: |
| 5660 | ········path:·/boot/grub2/user.cfg | 5660 | ········path:·/boot/grub2/user.cfg |
| 5661 | ········owner:·'0' | 5661 | ········owner:·'0' |
| 5662 | ······when: | 5662 | ······when: |
| 5663 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5664 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5663 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5664 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5665 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5665 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5666 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5666 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5667 | ······tags: | 5667 | ······tags: |
| 5668 | ······-·CCE-86022-1 | 5668 | ······-·CCE-86022-1 |
| 5669 | ······-·CJIS-5.5.2.2 | 5669 | ······-·CJIS-5.5.2.2 |
| 5670 | ······-·NIST-800-171-3.4.5 | 5670 | ······-·NIST-800-171-3.4.5 |
| 5671 | ······-·NIST-800-53-AC-6(1) | 5671 | ······-·NIST-800-53-AC-6(1) |
| Offset 5696, 16 lines modified | Offset 5696, 16 lines modified | ||
| 5696 | ······-·no_reboot_needed | 5696 | ······-·no_reboot_needed |
| 5697 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 5697 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 5698 | ······stat: | 5698 | ······stat: |
| 5699 | ········path:·/boot/grub2/grub.cfg | 5699 | ········path:·/boot/grub2/grub.cfg |
| 5700 | ······register:·file_exists | 5700 | ······register:·file_exists |
| 5701 | ······when: | 5701 | ······when: |
| 5702 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5703 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5702 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5703 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5704 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5704 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5705 | ······tags: | 5705 | ······tags: |
| 5706 | ······-·CCE-85925-6 | 5706 | ······-·CCE-85925-6 |
| 5707 | ······-·NIST-800-171-3.4.5 | 5707 | ······-·NIST-800-171-3.4.5 |
| 5708 | ······-·NIST-800-53-AC-6(1) | 5708 | ······-·NIST-800-53-AC-6(1) |
| 5709 | ······-·NIST-800-53-CM-6(a) | 5709 | ······-·NIST-800-53-CM-6(a) |
| 5710 | ······-·configure_strategy | 5710 | ······-·configure_strategy |
| Offset 5716, 16 lines modified | Offset 5716, 16 lines modified | ||
| 5716 | ······-·no_reboot_needed | 5716 | ······-·no_reboot_needed |
| 5717 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 5717 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 5718 | ······file: | 5718 | ······file: |
| 5719 | ········path:·/boot/grub2/grub.cfg | 5719 | ········path:·/boot/grub2/grub.cfg |
| 5720 | ········mode:·u-s,g-xwrs,o-xwrt | 5720 | ········mode:·u-s,g-xwrs,o-xwrt |
| 5721 | ······when: | 5721 | ······when: |
| 5722 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5723 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5722 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5723 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5724 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5724 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5725 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 5725 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 5726 | ······tags: | 5726 | ······tags: |
| 5727 | ······-·CCE-85925-6 | 5727 | ······-·CCE-85925-6 |
| 5728 | ······-·NIST-800-171-3.4.5 | 5728 | ······-·NIST-800-171-3.4.5 |
| 5729 | ······-·NIST-800-53-AC-6(1) | 5729 | ······-·NIST-800-53-AC-6(1) |
| 5730 | ······-·NIST-800-53-CM-6(a) | 5730 | ······-·NIST-800-53-CM-6(a) |
| Offset 5753, 16 lines modified | Offset 5753, 16 lines modified | ||
| 5753 | ······-·no_reboot_needed | 5753 | ······-·no_reboot_needed |
| 5754 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 5754 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 5755 | ······stat: | 5755 | ······stat: |
| 5756 | ········path:·/boot/grub2/user.cfg | 5756 | ········path:·/boot/grub2/user.cfg |
| 5757 | ······register:·file_exists | 5757 | ······register:·file_exists |
| 5758 | ······when: | 5758 | ······when: |
| 5759 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5760 | ······-·'"grub2-common"·in·ansible_facts.packages' | 5759 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 5760 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 5761 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 5761 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 5762 | ······tags: | 5762 | ······tags: |
| 5763 | ······-·CCE-86029-6 | 5763 | ······-·CCE-86029-6 |
| 5764 | ······-·NIST-800-171-3.4.5 | 5764 | ······-·NIST-800-171-3.4.5 |
| 5765 | ······-·NIST-800-53-AC-6(1) | 5765 | ······-·NIST-800-53-AC-6(1) |
| 5766 | ······-·NIST-800-53-CM-6(a) | 5766 | ······-·NIST-800-53-CM-6(a) |
| 5767 | ······-·configure_strategy | 5767 | ······-·configure_strategy |
| Offset 5773, 16 lines modified | Offset 5773, 16 lines modified | ||
| 5773 | ······-·no_reboot_needed | 5773 | ······-·no_reboot_needed |
| Max diff block lines reached; 648/5254 bytes (12.33%) of diff not shown. | |||
| Offset 22191, 16 lines modified | Offset 22191, 16 lines modified | ||
| 22191 | ······-·no_reboot_needed | 22191 | ······-·no_reboot_needed |
| 22192 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22192 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22193 | ······stat: | 22193 | ······stat: |
| 22194 | ········path:·/boot/grub2/user.cfg | 22194 | ········path:·/boot/grub2/user.cfg |
| 22195 | ······register:·file_exists | 22195 | ······register:·file_exists |
| 22196 | ······when: | 22196 | ······when: |
| 22197 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22198 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22197 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22198 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22199 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22199 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22200 | ······tags: | 22200 | ······tags: |
| 22201 | ······-·CCE-86013-0 | 22201 | ······-·CCE-86013-0 |
| 22202 | ······-·CJIS-5.5.2.2 | 22202 | ······-·CJIS-5.5.2.2 |
| 22203 | ······-·NIST-800-171-3.4.5 | 22203 | ······-·NIST-800-171-3.4.5 |
| 22204 | ······-·NIST-800-53-AC-6(1) | 22204 | ······-·NIST-800-53-AC-6(1) |
| 22205 | ······-·NIST-800-53-CM-6(a) | 22205 | ······-·NIST-800-53-CM-6(a) |
| Offset 22213, 16 lines modified | Offset 22213, 16 lines modified | ||
| 22213 | ······-·no_reboot_needed | 22213 | ······-·no_reboot_needed |
| 22214 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 22214 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 22215 | ······file: | 22215 | ······file: |
| 22216 | ········path:·/boot/grub2/user.cfg | 22216 | ········path:·/boot/grub2/user.cfg |
| 22217 | ········group:·'0' | 22217 | ········group:·'0' |
| 22218 | ······when: | 22218 | ······when: |
| 22219 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22220 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22219 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22220 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22221 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22221 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22222 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22222 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22223 | ······tags: | 22223 | ······tags: |
| 22224 | ······-·CCE-86013-0 | 22224 | ······-·CCE-86013-0 |
| 22225 | ······-·CJIS-5.5.2.2 | 22225 | ······-·CJIS-5.5.2.2 |
| 22226 | ······-·NIST-800-171-3.4.5 | 22226 | ······-·NIST-800-171-3.4.5 |
| 22227 | ······-·NIST-800-53-AC-6(1) | 22227 | ······-·NIST-800-53-AC-6(1) |
| Offset 22254, 16 lines modified | Offset 22254, 16 lines modified | ||
| 22254 | ······-·no_reboot_needed | 22254 | ······-·no_reboot_needed |
| 22255 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22255 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22256 | ······stat: | 22256 | ······stat: |
| 22257 | ········path:·/boot/grub2/user.cfg | 22257 | ········path:·/boot/grub2/user.cfg |
| 22258 | ······register:·file_exists | 22258 | ······register:·file_exists |
| 22259 | ······when: | 22259 | ······when: |
| 22260 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22261 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22260 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22261 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22262 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22262 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22263 | ······tags: | 22263 | ······tags: |
| 22264 | ······-·CCE-86022-1 | 22264 | ······-·CCE-86022-1 |
| 22265 | ······-·CJIS-5.5.2.2 | 22265 | ······-·CJIS-5.5.2.2 |
| 22266 | ······-·NIST-800-171-3.4.5 | 22266 | ······-·NIST-800-171-3.4.5 |
| 22267 | ······-·NIST-800-53-AC-6(1) | 22267 | ······-·NIST-800-53-AC-6(1) |
| 22268 | ······-·NIST-800-53-CM-6(a) | 22268 | ······-·NIST-800-53-CM-6(a) |
| Offset 22276, 16 lines modified | Offset 22276, 16 lines modified | ||
| 22276 | ······-·no_reboot_needed | 22276 | ······-·no_reboot_needed |
| 22277 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 22277 | ····-·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 22278 | ······file: | 22278 | ······file: |
| 22279 | ········path:·/boot/grub2/user.cfg | 22279 | ········path:·/boot/grub2/user.cfg |
| 22280 | ········owner:·'0' | 22280 | ········owner:·'0' |
| 22281 | ······when: | 22281 | ······when: |
| 22282 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22283 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22282 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22283 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22284 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22285 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22285 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22286 | ······tags: | 22286 | ······tags: |
| 22287 | ······-·CCE-86022-1 | 22287 | ······-·CCE-86022-1 |
| 22288 | ······-·CJIS-5.5.2.2 | 22288 | ······-·CJIS-5.5.2.2 |
| 22289 | ······-·NIST-800-171-3.4.5 | 22289 | ······-·NIST-800-171-3.4.5 |
| 22290 | ······-·NIST-800-53-AC-6(1) | 22290 | ······-·NIST-800-53-AC-6(1) |
| Offset 22315, 16 lines modified | Offset 22315, 16 lines modified | ||
| 22315 | ······-·no_reboot_needed | 22315 | ······-·no_reboot_needed |
| 22316 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 22316 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 22317 | ······stat: | 22317 | ······stat: |
| 22318 | ········path:·/boot/grub2/grub.cfg | 22318 | ········path:·/boot/grub2/grub.cfg |
| 22319 | ······register:·file_exists | 22319 | ······register:·file_exists |
| 22320 | ······when: | 22320 | ······when: |
| 22321 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22322 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22321 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22322 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22323 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22324 | ······tags: | 22324 | ······tags: |
| 22325 | ······-·CCE-85925-6 | 22325 | ······-·CCE-85925-6 |
| 22326 | ······-·NIST-800-171-3.4.5 | 22326 | ······-·NIST-800-171-3.4.5 |
| 22327 | ······-·NIST-800-53-AC-6(1) | 22327 | ······-·NIST-800-53-AC-6(1) |
| 22328 | ······-·NIST-800-53-CM-6(a) | 22328 | ······-·NIST-800-53-CM-6(a) |
| 22329 | ······-·configure_strategy | 22329 | ······-·configure_strategy |
| Offset 22335, 16 lines modified | Offset 22335, 16 lines modified | ||
| 22335 | ······-·no_reboot_needed | 22335 | ······-·no_reboot_needed |
| 22336 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 22336 | ····-·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 22337 | ······file: | 22337 | ······file: |
| 22338 | ········path:·/boot/grub2/grub.cfg | 22338 | ········path:·/boot/grub2/grub.cfg |
| 22339 | ········mode:·u-s,g-xwrs,o-xwrt | 22339 | ········mode:·u-s,g-xwrs,o-xwrt |
| 22340 | ······when: | 22340 | ······when: |
| 22341 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22342 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22341 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22342 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22343 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22344 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 22344 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 22345 | ······tags: | 22345 | ······tags: |
| 22346 | ······-·CCE-85925-6 | 22346 | ······-·CCE-85925-6 |
| 22347 | ······-·NIST-800-171-3.4.5 | 22347 | ······-·NIST-800-171-3.4.5 |
| 22348 | ······-·NIST-800-53-AC-6(1) | 22348 | ······-·NIST-800-53-AC-6(1) |
| 22349 | ······-·NIST-800-53-CM-6(a) | 22349 | ······-·NIST-800-53-CM-6(a) |
| Offset 22372, 16 lines modified | Offset 22372, 16 lines modified | ||
| 22372 | ······-·no_reboot_needed | 22372 | ······-·no_reboot_needed |
| 22373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg | 22373 | ····-·name:·Test·for·existence·/boot/grub2/user.cfg |
| 22374 | ······stat: | 22374 | ······stat: |
| 22375 | ········path:·/boot/grub2/user.cfg | 22375 | ········path:·/boot/grub2/user.cfg |
| 22376 | ······register:·file_exists | 22376 | ······register:·file_exists |
| 22377 | ······when: | 22377 | ······when: |
| 22378 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22379 | ······-·'"grub2-common"·in·ansible_facts.packages' | 22378 | ······-·'"grub2-common"·in·ansible_facts.packages' |
| 22379 | ······-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 22380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 22380 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 22381 | ······tags: | 22381 | ······tags: |
| 22382 | ······-·CCE-86029-6 | 22382 | ······-·CCE-86029-6 |
| 22383 | ······-·NIST-800-171-3.4.5 | 22383 | ······-·NIST-800-171-3.4.5 |
| 22384 | ······-·NIST-800-53-AC-6(1) | 22384 | ······-·NIST-800-53-AC-6(1) |
| 22385 | ······-·NIST-800-53-CM-6(a) | 22385 | ······-·NIST-800-53-CM-6(a) |
| 22386 | ······-·configure_strategy | 22386 | ······-·configure_strategy |
| Offset 22392, 16 lines modified | Offset 22392, 16 lines modified | ||
| 22392 | ······-·no_reboot_needed | 22392 | ······-·no_reboot_needed |
| Max diff block lines reached; 648/5270 bytes (12.30%) of diff not shown. | |||
| Offset 44633, 16 lines modified | Offset 44633, 16 lines modified | ||
| 44633 | ········lineinfile: | 44633 | ········lineinfile: |
| 44634 | ··········path:·/etc/postfix/main.cf | 44634 | ··········path:·/etc/postfix/main.cf |
| 44635 | ··········create:·true | 44635 | ··········create:·true |
| 44636 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 44636 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 44637 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 44637 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 44638 | ··········state:·present | 44638 | ··········state:·present |
| 44639 | ······when: | 44639 | ······when: |
| 44640 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 44641 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 44640 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 44641 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 44642 | ······tags: | 44642 | ······tags: |
| 44643 | ······-·CCE-87232-5 | 44643 | ······-·CCE-87232-5 |
| 44644 | ······-·low_complexity | 44644 | ······-·low_complexity |
| 44645 | ······-·low_disruption | 44645 | ······-·low_disruption |
| 44646 | ······-·medium_severity | 44646 | ······-·medium_severity |
| 44647 | ······-·no_reboot_needed | 44647 | ······-·no_reboot_needed |
| 44648 | ······-·postfix_prevent_unrestricted_relay | 44648 | ······-·postfix_prevent_unrestricted_relay |
| Offset 44605, 16 lines modified | Offset 44605, 16 lines modified | ||
| 44605 | ········lineinfile: | 44605 | ········lineinfile: |
| 44606 | ··········path:·/etc/postfix/main.cf | 44606 | ··········path:·/etc/postfix/main.cf |
| 44607 | ··········create:·true | 44607 | ··········create:·true |
| 44608 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 44608 | ··········regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 44609 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 44609 | ··········line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 44610 | ··········state:·present | 44610 | ··········state:·present |
| 44611 | ······when: | 44611 | ······when: |
| 44612 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 44613 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 44612 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 44613 | ······-·'"postfix"·in·ansible_facts.packages' | ||
| 44614 | ······tags: | 44614 | ······tags: |
| 44615 | ······-·CCE-87232-5 | 44615 | ······-·CCE-87232-5 |
| 44616 | ······-·low_complexity | 44616 | ······-·low_complexity |
| 44617 | ······-·low_disruption | 44617 | ······-·low_disruption |
| 44618 | ······-·medium_severity | 44618 | ······-·medium_severity |
| 44619 | ······-·no_reboot_needed | 44619 | ······-·no_reboot_needed |
| 44620 | ······-·postfix_prevent_unrestricted_relay | 44620 | ······-·postfix_prevent_unrestricted_relay |
| Offset 20637, 16 lines modified | Offset 20637, 16 lines modified | ||
| 20637 | ······-·no_reboot_needed | 20637 | ······-·no_reboot_needed |
| 20638 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 20638 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 20639 | ······stat: | 20639 | ······stat: |
| 20640 | ········path:·/boot/grub2/grub.cfg | 20640 | ········path:·/boot/grub2/grub.cfg |
| 20641 | ······register:·file_exists | 20641 | ······register:·file_exists |
| 20642 | ······when: | 20642 | ······when: |
| 20643 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20644 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 20643 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 20644 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20645 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 20645 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 20646 | ······tags: | 20646 | ······tags: |
| 20647 | ······-·CJIS-5.5.2.2 | 20647 | ······-·CJIS-5.5.2.2 |
| 20648 | ······-·NIST-800-171-3.4.5 | 20648 | ······-·NIST-800-171-3.4.5 |
| 20649 | ······-·NIST-800-53-AC-6(1) | 20649 | ······-·NIST-800-53-AC-6(1) |
| 20650 | ······-·NIST-800-53-CM-6(a) | 20650 | ······-·NIST-800-53-CM-6(a) |
| 20651 | ······-·PCI-DSS-Req-7.1 | 20651 | ······-·PCI-DSS-Req-7.1 |
| Offset 20658, 16 lines modified | Offset 20658, 16 lines modified | ||
| 20658 | ······-·no_reboot_needed | 20658 | ······-·no_reboot_needed |
| 20659 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 20659 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 20660 | ······file: | 20660 | ······file: |
| 20661 | ········path:·/boot/grub2/grub.cfg | 20661 | ········path:·/boot/grub2/grub.cfg |
| 20662 | ········group:·'0' | 20662 | ········group:·'0' |
| 20663 | ······when: | 20663 | ······when: |
| 20664 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20665 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 20664 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 20665 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20666 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 20666 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 20667 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 20667 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 20668 | ······tags: | 20668 | ······tags: |
| 20669 | ······-·CJIS-5.5.2.2 | 20669 | ······-·CJIS-5.5.2.2 |
| 20670 | ······-·NIST-800-171-3.4.5 | 20670 | ······-·NIST-800-171-3.4.5 |
| 20671 | ······-·NIST-800-53-AC-6(1) | 20671 | ······-·NIST-800-53-AC-6(1) |
| 20672 | ······-·NIST-800-53-CM-6(a) | 20672 | ······-·NIST-800-53-CM-6(a) |
| Offset 20697, 16 lines modified | Offset 20697, 16 lines modified | ||
| 20697 | ······-·no_reboot_needed | 20697 | ······-·no_reboot_needed |
| 20698 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 20698 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 20699 | ······stat: | 20699 | ······stat: |
| 20700 | ········path:·/boot/grub2/grub.cfg | 20700 | ········path:·/boot/grub2/grub.cfg |
| 20701 | ······register:·file_exists | 20701 | ······register:·file_exists |
| 20702 | ······when: | 20702 | ······when: |
| 20703 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20704 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 20703 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 20704 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20705 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 20705 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 20706 | ······tags: | 20706 | ······tags: |
| 20707 | ······-·CJIS-5.5.2.2 | 20707 | ······-·CJIS-5.5.2.2 |
| 20708 | ······-·NIST-800-171-3.4.5 | 20708 | ······-·NIST-800-171-3.4.5 |
| 20709 | ······-·NIST-800-53-AC-6(1) | 20709 | ······-·NIST-800-53-AC-6(1) |
| 20710 | ······-·NIST-800-53-CM-6(a) | 20710 | ······-·NIST-800-53-CM-6(a) |
| 20711 | ······-·PCI-DSS-Req-7.1 | 20711 | ······-·PCI-DSS-Req-7.1 |
| Offset 20718, 16 lines modified | Offset 20718, 16 lines modified | ||
| 20718 | ······-·no_reboot_needed | 20718 | ······-·no_reboot_needed |
| 20719 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 20719 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 20720 | ······file: | 20720 | ······file: |
| 20721 | ········path:·/boot/grub2/grub.cfg | 20721 | ········path:·/boot/grub2/grub.cfg |
| 20722 | ········owner:·'0' | 20722 | ········owner:·'0' |
| 20723 | ······when: | 20723 | ······when: |
| 20724 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20725 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 20724 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 20725 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 20726 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 20726 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 20727 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 20727 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 20728 | ······tags: | 20728 | ······tags: |
| 20729 | ······-·CJIS-5.5.2.2 | 20729 | ······-·CJIS-5.5.2.2 |
| 20730 | ······-·NIST-800-171-3.4.5 | 20730 | ······-·NIST-800-171-3.4.5 |
| 20731 | ······-·NIST-800-53-AC-6(1) | 20731 | ······-·NIST-800-53-AC-6(1) |
| 20732 | ······-·NIST-800-53-CM-6(a) | 20732 | ······-·NIST-800-53-CM-6(a) |
| Offset 27918, 16 lines modified | Offset 27918, 16 lines modified | ||
| 27918 | ······-·no_reboot_needed | 27918 | ······-·no_reboot_needed |
| 27919 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 27919 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 27920 | ······stat: | 27920 | ······stat: |
| 27921 | ········path:·/boot/grub2/grub.cfg | 27921 | ········path:·/boot/grub2/grub.cfg |
| 27922 | ······register:·file_exists | 27922 | ······register:·file_exists |
| 27923 | ······when: | 27923 | ······when: |
| 27924 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 27925 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 27924 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 27925 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 27926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27927 | ······tags: | 27927 | ······tags: |
| 27928 | ······-·CJIS-5.5.2.2 | 27928 | ······-·CJIS-5.5.2.2 |
| 27929 | ······-·NIST-800-171-3.4.5 | 27929 | ······-·NIST-800-171-3.4.5 |
| 27930 | ······-·NIST-800-53-AC-6(1) | 27930 | ······-·NIST-800-53-AC-6(1) |
| 27931 | ······-·NIST-800-53-CM-6(a) | 27931 | ······-·NIST-800-53-CM-6(a) |
| 27932 | ······-·PCI-DSS-Req-7.1 | 27932 | ······-·PCI-DSS-Req-7.1 |
| Offset 27939, 16 lines modified | Offset 27939, 16 lines modified | ||
| 27939 | ······-·no_reboot_needed | 27939 | ······-·no_reboot_needed |
| 27940 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 27940 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 27941 | ······file: | 27941 | ······file: |
| 27942 | ········path:·/boot/grub2/grub.cfg | 27942 | ········path:·/boot/grub2/grub.cfg |
| 27943 | ········group:·'0' | 27943 | ········group:·'0' |
| 27944 | ······when: | 27944 | ······when: |
| 27945 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 27946 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 27945 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 27946 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 27947 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27947 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27948 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 27948 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 27949 | ······tags: | 27949 | ······tags: |
| 27950 | ······-·CJIS-5.5.2.2 | 27950 | ······-·CJIS-5.5.2.2 |
| 27951 | ······-·NIST-800-171-3.4.5 | 27951 | ······-·NIST-800-171-3.4.5 |
| 27952 | ······-·NIST-800-53-AC-6(1) | 27952 | ······-·NIST-800-53-AC-6(1) |
| 27953 | ······-·NIST-800-53-CM-6(a) | 27953 | ······-·NIST-800-53-CM-6(a) |
| Offset 27978, 16 lines modified | Offset 27978, 16 lines modified | ||
| 27978 | ······-·no_reboot_needed | 27978 | ······-·no_reboot_needed |
| 27979 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 27979 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 27980 | ······stat: | 27980 | ······stat: |
| 27981 | ········path:·/boot/grub2/grub.cfg | 27981 | ········path:·/boot/grub2/grub.cfg |
| 27982 | ······register:·file_exists | 27982 | ······register:·file_exists |
| 27983 | ······when: | 27983 | ······when: |
| 27984 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 27985 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 27984 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 27985 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 27986 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27986 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27987 | ······tags: | 27987 | ······tags: |
| 27988 | ······-·CJIS-5.5.2.2 | 27988 | ······-·CJIS-5.5.2.2 |
| 27989 | ······-·NIST-800-171-3.4.5 | 27989 | ······-·NIST-800-171-3.4.5 |
| 27990 | ······-·NIST-800-53-AC-6(1) | 27990 | ······-·NIST-800-53-AC-6(1) |
| 27991 | ······-·NIST-800-53-CM-6(a) | 27991 | ······-·NIST-800-53-CM-6(a) |
| 27992 | ······-·PCI-DSS-Req-7.1 | 27992 | ······-·PCI-DSS-Req-7.1 |
| Offset 27999, 16 lines modified | Offset 27999, 16 lines modified | ||
| 27999 | ······-·no_reboot_needed | 27999 | ······-·no_reboot_needed |
| 28000 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 28000 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 28001 | ······file: | 28001 | ······file: |
| 28002 | ········path:·/boot/grub2/grub.cfg | 28002 | ········path:·/boot/grub2/grub.cfg |
| 28003 | ········owner:·'0' | 28003 | ········owner:·'0' |
| 28004 | ······when: | 28004 | ······when: |
| 28005 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 28006 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 28005 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 28006 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 28007 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28007 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28008 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 28008 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 28009 | ······tags: | 28009 | ······tags: |
| 28010 | ······-·CJIS-5.5.2.2 | 28010 | ······-·CJIS-5.5.2.2 |
| 28011 | ······-·NIST-800-171-3.4.5 | 28011 | ······-·NIST-800-171-3.4.5 |
| 28012 | ······-·NIST-800-53-AC-6(1) | 28012 | ······-·NIST-800-53-AC-6(1) |
| 28013 | ······-·NIST-800-53-CM-6(a) | 28013 | ······-·NIST-800-53-CM-6(a) |
| Offset 28036, 16 lines modified | Offset 28036, 16 lines modified | ||
| 28036 | ······-·no_reboot_needed | 28036 | ······-·no_reboot_needed |
| 28037 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 28037 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 28038 | ······stat: | 28038 | ······stat: |
| 28039 | ········path:·/boot/grub2/grub.cfg | 28039 | ········path:·/boot/grub2/grub.cfg |
| 28040 | ······register:·file_exists | 28040 | ······register:·file_exists |
| 28041 | ······when: | 28041 | ······when: |
| 28042 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 28043 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 28042 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 28043 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 28044 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28044 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28045 | ······tags: | 28045 | ······tags: |
| 28046 | ······-·NIST-800-171-3.4.5 | 28046 | ······-·NIST-800-171-3.4.5 |
| 28047 | ······-·NIST-800-53-AC-6(1) | 28047 | ······-·NIST-800-53-AC-6(1) |
| 28048 | ······-·NIST-800-53-CM-6(a) | 28048 | ······-·NIST-800-53-CM-6(a) |
| 28049 | ······-·configure_strategy | 28049 | ······-·configure_strategy |
| 28050 | ······-·file_permissions_grub2_cfg | 28050 | ······-·file_permissions_grub2_cfg |
| Offset 28055, 16 lines modified | Offset 28055, 16 lines modified | ||
| 28055 | ······-·no_reboot_needed | 28055 | ······-·no_reboot_needed |
| 28056 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 28056 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 28057 | ······file: | 28057 | ······file: |
| 28058 | ········path:·/boot/grub2/grub.cfg | 28058 | ········path:·/boot/grub2/grub.cfg |
| 28059 | ········mode:·u-xs,g-xwrs,o-xwrt | 28059 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 28060 | ······when: | 28060 | ······when: |
| 28061 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 28062 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 28061 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 28062 | ······-·'"grub2-common"·in·ansible_facts.packages' | ||
| 28063 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 28063 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 28064 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 28064 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 28065 | ······tags: | 28065 | ······tags: |
| 28066 | ······-·NIST-800-171-3.4.5 | 28066 | ······-·NIST-800-171-3.4.5 |
| 28067 | ······-·NIST-800-53-AC-6(1) | 28067 | ······-·NIST-800-53-AC-6(1) |
| 28068 | ······-·NIST-800-53-CM-6(a) | 28068 | ······-·NIST-800-53-CM-6(a) |
| 28069 | ······-·configure_strategy | 28069 | ······-·configure_strategy |
| Offset 18652, 16 lines modified | Offset 18652, 16 lines modified | ||
| 18652 | ······-·no_reboot_needed | 18652 | ······-·no_reboot_needed |
| 18653 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 18653 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 18654 | ······stat: | 18654 | ······stat: |
| 18655 | ········path:·/boot/grub2/grub.cfg | 18655 | ········path:·/boot/grub2/grub.cfg |
| 18656 | ······register:·file_exists | 18656 | ······register:·file_exists |
| 18657 | ······when: | 18657 | ······when: |
| 18658 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18659 | ······-·'"grub2"·in·ansible_facts.packages' | 18658 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18659 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18660 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18660 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18661 | ······tags: | 18661 | ······tags: |
| 18662 | ······-·CCE-85849-8 | 18662 | ······-·CCE-85849-8 |
| 18663 | ······-·CJIS-5.5.2.2 | 18663 | ······-·CJIS-5.5.2.2 |
| 18664 | ······-·NIST-800-171-3.4.5 | 18664 | ······-·NIST-800-171-3.4.5 |
| 18665 | ······-·NIST-800-53-AC-6(1) | 18665 | ······-·NIST-800-53-AC-6(1) |
| 18666 | ······-·NIST-800-53-CM-6(a) | 18666 | ······-·NIST-800-53-CM-6(a) |
| Offset 18674, 16 lines modified | Offset 18674, 16 lines modified | ||
| 18674 | ······-·no_reboot_needed | 18674 | ······-·no_reboot_needed |
| 18675 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 18675 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 18676 | ······file: | 18676 | ······file: |
| 18677 | ········path:·/boot/grub2/grub.cfg | 18677 | ········path:·/boot/grub2/grub.cfg |
| 18678 | ········group:·'0' | 18678 | ········group:·'0' |
| 18679 | ······when: | 18679 | ······when: |
| 18680 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18681 | ······-·'"grub2"·in·ansible_facts.packages' | 18680 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18681 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18682 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18682 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18683 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 18683 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 18684 | ······tags: | 18684 | ······tags: |
| 18685 | ······-·CCE-85849-8 | 18685 | ······-·CCE-85849-8 |
| 18686 | ······-·CJIS-5.5.2.2 | 18686 | ······-·CJIS-5.5.2.2 |
| 18687 | ······-·NIST-800-171-3.4.5 | 18687 | ······-·NIST-800-171-3.4.5 |
| 18688 | ······-·NIST-800-53-AC-6(1) | 18688 | ······-·NIST-800-53-AC-6(1) |
| Offset 18715, 16 lines modified | Offset 18715, 16 lines modified | ||
| 18715 | ······-·no_reboot_needed | 18715 | ······-·no_reboot_needed |
| 18716 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 18716 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 18717 | ······stat: | 18717 | ······stat: |
| 18718 | ········path:·/boot/grub2/grub.cfg | 18718 | ········path:·/boot/grub2/grub.cfg |
| 18719 | ······register:·file_exists | 18719 | ······register:·file_exists |
| 18720 | ······when: | 18720 | ······when: |
| 18721 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18722 | ······-·'"grub2"·in·ansible_facts.packages' | 18721 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18722 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18723 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18723 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18724 | ······tags: | 18724 | ······tags: |
| 18725 | ······-·CCE-85848-0 | 18725 | ······-·CCE-85848-0 |
| 18726 | ······-·CJIS-5.5.2.2 | 18726 | ······-·CJIS-5.5.2.2 |
| 18727 | ······-·NIST-800-171-3.4.5 | 18727 | ······-·NIST-800-171-3.4.5 |
| 18728 | ······-·NIST-800-53-AC-6(1) | 18728 | ······-·NIST-800-53-AC-6(1) |
| 18729 | ······-·NIST-800-53-CM-6(a) | 18729 | ······-·NIST-800-53-CM-6(a) |
| Offset 18737, 16 lines modified | Offset 18737, 16 lines modified | ||
| 18737 | ······-·no_reboot_needed | 18737 | ······-·no_reboot_needed |
| 18738 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 18738 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 18739 | ······file: | 18739 | ······file: |
| 18740 | ········path:·/boot/grub2/grub.cfg | 18740 | ········path:·/boot/grub2/grub.cfg |
| 18741 | ········owner:·'0' | 18741 | ········owner:·'0' |
| 18742 | ······when: | 18742 | ······when: |
| 18743 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18744 | ······-·'"grub2"·in·ansible_facts.packages' | 18743 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18744 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18745 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18745 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18746 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 18746 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 18747 | ······tags: | 18747 | ······tags: |
| 18748 | ······-·CCE-85848-0 | 18748 | ······-·CCE-85848-0 |
| 18749 | ······-·CJIS-5.5.2.2 | 18749 | ······-·CJIS-5.5.2.2 |
| 18750 | ······-·NIST-800-171-3.4.5 | 18750 | ······-·NIST-800-171-3.4.5 |
| 18751 | ······-·NIST-800-53-AC-6(1) | 18751 | ······-·NIST-800-53-AC-6(1) |
| Offset 18776, 16 lines modified | Offset 18776, 16 lines modified | ||
| 18776 | ······-·no_reboot_needed | 18776 | ······-·no_reboot_needed |
| 18777 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 18777 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 18778 | ······stat: | 18778 | ······stat: |
| 18779 | ········path:·/boot/grub2/grub.cfg | 18779 | ········path:·/boot/grub2/grub.cfg |
| 18780 | ······register:·file_exists | 18780 | ······register:·file_exists |
| 18781 | ······when: | 18781 | ······when: |
| 18782 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18783 | ······-·'"grub2"·in·ansible_facts.packages' | 18782 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18783 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18784 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18784 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18785 | ······tags: | 18785 | ······tags: |
| 18786 | ······-·CCE-91426-7 | 18786 | ······-·CCE-91426-7 |
| 18787 | ······-·NIST-800-171-3.4.5 | 18787 | ······-·NIST-800-171-3.4.5 |
| 18788 | ······-·NIST-800-53-AC-6(1) | 18788 | ······-·NIST-800-53-AC-6(1) |
| 18789 | ······-·NIST-800-53-CM-6(a) | 18789 | ······-·NIST-800-53-CM-6(a) |
| 18790 | ······-·configure_strategy | 18790 | ······-·configure_strategy |
| Offset 18796, 16 lines modified | Offset 18796, 16 lines modified | ||
| 18796 | ······-·no_reboot_needed | 18796 | ······-·no_reboot_needed |
| 18797 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 18797 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 18798 | ······file: | 18798 | ······file: |
| 18799 | ········path:·/boot/grub2/grub.cfg | 18799 | ········path:·/boot/grub2/grub.cfg |
| 18800 | ········mode:·u-xs,g-xwrs,o-xwrt | 18800 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 18801 | ······when: | 18801 | ······when: |
| 18802 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18803 | ······-·'"grub2"·in·ansible_facts.packages' | 18802 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18803 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18804 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18804 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18805 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 18805 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 18806 | ······tags: | 18806 | ······tags: |
| 18807 | ······-·CCE-91426-7 | 18807 | ······-·CCE-91426-7 |
| 18808 | ······-·NIST-800-171-3.4.5 | 18808 | ······-·NIST-800-171-3.4.5 |
| 18809 | ······-·NIST-800-53-AC-6(1) | 18809 | ······-·NIST-800-53-AC-6(1) |
| 18810 | ······-·NIST-800-53-CM-6(a) | 18810 | ······-·NIST-800-53-CM-6(a) |
| Offset 2794, 16 lines modified | Offset 2794, 16 lines modified | ||
| 2794 | ······-·no_reboot_needed | 2794 | ······-·no_reboot_needed |
| 2795 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2795 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2796 | ······stat: | 2796 | ······stat: |
| 2797 | ········path:·/boot/grub2/grub.cfg | 2797 | ········path:·/boot/grub2/grub.cfg |
| 2798 | ······register:·file_exists | 2798 | ······register:·file_exists |
| 2799 | ······when: | 2799 | ······when: |
| 2800 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2801 | ······-·'"grub2"·in·ansible_facts.packages' | 2800 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2801 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2802 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2802 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2803 | ······tags: | 2803 | ······tags: |
| 2804 | ······-·CCE-85849-8 | 2804 | ······-·CCE-85849-8 |
| 2805 | ······-·CJIS-5.5.2.2 | 2805 | ······-·CJIS-5.5.2.2 |
| 2806 | ······-·NIST-800-171-3.4.5 | 2806 | ······-·NIST-800-171-3.4.5 |
| 2807 | ······-·NIST-800-53-AC-6(1) | 2807 | ······-·NIST-800-53-AC-6(1) |
| 2808 | ······-·NIST-800-53-CM-6(a) | 2808 | ······-·NIST-800-53-CM-6(a) |
| Offset 2816, 16 lines modified | Offset 2816, 16 lines modified | ||
| 2816 | ······-·no_reboot_needed | 2816 | ······-·no_reboot_needed |
| 2817 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 2817 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 2818 | ······file: | 2818 | ······file: |
| 2819 | ········path:·/boot/grub2/grub.cfg | 2819 | ········path:·/boot/grub2/grub.cfg |
| 2820 | ········group:·'0' | 2820 | ········group:·'0' |
| 2821 | ······when: | 2821 | ······when: |
| 2822 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2823 | ······-·'"grub2"·in·ansible_facts.packages' | 2822 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2823 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2824 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2824 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2825 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2825 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2826 | ······tags: | 2826 | ······tags: |
| 2827 | ······-·CCE-85849-8 | 2827 | ······-·CCE-85849-8 |
| 2828 | ······-·CJIS-5.5.2.2 | 2828 | ······-·CJIS-5.5.2.2 |
| 2829 | ······-·NIST-800-171-3.4.5 | 2829 | ······-·NIST-800-171-3.4.5 |
| 2830 | ······-·NIST-800-53-AC-6(1) | 2830 | ······-·NIST-800-53-AC-6(1) |
| Offset 2857, 16 lines modified | Offset 2857, 16 lines modified | ||
| 2857 | ······-·no_reboot_needed | 2857 | ······-·no_reboot_needed |
| 2858 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2858 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2859 | ······stat: | 2859 | ······stat: |
| 2860 | ········path:·/boot/grub2/grub.cfg | 2860 | ········path:·/boot/grub2/grub.cfg |
| 2861 | ······register:·file_exists | 2861 | ······register:·file_exists |
| 2862 | ······when: | 2862 | ······when: |
| 2863 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2864 | ······-·'"grub2"·in·ansible_facts.packages' | 2863 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2864 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2865 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2865 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2866 | ······tags: | 2866 | ······tags: |
| 2867 | ······-·CCE-85848-0 | 2867 | ······-·CCE-85848-0 |
| 2868 | ······-·CJIS-5.5.2.2 | 2868 | ······-·CJIS-5.5.2.2 |
| 2869 | ······-·NIST-800-171-3.4.5 | 2869 | ······-·NIST-800-171-3.4.5 |
| 2870 | ······-·NIST-800-53-AC-6(1) | 2870 | ······-·NIST-800-53-AC-6(1) |
| 2871 | ······-·NIST-800-53-CM-6(a) | 2871 | ······-·NIST-800-53-CM-6(a) |
| Offset 2879, 16 lines modified | Offset 2879, 16 lines modified | ||
| 2879 | ······-·no_reboot_needed | 2879 | ······-·no_reboot_needed |
| 2880 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 2880 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 2881 | ······file: | 2881 | ······file: |
| 2882 | ········path:·/boot/grub2/grub.cfg | 2882 | ········path:·/boot/grub2/grub.cfg |
| 2883 | ········owner:·'0' | 2883 | ········owner:·'0' |
| 2884 | ······when: | 2884 | ······when: |
| 2885 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2886 | ······-·'"grub2"·in·ansible_facts.packages' | 2885 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2886 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2889 | ······tags: | 2889 | ······tags: |
| 2890 | ······-·CCE-85848-0 | 2890 | ······-·CCE-85848-0 |
| 2891 | ······-·CJIS-5.5.2.2 | 2891 | ······-·CJIS-5.5.2.2 |
| 2892 | ······-·NIST-800-171-3.4.5 | 2892 | ······-·NIST-800-171-3.4.5 |
| 2893 | ······-·NIST-800-53-AC-6(1) | 2893 | ······-·NIST-800-53-AC-6(1) |
| Offset 2918, 16 lines modified | Offset 2918, 16 lines modified | ||
| 2918 | ······-·no_reboot_needed | 2918 | ······-·no_reboot_needed |
| 2919 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2919 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2920 | ······stat: | 2920 | ······stat: |
| 2921 | ········path:·/boot/grub2/grub.cfg | 2921 | ········path:·/boot/grub2/grub.cfg |
| 2922 | ······register:·file_exists | 2922 | ······register:·file_exists |
| 2923 | ······when: | 2923 | ······when: |
| 2924 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2925 | ······-·'"grub2"·in·ansible_facts.packages' | 2924 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2925 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2927 | ······tags: | 2927 | ······tags: |
| 2928 | ······-·CCE-91426-7 | 2928 | ······-·CCE-91426-7 |
| 2929 | ······-·NIST-800-171-3.4.5 | 2929 | ······-·NIST-800-171-3.4.5 |
| 2930 | ······-·NIST-800-53-AC-6(1) | 2930 | ······-·NIST-800-53-AC-6(1) |
| 2931 | ······-·NIST-800-53-CM-6(a) | 2931 | ······-·NIST-800-53-CM-6(a) |
| 2932 | ······-·configure_strategy | 2932 | ······-·configure_strategy |
| Offset 2938, 16 lines modified | Offset 2938, 16 lines modified | ||
| 2938 | ······-·no_reboot_needed | 2938 | ······-·no_reboot_needed |
| 2939 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 2939 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 2940 | ······file: | 2940 | ······file: |
| 2941 | ········path:·/boot/grub2/grub.cfg | 2941 | ········path:·/boot/grub2/grub.cfg |
| 2942 | ········mode:·u-xs,g-xwrs,o-xwrt | 2942 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 2943 | ······when: | 2943 | ······when: |
| 2944 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2945 | ······-·'"grub2"·in·ansible_facts.packages' | 2944 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2945 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2946 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2946 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2947 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2947 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2948 | ······tags: | 2948 | ······tags: |
| 2949 | ······-·CCE-91426-7 | 2949 | ······-·CCE-91426-7 |
| 2950 | ······-·NIST-800-171-3.4.5 | 2950 | ······-·NIST-800-171-3.4.5 |
| 2951 | ······-·NIST-800-53-AC-6(1) | 2951 | ······-·NIST-800-53-AC-6(1) |
| 2952 | ······-·NIST-800-53-CM-6(a) | 2952 | ······-·NIST-800-53-CM-6(a) |
| Offset 2794, 16 lines modified | Offset 2794, 16 lines modified | ||
| 2794 | ······-·no_reboot_needed | 2794 | ······-·no_reboot_needed |
| 2795 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2795 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2796 | ······stat: | 2796 | ······stat: |
| 2797 | ········path:·/boot/grub2/grub.cfg | 2797 | ········path:·/boot/grub2/grub.cfg |
| 2798 | ······register:·file_exists | 2798 | ······register:·file_exists |
| 2799 | ······when: | 2799 | ······when: |
| 2800 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2801 | ······-·'"grub2"·in·ansible_facts.packages' | 2800 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2801 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2802 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2802 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2803 | ······tags: | 2803 | ······tags: |
| 2804 | ······-·CCE-85849-8 | 2804 | ······-·CCE-85849-8 |
| 2805 | ······-·CJIS-5.5.2.2 | 2805 | ······-·CJIS-5.5.2.2 |
| 2806 | ······-·NIST-800-171-3.4.5 | 2806 | ······-·NIST-800-171-3.4.5 |
| 2807 | ······-·NIST-800-53-AC-6(1) | 2807 | ······-·NIST-800-53-AC-6(1) |
| 2808 | ······-·NIST-800-53-CM-6(a) | 2808 | ······-·NIST-800-53-CM-6(a) |
| Offset 2816, 16 lines modified | Offset 2816, 16 lines modified | ||
| 2816 | ······-·no_reboot_needed | 2816 | ······-·no_reboot_needed |
| 2817 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 2817 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 2818 | ······file: | 2818 | ······file: |
| 2819 | ········path:·/boot/grub2/grub.cfg | 2819 | ········path:·/boot/grub2/grub.cfg |
| 2820 | ········group:·'0' | 2820 | ········group:·'0' |
| 2821 | ······when: | 2821 | ······when: |
| 2822 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2823 | ······-·'"grub2"·in·ansible_facts.packages' | 2822 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2823 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2824 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2824 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2825 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2825 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2826 | ······tags: | 2826 | ······tags: |
| 2827 | ······-·CCE-85849-8 | 2827 | ······-·CCE-85849-8 |
| 2828 | ······-·CJIS-5.5.2.2 | 2828 | ······-·CJIS-5.5.2.2 |
| 2829 | ······-·NIST-800-171-3.4.5 | 2829 | ······-·NIST-800-171-3.4.5 |
| 2830 | ······-·NIST-800-53-AC-6(1) | 2830 | ······-·NIST-800-53-AC-6(1) |
| Offset 2857, 16 lines modified | Offset 2857, 16 lines modified | ||
| 2857 | ······-·no_reboot_needed | 2857 | ······-·no_reboot_needed |
| 2858 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2858 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2859 | ······stat: | 2859 | ······stat: |
| 2860 | ········path:·/boot/grub2/grub.cfg | 2860 | ········path:·/boot/grub2/grub.cfg |
| 2861 | ······register:·file_exists | 2861 | ······register:·file_exists |
| 2862 | ······when: | 2862 | ······when: |
| 2863 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2864 | ······-·'"grub2"·in·ansible_facts.packages' | 2863 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2864 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2865 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2865 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2866 | ······tags: | 2866 | ······tags: |
| 2867 | ······-·CCE-85848-0 | 2867 | ······-·CCE-85848-0 |
| 2868 | ······-·CJIS-5.5.2.2 | 2868 | ······-·CJIS-5.5.2.2 |
| 2869 | ······-·NIST-800-171-3.4.5 | 2869 | ······-·NIST-800-171-3.4.5 |
| 2870 | ······-·NIST-800-53-AC-6(1) | 2870 | ······-·NIST-800-53-AC-6(1) |
| 2871 | ······-·NIST-800-53-CM-6(a) | 2871 | ······-·NIST-800-53-CM-6(a) |
| Offset 2879, 16 lines modified | Offset 2879, 16 lines modified | ||
| 2879 | ······-·no_reboot_needed | 2879 | ······-·no_reboot_needed |
| 2880 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 2880 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 2881 | ······file: | 2881 | ······file: |
| 2882 | ········path:·/boot/grub2/grub.cfg | 2882 | ········path:·/boot/grub2/grub.cfg |
| 2883 | ········owner:·'0' | 2883 | ········owner:·'0' |
| 2884 | ······when: | 2884 | ······when: |
| 2885 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2886 | ······-·'"grub2"·in·ansible_facts.packages' | 2885 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2886 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2887 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2888 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2889 | ······tags: | 2889 | ······tags: |
| 2890 | ······-·CCE-85848-0 | 2890 | ······-·CCE-85848-0 |
| 2891 | ······-·CJIS-5.5.2.2 | 2891 | ······-·CJIS-5.5.2.2 |
| 2892 | ······-·NIST-800-171-3.4.5 | 2892 | ······-·NIST-800-171-3.4.5 |
| 2893 | ······-·NIST-800-53-AC-6(1) | 2893 | ······-·NIST-800-53-AC-6(1) |
| Offset 2918, 16 lines modified | Offset 2918, 16 lines modified | ||
| 2918 | ······-·no_reboot_needed | 2918 | ······-·no_reboot_needed |
| 2919 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 2919 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 2920 | ······stat: | 2920 | ······stat: |
| 2921 | ········path:·/boot/grub2/grub.cfg | 2921 | ········path:·/boot/grub2/grub.cfg |
| 2922 | ······register:·file_exists | 2922 | ······register:·file_exists |
| 2923 | ······when: | 2923 | ······when: |
| 2924 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2925 | ······-·'"grub2"·in·ansible_facts.packages' | 2924 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2925 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2926 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2927 | ······tags: | 2927 | ······tags: |
| 2928 | ······-·CCE-91426-7 | 2928 | ······-·CCE-91426-7 |
| 2929 | ······-·NIST-800-171-3.4.5 | 2929 | ······-·NIST-800-171-3.4.5 |
| 2930 | ······-·NIST-800-53-AC-6(1) | 2930 | ······-·NIST-800-53-AC-6(1) |
| 2931 | ······-·NIST-800-53-CM-6(a) | 2931 | ······-·NIST-800-53-CM-6(a) |
| 2932 | ······-·configure_strategy | 2932 | ······-·configure_strategy |
| Offset 2938, 16 lines modified | Offset 2938, 16 lines modified | ||
| 2938 | ······-·no_reboot_needed | 2938 | ······-·no_reboot_needed |
| 2939 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 2939 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 2940 | ······file: | 2940 | ······file: |
| 2941 | ········path:·/boot/grub2/grub.cfg | 2941 | ········path:·/boot/grub2/grub.cfg |
| 2942 | ········mode:·u-xs,g-xwrs,o-xwrt | 2942 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 2943 | ······when: | 2943 | ······when: |
| 2944 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2945 | ······-·'"grub2"·in·ansible_facts.packages' | 2944 | ······-·'"grub2"·in·ansible_facts.packages' |
| 2945 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 2946 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 2946 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 2947 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 2947 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 2948 | ······tags: | 2948 | ······tags: |
| 2949 | ······-·CCE-91426-7 | 2949 | ······-·CCE-91426-7 |
| 2950 | ······-·NIST-800-171-3.4.5 | 2950 | ······-·NIST-800-171-3.4.5 |
| 2951 | ······-·NIST-800-53-AC-6(1) | 2951 | ······-·NIST-800-53-AC-6(1) |
| 2952 | ······-·NIST-800-53-CM-6(a) | 2952 | ······-·NIST-800-53-CM-6(a) |
| Offset 18652, 16 lines modified | Offset 18652, 16 lines modified | ||
| 18652 | ······-·no_reboot_needed | 18652 | ······-·no_reboot_needed |
| 18653 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 18653 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 18654 | ······stat: | 18654 | ······stat: |
| 18655 | ········path:·/boot/grub2/grub.cfg | 18655 | ········path:·/boot/grub2/grub.cfg |
| 18656 | ······register:·file_exists | 18656 | ······register:·file_exists |
| 18657 | ······when: | 18657 | ······when: |
| 18658 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18659 | ······-·'"grub2"·in·ansible_facts.packages' | 18658 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18659 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18660 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18660 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18661 | ······tags: | 18661 | ······tags: |
| 18662 | ······-·CCE-85849-8 | 18662 | ······-·CCE-85849-8 |
| 18663 | ······-·CJIS-5.5.2.2 | 18663 | ······-·CJIS-5.5.2.2 |
| 18664 | ······-·NIST-800-171-3.4.5 | 18664 | ······-·NIST-800-171-3.4.5 |
| 18665 | ······-·NIST-800-53-AC-6(1) | 18665 | ······-·NIST-800-53-AC-6(1) |
| 18666 | ······-·NIST-800-53-CM-6(a) | 18666 | ······-·NIST-800-53-CM-6(a) |
| Offset 18674, 16 lines modified | Offset 18674, 16 lines modified | ||
| 18674 | ······-·no_reboot_needed | 18674 | ······-·no_reboot_needed |
| 18675 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 18675 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 18676 | ······file: | 18676 | ······file: |
| 18677 | ········path:·/boot/grub2/grub.cfg | 18677 | ········path:·/boot/grub2/grub.cfg |
| 18678 | ········group:·'0' | 18678 | ········group:·'0' |
| 18679 | ······when: | 18679 | ······when: |
| 18680 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18681 | ······-·'"grub2"·in·ansible_facts.packages' | 18680 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18681 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18682 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18682 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18683 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 18683 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 18684 | ······tags: | 18684 | ······tags: |
| 18685 | ······-·CCE-85849-8 | 18685 | ······-·CCE-85849-8 |
| 18686 | ······-·CJIS-5.5.2.2 | 18686 | ······-·CJIS-5.5.2.2 |
| 18687 | ······-·NIST-800-171-3.4.5 | 18687 | ······-·NIST-800-171-3.4.5 |
| 18688 | ······-·NIST-800-53-AC-6(1) | 18688 | ······-·NIST-800-53-AC-6(1) |
| Offset 18715, 16 lines modified | Offset 18715, 16 lines modified | ||
| 18715 | ······-·no_reboot_needed | 18715 | ······-·no_reboot_needed |
| 18716 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 18716 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 18717 | ······stat: | 18717 | ······stat: |
| 18718 | ········path:·/boot/grub2/grub.cfg | 18718 | ········path:·/boot/grub2/grub.cfg |
| 18719 | ······register:·file_exists | 18719 | ······register:·file_exists |
| 18720 | ······when: | 18720 | ······when: |
| 18721 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18722 | ······-·'"grub2"·in·ansible_facts.packages' | 18721 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18722 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18723 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18723 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18724 | ······tags: | 18724 | ······tags: |
| 18725 | ······-·CCE-85848-0 | 18725 | ······-·CCE-85848-0 |
| 18726 | ······-·CJIS-5.5.2.2 | 18726 | ······-·CJIS-5.5.2.2 |
| 18727 | ······-·NIST-800-171-3.4.5 | 18727 | ······-·NIST-800-171-3.4.5 |
| 18728 | ······-·NIST-800-53-AC-6(1) | 18728 | ······-·NIST-800-53-AC-6(1) |
| 18729 | ······-·NIST-800-53-CM-6(a) | 18729 | ······-·NIST-800-53-CM-6(a) |
| Offset 18737, 16 lines modified | Offset 18737, 16 lines modified | ||
| 18737 | ······-·no_reboot_needed | 18737 | ······-·no_reboot_needed |
| 18738 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 18738 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 18739 | ······file: | 18739 | ······file: |
| 18740 | ········path:·/boot/grub2/grub.cfg | 18740 | ········path:·/boot/grub2/grub.cfg |
| 18741 | ········owner:·'0' | 18741 | ········owner:·'0' |
| 18742 | ······when: | 18742 | ······when: |
| 18743 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18744 | ······-·'"grub2"·in·ansible_facts.packages' | 18743 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18744 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18745 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18745 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18746 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 18746 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 18747 | ······tags: | 18747 | ······tags: |
| 18748 | ······-·CCE-85848-0 | 18748 | ······-·CCE-85848-0 |
| 18749 | ······-·CJIS-5.5.2.2 | 18749 | ······-·CJIS-5.5.2.2 |
| 18750 | ······-·NIST-800-171-3.4.5 | 18750 | ······-·NIST-800-171-3.4.5 |
| 18751 | ······-·NIST-800-53-AC-6(1) | 18751 | ······-·NIST-800-53-AC-6(1) |
| Offset 18776, 16 lines modified | Offset 18776, 16 lines modified | ||
| 18776 | ······-·no_reboot_needed | 18776 | ······-·no_reboot_needed |
| 18777 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 18777 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 18778 | ······stat: | 18778 | ······stat: |
| 18779 | ········path:·/boot/grub2/grub.cfg | 18779 | ········path:·/boot/grub2/grub.cfg |
| 18780 | ······register:·file_exists | 18780 | ······register:·file_exists |
| 18781 | ······when: | 18781 | ······when: |
| 18782 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18783 | ······-·'"grub2"·in·ansible_facts.packages' | 18782 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18783 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18784 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18784 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18785 | ······tags: | 18785 | ······tags: |
| 18786 | ······-·CCE-91426-7 | 18786 | ······-·CCE-91426-7 |
| 18787 | ······-·NIST-800-171-3.4.5 | 18787 | ······-·NIST-800-171-3.4.5 |
| 18788 | ······-·NIST-800-53-AC-6(1) | 18788 | ······-·NIST-800-53-AC-6(1) |
| 18789 | ······-·NIST-800-53-CM-6(a) | 18789 | ······-·NIST-800-53-CM-6(a) |
| 18790 | ······-·configure_strategy | 18790 | ······-·configure_strategy |
| Offset 18796, 16 lines modified | Offset 18796, 16 lines modified | ||
| 18796 | ······-·no_reboot_needed | 18796 | ······-·no_reboot_needed |
| 18797 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 18797 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 18798 | ······file: | 18798 | ······file: |
| 18799 | ········path:·/boot/grub2/grub.cfg | 18799 | ········path:·/boot/grub2/grub.cfg |
| 18800 | ········mode:·u-xs,g-xwrs,o-xwrt | 18800 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 18801 | ······when: | 18801 | ······when: |
| 18802 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18803 | ······-·'"grub2"·in·ansible_facts.packages' | 18802 | ······-·'"grub2"·in·ansible_facts.packages' |
| 18803 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 18804 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 18804 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 18805 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 18805 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 18806 | ······tags: | 18806 | ······tags: |
| 18807 | ······-·CCE-91426-7 | 18807 | ······-·CCE-91426-7 |
| 18808 | ······-·NIST-800-171-3.4.5 | 18808 | ······-·NIST-800-171-3.4.5 |
| 18809 | ······-·NIST-800-53-AC-6(1) | 18809 | ······-·NIST-800-53-AC-6(1) |
| 18810 | ······-·NIST-800-53-CM-6(a) | 18810 | ······-·NIST-800-53-CM-6(a) |
| Offset 21255, 16 lines modified | Offset 21255, 16 lines modified | ||
| 21255 | ······-·no_reboot_needed | 21255 | ······-·no_reboot_needed |
| 21256 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21256 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21257 | ······stat: | 21257 | ······stat: |
| 21258 | ········path:·/boot/grub2/grub.cfg | 21258 | ········path:·/boot/grub2/grub.cfg |
| 21259 | ······register:·file_exists | 21259 | ······register:·file_exists |
| 21260 | ······when: | 21260 | ······when: |
| 21261 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21262 | ······-·'"grub2"·in·ansible_facts.packages' | 21261 | ······-·'"grub2"·in·ansible_facts.packages' |
| 21262 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21263 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21263 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21264 | ······tags: | 21264 | ······tags: |
| 21265 | ······-·CCE-85849-8 | 21265 | ······-·CCE-85849-8 |
| 21266 | ······-·CJIS-5.5.2.2 | 21266 | ······-·CJIS-5.5.2.2 |
| 21267 | ······-·NIST-800-171-3.4.5 | 21267 | ······-·NIST-800-171-3.4.5 |
| 21268 | ······-·NIST-800-53-AC-6(1) | 21268 | ······-·NIST-800-53-AC-6(1) |
| 21269 | ······-·NIST-800-53-CM-6(a) | 21269 | ······-·NIST-800-53-CM-6(a) |
| Offset 21277, 16 lines modified | Offset 21277, 16 lines modified | ||
| 21277 | ······-·no_reboot_needed | 21277 | ······-·no_reboot_needed |
| 21278 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 21278 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 21279 | ······file: | 21279 | ······file: |
| 21280 | ········path:·/boot/grub2/grub.cfg | 21280 | ········path:·/boot/grub2/grub.cfg |
| 21281 | ········group:·'0' | 21281 | ········group:·'0' |
| 21282 | ······when: | 21282 | ······when: |
| 21283 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21284 | ······-·'"grub2"·in·ansible_facts.packages' | 21283 | ······-·'"grub2"·in·ansible_facts.packages' |
| 21284 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21285 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21285 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21286 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21286 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21287 | ······tags: | 21287 | ······tags: |
| 21288 | ······-·CCE-85849-8 | 21288 | ······-·CCE-85849-8 |
| 21289 | ······-·CJIS-5.5.2.2 | 21289 | ······-·CJIS-5.5.2.2 |
| 21290 | ······-·NIST-800-171-3.4.5 | 21290 | ······-·NIST-800-171-3.4.5 |
| 21291 | ······-·NIST-800-53-AC-6(1) | 21291 | ······-·NIST-800-53-AC-6(1) |
| Offset 21318, 16 lines modified | Offset 21318, 16 lines modified | ||
| 21318 | ······-·no_reboot_needed | 21318 | ······-·no_reboot_needed |
| 21319 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21319 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21320 | ······stat: | 21320 | ······stat: |
| 21321 | ········path:·/boot/grub2/grub.cfg | 21321 | ········path:·/boot/grub2/grub.cfg |
| 21322 | ······register:·file_exists | 21322 | ······register:·file_exists |
| 21323 | ······when: | 21323 | ······when: |
| 21324 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21325 | ······-·'"grub2"·in·ansible_facts.packages' | 21324 | ······-·'"grub2"·in·ansible_facts.packages' |
| 21325 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21326 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21326 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21327 | ······tags: | 21327 | ······tags: |
| 21328 | ······-·CCE-85848-0 | 21328 | ······-·CCE-85848-0 |
| 21329 | ······-·CJIS-5.5.2.2 | 21329 | ······-·CJIS-5.5.2.2 |
| 21330 | ······-·NIST-800-171-3.4.5 | 21330 | ······-·NIST-800-171-3.4.5 |
| 21331 | ······-·NIST-800-53-AC-6(1) | 21331 | ······-·NIST-800-53-AC-6(1) |
| 21332 | ······-·NIST-800-53-CM-6(a) | 21332 | ······-·NIST-800-53-CM-6(a) |
| Offset 21340, 16 lines modified | Offset 21340, 16 lines modified | ||
| 21340 | ······-·no_reboot_needed | 21340 | ······-·no_reboot_needed |
| 21341 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 21341 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 21342 | ······file: | 21342 | ······file: |
| 21343 | ········path:·/boot/grub2/grub.cfg | 21343 | ········path:·/boot/grub2/grub.cfg |
| 21344 | ········owner:·'0' | 21344 | ········owner:·'0' |
| 21345 | ······when: | 21345 | ······when: |
| 21346 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21347 | ······-·'"grub2"·in·ansible_facts.packages' | 21346 | ······-·'"grub2"·in·ansible_facts.packages' |
| 21347 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21348 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21348 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21349 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21349 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21350 | ······tags: | 21350 | ······tags: |
| 21351 | ······-·CCE-85848-0 | 21351 | ······-·CCE-85848-0 |
| 21352 | ······-·CJIS-5.5.2.2 | 21352 | ······-·CJIS-5.5.2.2 |
| 21353 | ······-·NIST-800-171-3.4.5 | 21353 | ······-·NIST-800-171-3.4.5 |
| 21354 | ······-·NIST-800-53-AC-6(1) | 21354 | ······-·NIST-800-53-AC-6(1) |
| Offset 21379, 16 lines modified | Offset 21379, 16 lines modified | ||
| 21379 | ······-·no_reboot_needed | 21379 | ······-·no_reboot_needed |
| 21380 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 21380 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 21381 | ······stat: | 21381 | ······stat: |
| 21382 | ········path:·/boot/grub2/grub.cfg | 21382 | ········path:·/boot/grub2/grub.cfg |
| 21383 | ······register:·file_exists | 21383 | ······register:·file_exists |
| 21384 | ······when: | 21384 | ······when: |
| 21385 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21386 | ······-·'"grub2"·in·ansible_facts.packages' | 21385 | ······-·'"grub2"·in·ansible_facts.packages' |
| 21386 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21387 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21387 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21388 | ······tags: | 21388 | ······tags: |
| 21389 | ······-·CCE-91426-7 | 21389 | ······-·CCE-91426-7 |
| 21390 | ······-·NIST-800-171-3.4.5 | 21390 | ······-·NIST-800-171-3.4.5 |
| 21391 | ······-·NIST-800-53-AC-6(1) | 21391 | ······-·NIST-800-53-AC-6(1) |
| 21392 | ······-·NIST-800-53-CM-6(a) | 21392 | ······-·NIST-800-53-CM-6(a) |
| 21393 | ······-·configure_strategy | 21393 | ······-·configure_strategy |
| Offset 21399, 16 lines modified | Offset 21399, 16 lines modified | ||
| 21399 | ······-·no_reboot_needed | 21399 | ······-·no_reboot_needed |
| 21400 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 21400 | ····-·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 21401 | ······file: | 21401 | ······file: |
| 21402 | ········path:·/boot/grub2/grub.cfg | 21402 | ········path:·/boot/grub2/grub.cfg |
| 21403 | ········mode:·u-xs,g-xwrs,o-xwrt | 21403 | ········mode:·u-xs,g-xwrs,o-xwrt |
| 21404 | ······when: | 21404 | ······when: |
| 21405 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21406 | ······-·'"grub2"·in·ansible_facts.packages' | 21405 | ······-·'"grub2"·in·ansible_facts.packages' |
| 21406 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 21407 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 21407 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 21408 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 21408 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 21409 | ······tags: | 21409 | ······tags: |
| 21410 | ······-·CCE-91426-7 | 21410 | ······-·CCE-91426-7 |
| 21411 | ······-·NIST-800-171-3.4.5 | 21411 | ······-·NIST-800-171-3.4.5 |
| 21412 | ······-·NIST-800-53-AC-6(1) | 21412 | ······-·NIST-800-53-AC-6(1) |
| 21413 | ······-·NIST-800-53-CM-6(a) | 21413 | ······-·NIST-800-53-CM-6(a) |
| Offset 26994, 16 lines modified | Offset 26994, 16 lines modified | ||
| 26994 | ······-·no_reboot_needed | 26994 | ······-·no_reboot_needed |
| 26995 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 26995 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 26996 | ······stat: | 26996 | ······stat: |
| 26997 | ········path:·/boot/grub2/grub.cfg | 26997 | ········path:·/boot/grub2/grub.cfg |
| 26998 | ······register:·file_exists | 26998 | ······register:·file_exists |
| 26999 | ······when: | 26999 | ······when: |
| 27000 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27001 | ······-·'"grub2"·in·ansible_facts.packages' | 27000 | ······-·'"grub2"·in·ansible_facts.packages' |
| 27001 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27002 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27002 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27003 | ······tags: | 27003 | ······tags: |
| 27004 | ······-·CCE-85849-8 | 27004 | ······-·CCE-85849-8 |
| 27005 | ······-·CJIS-5.5.2.2 | 27005 | ······-·CJIS-5.5.2.2 |
| 27006 | ······-·NIST-800-171-3.4.5 | 27006 | ······-·NIST-800-171-3.4.5 |
| 27007 | ······-·NIST-800-53-AC-6(1) | 27007 | ······-·NIST-800-53-AC-6(1) |
| 27008 | ······-·NIST-800-53-CM-6(a) | 27008 | ······-·NIST-800-53-CM-6(a) |
| Offset 27016, 16 lines modified | Offset 27016, 16 lines modified | ||
| 27016 | ······-·no_reboot_needed | 27016 | ······-·no_reboot_needed |
| 27017 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 27017 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 27018 | ······file: | 27018 | ······file: |
| 27019 | ········path:·/boot/grub2/grub.cfg | 27019 | ········path:·/boot/grub2/grub.cfg |
| 27020 | ········group:·'0' | 27020 | ········group:·'0' |
| 27021 | ······when: | 27021 | ······when: |
| 27022 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27023 | ······-·'"grub2"·in·ansible_facts.packages' | 27022 | ······-·'"grub2"·in·ansible_facts.packages' |
| 27023 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27024 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27024 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27025 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 27025 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 27026 | ······tags: | 27026 | ······tags: |
| 27027 | ······-·CCE-85849-8 | 27027 | ······-·CCE-85849-8 |
| 27028 | ······-·CJIS-5.5.2.2 | 27028 | ······-·CJIS-5.5.2.2 |
| 27029 | ······-·NIST-800-171-3.4.5 | 27029 | ······-·NIST-800-171-3.4.5 |
| 27030 | ······-·NIST-800-53-AC-6(1) | 27030 | ······-·NIST-800-53-AC-6(1) |
| Offset 27057, 16 lines modified | Offset 27057, 16 lines modified | ||
| 27057 | ······-·no_reboot_needed | 27057 | ······-·no_reboot_needed |
| 27058 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 27058 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 27059 | ······stat: | 27059 | ······stat: |
| 27060 | ········path:·/boot/grub2/grub.cfg | 27060 | ········path:·/boot/grub2/grub.cfg |
| 27061 | ······register:·file_exists | 27061 | ······register:·file_exists |
| 27062 | ······when: | 27062 | ······when: |
| 27063 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27064 | ······-·'"grub2"·in·ansible_facts.packages' | 27063 | ······-·'"grub2"·in·ansible_facts.packages' |
| 27064 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27065 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27065 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27066 | ······tags: | 27066 | ······tags: |
| 27067 | ······-·CCE-85848-0 | 27067 | ······-·CCE-85848-0 |
| 27068 | ······-·CJIS-5.5.2.2 | 27068 | ······-·CJIS-5.5.2.2 |
| 27069 | ······-·NIST-800-171-3.4.5 | 27069 | ······-·NIST-800-171-3.4.5 |
| 27070 | ······-·NIST-800-53-AC-6(1) | 27070 | ······-·NIST-800-53-AC-6(1) |
| 27071 | ······-·NIST-800-53-CM-6(a) | 27071 | ······-·NIST-800-53-CM-6(a) |
| Offset 27079, 16 lines modified | Offset 27079, 16 lines modified | ||
| 27079 | ······-·no_reboot_needed | 27079 | ······-·no_reboot_needed |
| 27080 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 27080 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 27081 | ······file: | 27081 | ······file: |
| 27082 | ········path:·/boot/grub2/grub.cfg | 27082 | ········path:·/boot/grub2/grub.cfg |
| 27083 | ········owner:·'0' | 27083 | ········owner:·'0' |
| 27084 | ······when: | 27084 | ······when: |
| 27085 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27086 | ······-·'"grub2"·in·ansible_facts.packages' | 27085 | ······-·'"grub2"·in·ansible_facts.packages' |
| 27086 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 27087 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 27087 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 27088 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 27088 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 27089 | ······tags: | 27089 | ······tags: |
| 27090 | ······-·CCE-85848-0 | 27090 | ······-·CCE-85848-0 |
| 27091 | ······-·CJIS-5.5.2.2 | 27091 | ······-·CJIS-5.5.2.2 |
| 27092 | ······-·NIST-800-171-3.4.5 | 27092 | ······-·NIST-800-171-3.4.5 |
| 27093 | ······-·NIST-800-53-AC-6(1) | 27093 | ······-·NIST-800-53-AC-6(1) |
| Offset 25610, 16 lines modified | Offset 25610, 16 lines modified | ||
| 25610 | ······-·no_reboot_needed | 25610 | ······-·no_reboot_needed |
| 25611 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 25611 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 25612 | ······stat: | 25612 | ······stat: |
| 25613 | ········path:·/boot/grub2/grub.cfg | 25613 | ········path:·/boot/grub2/grub.cfg |
| 25614 | ······register:·file_exists | 25614 | ······register:·file_exists |
| 25615 | ······when: | 25615 | ······when: |
| 25616 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25617 | ······-·'"grub2"·in·ansible_facts.packages' | 25616 | ······-·'"grub2"·in·ansible_facts.packages' |
| 25617 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25618 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 25618 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 25619 | ······tags: | 25619 | ······tags: |
| 25620 | ······-·CCE-85849-8 | 25620 | ······-·CCE-85849-8 |
| 25621 | ······-·CJIS-5.5.2.2 | 25621 | ······-·CJIS-5.5.2.2 |
| 25622 | ······-·NIST-800-171-3.4.5 | 25622 | ······-·NIST-800-171-3.4.5 |
| 25623 | ······-·NIST-800-53-AC-6(1) | 25623 | ······-·NIST-800-53-AC-6(1) |
| 25624 | ······-·NIST-800-53-CM-6(a) | 25624 | ······-·NIST-800-53-CM-6(a) |
| Offset 25632, 16 lines modified | Offset 25632, 16 lines modified | ||
| 25632 | ······-·no_reboot_needed | 25632 | ······-·no_reboot_needed |
| 25633 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 25633 | ····-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 25634 | ······file: | 25634 | ······file: |
| 25635 | ········path:·/boot/grub2/grub.cfg | 25635 | ········path:·/boot/grub2/grub.cfg |
| 25636 | ········group:·'0' | 25636 | ········group:·'0' |
| 25637 | ······when: | 25637 | ······when: |
| 25638 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25639 | ······-·'"grub2"·in·ansible_facts.packages' | 25638 | ······-·'"grub2"·in·ansible_facts.packages' |
| 25639 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25640 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 25640 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 25641 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 25641 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 25642 | ······tags: | 25642 | ······tags: |
| 25643 | ······-·CCE-85849-8 | 25643 | ······-·CCE-85849-8 |
| 25644 | ······-·CJIS-5.5.2.2 | 25644 | ······-·CJIS-5.5.2.2 |
| 25645 | ······-·NIST-800-171-3.4.5 | 25645 | ······-·NIST-800-171-3.4.5 |
| 25646 | ······-·NIST-800-53-AC-6(1) | 25646 | ······-·NIST-800-53-AC-6(1) |
| Offset 25673, 16 lines modified | Offset 25673, 16 lines modified | ||
| 25673 | ······-·no_reboot_needed | 25673 | ······-·no_reboot_needed |
| 25674 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg | 25674 | ····-·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 25675 | ······stat: | 25675 | ······stat: |
| 25676 | ········path:·/boot/grub2/grub.cfg | 25676 | ········path:·/boot/grub2/grub.cfg |
| 25677 | ······register:·file_exists | 25677 | ······register:·file_exists |
| 25678 | ······when: | 25678 | ······when: |
| 25679 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25680 | ······-·'"grub2"·in·ansible_facts.packages' | 25679 | ······-·'"grub2"·in·ansible_facts.packages' |
| 25680 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25681 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 25681 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 25682 | ······tags: | 25682 | ······tags: |
| 25683 | ······-·CCE-85848-0 | 25683 | ······-·CCE-85848-0 |
| 25684 | ······-·CJIS-5.5.2.2 | 25684 | ······-·CJIS-5.5.2.2 |
| 25685 | ······-·NIST-800-171-3.4.5 | 25685 | ······-·NIST-800-171-3.4.5 |
| 25686 | ······-·NIST-800-53-AC-6(1) | 25686 | ······-·NIST-800-53-AC-6(1) |
| 25687 | ······-·NIST-800-53-CM-6(a) | 25687 | ······-·NIST-800-53-CM-6(a) |
| Offset 25695, 16 lines modified | Offset 25695, 16 lines modified | ||
| 25695 | ······-·no_reboot_needed | 25695 | ······-·no_reboot_needed |
| 25696 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 25696 | ····-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 25697 | ······file: | 25697 | ······file: |
| 25698 | ········path:·/boot/grub2/grub.cfg | 25698 | ········path:·/boot/grub2/grub.cfg |
| 25699 | ········owner:·'0' | 25699 | ········owner:·'0' |
| 25700 | ······when: | 25700 | ······when: |
| 25701 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25702 | ······-·'"grub2"·in·ansible_facts.packages' | 25701 | ······-·'"grub2"·in·ansible_facts.packages' |
| 25702 | ······-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 25703 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 25703 | ······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 25704 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists | 25704 | ······-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 25705 | ······tags: | 25705 | ······tags: |
| 25706 | ······-·CCE-85848-0 | 25706 | ······-·CCE-85848-0 |
| 25707 | ······-·CJIS-5.5.2.2 | 25707 | ······-·CJIS-5.5.2.2 |
| 25708 | ······-·NIST-800-171-3.4.5 | 25708 | ······-·NIST-800-171-3.4.5 |
| 25709 | ······-·NIST-800-53-AC-6(1) | 25709 | ······-·NIST-800-53-AC-6(1) |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2024-01-08T11: | 3 | ··<xccdf-1.2:version·time="2024-01-08T11:58:08.656492">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·7</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·7</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·V3R9. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·V3R9. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·7,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·7,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2024-01-08T11: | 3 | ··<xccdf-1.2:version·time="2024-01-08T11:58:23.333133">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R8. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R8. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 12735, 16 lines modified | Offset 12735, 16 lines modified | ||
| 12735 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 12735 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 12736 | ··find: | 12736 | ··find: |
| 12737 | ····paths:·/etc/audit/rules.d/ | 12737 | ····paths:·/etc/audit/rules.d/ |
| 12738 | ····patterns:·'*.rules' | 12738 | ····patterns:·'*.rules' |
| 12739 | ··register:·find_rules_d | 12739 | ··register:·find_rules_d |
| 12740 | ··when: | 12740 | ··when: |
| 12741 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12742 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12741 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12742 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12743 | ··tags: | 12743 | ··tags: |
| 12744 | ··-·CJIS-5.4.1.1 | 12744 | ··-·CJIS-5.4.1.1 |
| 12745 | ··-·NIST-800-171-3.3.1 | 12745 | ··-·NIST-800-171-3.3.1 |
| 12746 | ··-·NIST-800-171-3.4.3 | 12746 | ··-·NIST-800-171-3.4.3 |
| 12747 | ··-·NIST-800-53-AC-6(9) | 12747 | ··-·NIST-800-53-AC-6(9) |
| 12748 | ··-·NIST-800-53-CM-6(a) | 12748 | ··-·NIST-800-53-CM-6(a) |
| 12749 | ··-·PCI-DSS-Req-10.5.2 | 12749 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12759, 16 lines modified | Offset 12759, 16 lines modified | ||
| 12759 | ··lineinfile: | 12759 | ··lineinfile: |
| 12760 | ····path:·'{{·item·}}' | 12760 | ····path:·'{{·item·}}' |
| 12761 | ····regexp:·^\s*(?:-e)\s+.*$ | 12761 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 12762 | ····state:·absent | 12762 | ····state:·absent |
| 12763 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 12763 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 12764 | ····}}' | 12764 | ····}}' |
| 12765 | ··when: | 12765 | ··when: |
| 12766 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12767 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12767 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12768 | ··tags: | 12768 | ··tags: |
| 12769 | ··-·CJIS-5.4.1.1 | 12769 | ··-·CJIS-5.4.1.1 |
| 12770 | ··-·NIST-800-171-3.3.1 | 12770 | ··-·NIST-800-171-3.3.1 |
| 12771 | ··-·NIST-800-171-3.4.3 | 12771 | ··-·NIST-800-171-3.4.3 |
| 12772 | ··-·NIST-800-53-AC-6(9) | 12772 | ··-·NIST-800-53-AC-6(9) |
| 12773 | ··-·NIST-800-53-CM-6(a) | 12773 | ··-·NIST-800-53-CM-6(a) |
| 12774 | ··-·PCI-DSS-Req-10.5.2 | 12774 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12785, 16 lines modified | Offset 12785, 16 lines modified | ||
| 12785 | ····create:·true | 12785 | ····create:·true |
| 12786 | ····line:·-e·2 | 12786 | ····line:·-e·2 |
| 12787 | ····mode:·o-rwx | 12787 | ····mode:·o-rwx |
| 12788 | ··loop: | 12788 | ··loop: |
| 12789 | ··-·/etc/audit/audit.rules | 12789 | ··-·/etc/audit/audit.rules |
| 12790 | ··-·/etc/audit/rules.d/immutable.rules | 12790 | ··-·/etc/audit/rules.d/immutable.rules |
| 12791 | ··when: | 12791 | ··when: |
| 12792 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12793 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12792 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12793 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12794 | ··tags: | 12794 | ··tags: |
| 12795 | ··-·CJIS-5.4.1.1 | 12795 | ··-·CJIS-5.4.1.1 |
| 12796 | ··-·NIST-800-171-3.3.1 | 12796 | ··-·NIST-800-171-3.3.1 |
| 12797 | ··-·NIST-800-171-3.4.3 | 12797 | ··-·NIST-800-171-3.4.3 |
| 12798 | ··-·NIST-800-53-AC-6(9) | 12798 | ··-·NIST-800-53-AC-6(9) |
| 12799 | ··-·NIST-800-53-CM-6(a) | 12799 | ··-·NIST-800-53-CM-6(a) |
| 12800 | ··-·PCI-DSS-Req-10.5.2 | 12800 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 13679, 16 lines modified | Offset 13679, 16 lines modified | ||
| 13679 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 13679 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 13680 | ··find: | 13680 | ··find: |
| 13681 | ····paths:·/etc/audit/rules.d | 13681 | ····paths:·/etc/audit/rules.d |
| 13682 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 13682 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 13683 | ····patterns:·'*.rules' | 13683 | ····patterns:·'*.rules' |
| 13684 | ··register:·find_existing_watch_rules_d | 13684 | ··register:·find_existing_watch_rules_d |
| 13685 | ··when: | 13685 | ··when: |
| 13686 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13687 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13686 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13687 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13688 | ··tags: | 13688 | ··tags: |
| 13689 | ··-·CJIS-5.4.1.1 | 13689 | ··-·CJIS-5.4.1.1 |
| 13690 | ··-·NIST-800-171-3.1.7 | 13690 | ··-·NIST-800-171-3.1.7 |
| 13691 | ··-·NIST-800-53-AC-2(7)(b) | 13691 | ··-·NIST-800-53-AC-2(7)(b) |
| 13692 | ··-·NIST-800-53-AC-6(9) | 13692 | ··-·NIST-800-53-AC-6(9) |
| 13693 | ··-·NIST-800-53-AU-12(c) | 13693 | ··-·NIST-800-53-AU-12(c) |
| 13694 | ··-·NIST-800-53-AU-2(d) | 13694 | ··-·NIST-800-53-AU-2(d) |
| Offset 13705, 16 lines modified | Offset 13705, 16 lines modified | ||
| 13705 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 13705 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 13706 | ··find: | 13706 | ··find: |
| 13707 | ····paths:·/etc/audit/rules.d | 13707 | ····paths:·/etc/audit/rules.d |
| 13708 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 13708 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 13709 | ····patterns:·'*.rules' | 13709 | ····patterns:·'*.rules' |
| 13710 | ··register:·find_watch_key | 13710 | ··register:·find_watch_key |
| 13711 | ··when: | 13711 | ··when: |
| 13712 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13713 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13712 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13713 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13714 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 13714 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 13715 | ····==·0 | 13715 | ····==·0 |
| 13716 | ··tags: | 13716 | ··tags: |
| 13717 | ··-·CJIS-5.4.1.1 | 13717 | ··-·CJIS-5.4.1.1 |
| 13718 | ··-·NIST-800-171-3.1.7 | 13718 | ··-·NIST-800-171-3.1.7 |
| 13719 | ··-·NIST-800-53-AC-2(7)(b) | 13719 | ··-·NIST-800-53-AC-2(7)(b) |
| 13720 | ··-·NIST-800-53-AC-6(9) | 13720 | ··-·NIST-800-53-AC-6(9) |
| Offset 13731, 16 lines modified | Offset 13731, 16 lines modified | ||
| 13731 | ··-·restrict_strategy | 13731 | ··-·restrict_strategy |
| 13732 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 13732 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 13733 | ··set_fact: | 13733 | ··set_fact: |
| 13734 | ····all_files: | 13734 | ····all_files: |
| 13735 | ····-·/etc/audit/rules.d/actions.rules | 13735 | ····-·/etc/audit/rules.d/actions.rules |
| 13736 | ··when: | 13736 | ··when: |
| 13737 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13738 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13737 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13738 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13739 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 13739 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 13740 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 13740 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 13741 | ··tags: | 13741 | ··tags: |
| 13742 | ··-·CJIS-5.4.1.1 | 13742 | ··-·CJIS-5.4.1.1 |
| 13743 | ··-·NIST-800-171-3.1.7 | 13743 | ··-·NIST-800-171-3.1.7 |
| 13744 | ··-·NIST-800-53-AC-2(7)(b) | 13744 | ··-·NIST-800-53-AC-2(7)(b) |
| 13745 | ··-·NIST-800-53-AC-6(9) | 13745 | ··-·NIST-800-53-AC-6(9) |
| Offset 13757, 16 lines modified | Offset 13757, 16 lines modified | ||
| 13757 | ··-·restrict_strategy | 13757 | ··-·restrict_strategy |
| 13758 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 13758 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 13759 | ··set_fact: | 13759 | ··set_fact: |
| 13760 | ····all_files: | 13760 | ····all_files: |
| 13761 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 13761 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 13762 | ··when: | 13762 | ··when: |
| 13763 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13764 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13763 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13764 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13765 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 13765 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 13766 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 13766 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 13767 | ··tags: | 13767 | ··tags: |
| 13768 | ··-·CJIS-5.4.1.1 | 13768 | ··-·CJIS-5.4.1.1 |
| 13769 | ··-·NIST-800-171-3.1.7 | 13769 | ··-·NIST-800-171-3.1.7 |
| 13770 | ··-·NIST-800-53-AC-2(7)(b) | 13770 | ··-·NIST-800-53-AC-2(7)(b) |
| 13771 | ··-·NIST-800-53-AC-6(9) | 13771 | ··-·NIST-800-53-AC-6(9) |
| Offset 13785, 16 lines modified | Offset 13785, 16 lines modified | ||
| 13785 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 13785 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 49137/53854 bytes (91.24%) of diff not shown. | |||
| Offset 12735, 16 lines modified | Offset 12735, 16 lines modified | ||
| 12735 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 12735 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 12736 | ··find: | 12736 | ··find: |
| 12737 | ····paths:·/etc/audit/rules.d/ | 12737 | ····paths:·/etc/audit/rules.d/ |
| 12738 | ····patterns:·'*.rules' | 12738 | ····patterns:·'*.rules' |
| 12739 | ··register:·find_rules_d | 12739 | ··register:·find_rules_d |
| 12740 | ··when: | 12740 | ··when: |
| 12741 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12742 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12741 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12742 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12743 | ··tags: | 12743 | ··tags: |
| 12744 | ··-·CJIS-5.4.1.1 | 12744 | ··-·CJIS-5.4.1.1 |
| 12745 | ··-·NIST-800-171-3.3.1 | 12745 | ··-·NIST-800-171-3.3.1 |
| 12746 | ··-·NIST-800-171-3.4.3 | 12746 | ··-·NIST-800-171-3.4.3 |
| 12747 | ··-·NIST-800-53-AC-6(9) | 12747 | ··-·NIST-800-53-AC-6(9) |
| 12748 | ··-·NIST-800-53-CM-6(a) | 12748 | ··-·NIST-800-53-CM-6(a) |
| 12749 | ··-·PCI-DSS-Req-10.5.2 | 12749 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12759, 16 lines modified | Offset 12759, 16 lines modified | ||
| 12759 | ··lineinfile: | 12759 | ··lineinfile: |
| 12760 | ····path:·'{{·item·}}' | 12760 | ····path:·'{{·item·}}' |
| 12761 | ····regexp:·^\s*(?:-e)\s+.*$ | 12761 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 12762 | ····state:·absent | 12762 | ····state:·absent |
| 12763 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 12763 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 12764 | ····}}' | 12764 | ····}}' |
| 12765 | ··when: | 12765 | ··when: |
| 12766 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12767 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12767 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12768 | ··tags: | 12768 | ··tags: |
| 12769 | ··-·CJIS-5.4.1.1 | 12769 | ··-·CJIS-5.4.1.1 |
| 12770 | ··-·NIST-800-171-3.3.1 | 12770 | ··-·NIST-800-171-3.3.1 |
| 12771 | ··-·NIST-800-171-3.4.3 | 12771 | ··-·NIST-800-171-3.4.3 |
| 12772 | ··-·NIST-800-53-AC-6(9) | 12772 | ··-·NIST-800-53-AC-6(9) |
| 12773 | ··-·NIST-800-53-CM-6(a) | 12773 | ··-·NIST-800-53-CM-6(a) |
| 12774 | ··-·PCI-DSS-Req-10.5.2 | 12774 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12785, 16 lines modified | Offset 12785, 16 lines modified | ||
| 12785 | ····create:·true | 12785 | ····create:·true |
| 12786 | ····line:·-e·2 | 12786 | ····line:·-e·2 |
| 12787 | ····mode:·o-rwx | 12787 | ····mode:·o-rwx |
| 12788 | ··loop: | 12788 | ··loop: |
| 12789 | ··-·/etc/audit/audit.rules | 12789 | ··-·/etc/audit/audit.rules |
| 12790 | ··-·/etc/audit/rules.d/immutable.rules | 12790 | ··-·/etc/audit/rules.d/immutable.rules |
| 12791 | ··when: | 12791 | ··when: |
| 12792 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12793 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12792 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12793 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12794 | ··tags: | 12794 | ··tags: |
| 12795 | ··-·CJIS-5.4.1.1 | 12795 | ··-·CJIS-5.4.1.1 |
| 12796 | ··-·NIST-800-171-3.3.1 | 12796 | ··-·NIST-800-171-3.3.1 |
| 12797 | ··-·NIST-800-171-3.4.3 | 12797 | ··-·NIST-800-171-3.4.3 |
| 12798 | ··-·NIST-800-53-AC-6(9) | 12798 | ··-·NIST-800-53-AC-6(9) |
| 12799 | ··-·NIST-800-53-CM-6(a) | 12799 | ··-·NIST-800-53-CM-6(a) |
| 12800 | ··-·PCI-DSS-Req-10.5.2 | 12800 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 13679, 16 lines modified | Offset 13679, 16 lines modified | ||
| 13679 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 13679 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 13680 | ··find: | 13680 | ··find: |
| 13681 | ····paths:·/etc/audit/rules.d | 13681 | ····paths:·/etc/audit/rules.d |
| 13682 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 13682 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 13683 | ····patterns:·'*.rules' | 13683 | ····patterns:·'*.rules' |
| 13684 | ··register:·find_existing_watch_rules_d | 13684 | ··register:·find_existing_watch_rules_d |
| 13685 | ··when: | 13685 | ··when: |
| 13686 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13687 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13686 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13687 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13688 | ··tags: | 13688 | ··tags: |
| 13689 | ··-·CJIS-5.4.1.1 | 13689 | ··-·CJIS-5.4.1.1 |
| 13690 | ··-·NIST-800-171-3.1.7 | 13690 | ··-·NIST-800-171-3.1.7 |
| 13691 | ··-·NIST-800-53-AC-2(7)(b) | 13691 | ··-·NIST-800-53-AC-2(7)(b) |
| 13692 | ··-·NIST-800-53-AC-6(9) | 13692 | ··-·NIST-800-53-AC-6(9) |
| 13693 | ··-·NIST-800-53-AU-12(c) | 13693 | ··-·NIST-800-53-AU-12(c) |
| 13694 | ··-·NIST-800-53-AU-2(d) | 13694 | ··-·NIST-800-53-AU-2(d) |
| Offset 13705, 16 lines modified | Offset 13705, 16 lines modified | ||
| 13705 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 13705 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 13706 | ··find: | 13706 | ··find: |
| 13707 | ····paths:·/etc/audit/rules.d | 13707 | ····paths:·/etc/audit/rules.d |
| 13708 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 13708 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 13709 | ····patterns:·'*.rules' | 13709 | ····patterns:·'*.rules' |
| 13710 | ··register:·find_watch_key | 13710 | ··register:·find_watch_key |
| 13711 | ··when: | 13711 | ··when: |
| 13712 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13713 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13712 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13713 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13714 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 13714 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 13715 | ····==·0 | 13715 | ····==·0 |
| 13716 | ··tags: | 13716 | ··tags: |
| 13717 | ··-·CJIS-5.4.1.1 | 13717 | ··-·CJIS-5.4.1.1 |
| 13718 | ··-·NIST-800-171-3.1.7 | 13718 | ··-·NIST-800-171-3.1.7 |
| 13719 | ··-·NIST-800-53-AC-2(7)(b) | 13719 | ··-·NIST-800-53-AC-2(7)(b) |
| 13720 | ··-·NIST-800-53-AC-6(9) | 13720 | ··-·NIST-800-53-AC-6(9) |
| Offset 13731, 16 lines modified | Offset 13731, 16 lines modified | ||
| 13731 | ··-·restrict_strategy | 13731 | ··-·restrict_strategy |
| 13732 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 13732 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 13733 | ··set_fact: | 13733 | ··set_fact: |
| 13734 | ····all_files: | 13734 | ····all_files: |
| 13735 | ····-·/etc/audit/rules.d/actions.rules | 13735 | ····-·/etc/audit/rules.d/actions.rules |
| 13736 | ··when: | 13736 | ··when: |
| 13737 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13738 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13737 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13738 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13739 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 13739 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 13740 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 13740 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 13741 | ··tags: | 13741 | ··tags: |
| 13742 | ··-·CJIS-5.4.1.1 | 13742 | ··-·CJIS-5.4.1.1 |
| 13743 | ··-·NIST-800-171-3.1.7 | 13743 | ··-·NIST-800-171-3.1.7 |
| 13744 | ··-·NIST-800-53-AC-2(7)(b) | 13744 | ··-·NIST-800-53-AC-2(7)(b) |
| 13745 | ··-·NIST-800-53-AC-6(9) | 13745 | ··-·NIST-800-53-AC-6(9) |
| Offset 13757, 16 lines modified | Offset 13757, 16 lines modified | ||
| 13757 | ··-·restrict_strategy | 13757 | ··-·restrict_strategy |
| 13758 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 13758 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 13759 | ··set_fact: | 13759 | ··set_fact: |
| 13760 | ····all_files: | 13760 | ····all_files: |
| 13761 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 13761 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 13762 | ··when: | 13762 | ··when: |
| 13763 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13764 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13763 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13764 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13765 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 13765 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 13766 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 13766 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 13767 | ··tags: | 13767 | ··tags: |
| 13768 | ··-·CJIS-5.4.1.1 | 13768 | ··-·CJIS-5.4.1.1 |
| 13769 | ··-·NIST-800-171-3.1.7 | 13769 | ··-·NIST-800-171-3.1.7 |
| 13770 | ··-·NIST-800-53-AC-2(7)(b) | 13770 | ··-·NIST-800-53-AC-2(7)(b) |
| 13771 | ··-·NIST-800-53-AC-6(9) | 13771 | ··-·NIST-800-53-AC-6(9) |
| Offset 13785, 16 lines modified | Offset 13785, 16 lines modified | ||
| 13785 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 13785 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 49137/53854 bytes (91.24%) of diff not shown. | |||
| Offset 12627, 16 lines modified | Offset 12627, 16 lines modified | ||
| 12627 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 12627 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 12628 | ··find: | 12628 | ··find: |
| 12629 | ····paths:·/etc/audit/rules.d/ | 12629 | ····paths:·/etc/audit/rules.d/ |
| 12630 | ····patterns:·'*.rules' | 12630 | ····patterns:·'*.rules' |
| 12631 | ··register:·find_rules_d | 12631 | ··register:·find_rules_d |
| 12632 | ··when: | 12632 | ··when: |
| 12633 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12634 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12633 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12634 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12635 | ··tags: | 12635 | ··tags: |
| 12636 | ··-·CJIS-5.4.1.1 | 12636 | ··-·CJIS-5.4.1.1 |
| 12637 | ··-·NIST-800-171-3.3.1 | 12637 | ··-·NIST-800-171-3.3.1 |
| 12638 | ··-·NIST-800-171-3.4.3 | 12638 | ··-·NIST-800-171-3.4.3 |
| 12639 | ··-·NIST-800-53-AC-6(9) | 12639 | ··-·NIST-800-53-AC-6(9) |
| 12640 | ··-·NIST-800-53-CM-6(a) | 12640 | ··-·NIST-800-53-CM-6(a) |
| 12641 | ··-·PCI-DSS-Req-10.5.2 | 12641 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12651, 16 lines modified | Offset 12651, 16 lines modified | ||
| 12651 | ··lineinfile: | 12651 | ··lineinfile: |
| 12652 | ····path:·'{{·item·}}' | 12652 | ····path:·'{{·item·}}' |
| 12653 | ····regexp:·^\s*(?:-e)\s+.*$ | 12653 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 12654 | ····state:·absent | 12654 | ····state:·absent |
| 12655 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 12655 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 12656 | ····}}' | 12656 | ····}}' |
| 12657 | ··when: | 12657 | ··when: |
| 12658 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12659 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12658 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12659 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12660 | ··tags: | 12660 | ··tags: |
| 12661 | ··-·CJIS-5.4.1.1 | 12661 | ··-·CJIS-5.4.1.1 |
| 12662 | ··-·NIST-800-171-3.3.1 | 12662 | ··-·NIST-800-171-3.3.1 |
| 12663 | ··-·NIST-800-171-3.4.3 | 12663 | ··-·NIST-800-171-3.4.3 |
| 12664 | ··-·NIST-800-53-AC-6(9) | 12664 | ··-·NIST-800-53-AC-6(9) |
| 12665 | ··-·NIST-800-53-CM-6(a) | 12665 | ··-·NIST-800-53-CM-6(a) |
| 12666 | ··-·PCI-DSS-Req-10.5.2 | 12666 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12677, 16 lines modified | Offset 12677, 16 lines modified | ||
| 12677 | ····create:·true | 12677 | ····create:·true |
| 12678 | ····line:·-e·2 | 12678 | ····line:·-e·2 |
| 12679 | ····mode:·o-rwx | 12679 | ····mode:·o-rwx |
| 12680 | ··loop: | 12680 | ··loop: |
| 12681 | ··-·/etc/audit/audit.rules | 12681 | ··-·/etc/audit/audit.rules |
| 12682 | ··-·/etc/audit/rules.d/immutable.rules | 12682 | ··-·/etc/audit/rules.d/immutable.rules |
| 12683 | ··when: | 12683 | ··when: |
| 12684 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12685 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 12684 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 12685 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 12686 | ··tags: | 12686 | ··tags: |
| 12687 | ··-·CJIS-5.4.1.1 | 12687 | ··-·CJIS-5.4.1.1 |
| 12688 | ··-·NIST-800-171-3.3.1 | 12688 | ··-·NIST-800-171-3.3.1 |
| 12689 | ··-·NIST-800-171-3.4.3 | 12689 | ··-·NIST-800-171-3.4.3 |
| 12690 | ··-·NIST-800-53-AC-6(9) | 12690 | ··-·NIST-800-53-AC-6(9) |
| 12691 | ··-·NIST-800-53-CM-6(a) | 12691 | ··-·NIST-800-53-CM-6(a) |
| 12692 | ··-·PCI-DSS-Req-10.5.2 | 12692 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 13571, 16 lines modified | Offset 13571, 16 lines modified | ||
| 13571 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 13571 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 13572 | ··find: | 13572 | ··find: |
| 13573 | ····paths:·/etc/audit/rules.d | 13573 | ····paths:·/etc/audit/rules.d |
| 13574 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 13574 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 13575 | ····patterns:·'*.rules' | 13575 | ····patterns:·'*.rules' |
| 13576 | ··register:·find_existing_watch_rules_d | 13576 | ··register:·find_existing_watch_rules_d |
| 13577 | ··when: | 13577 | ··when: |
| 13578 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13579 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13578 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13579 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13580 | ··tags: | 13580 | ··tags: |
| 13581 | ··-·CJIS-5.4.1.1 | 13581 | ··-·CJIS-5.4.1.1 |
| 13582 | ··-·NIST-800-171-3.1.7 | 13582 | ··-·NIST-800-171-3.1.7 |
| 13583 | ··-·NIST-800-53-AC-2(7)(b) | 13583 | ··-·NIST-800-53-AC-2(7)(b) |
| 13584 | ··-·NIST-800-53-AC-6(9) | 13584 | ··-·NIST-800-53-AC-6(9) |
| 13585 | ··-·NIST-800-53-AU-12(c) | 13585 | ··-·NIST-800-53-AU-12(c) |
| 13586 | ··-·NIST-800-53-AU-2(d) | 13586 | ··-·NIST-800-53-AU-2(d) |
| Offset 13597, 16 lines modified | Offset 13597, 16 lines modified | ||
| 13597 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 13597 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 13598 | ··find: | 13598 | ··find: |
| 13599 | ····paths:·/etc/audit/rules.d | 13599 | ····paths:·/etc/audit/rules.d |
| 13600 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 13600 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 13601 | ····patterns:·'*.rules' | 13601 | ····patterns:·'*.rules' |
| 13602 | ··register:·find_watch_key | 13602 | ··register:·find_watch_key |
| 13603 | ··when: | 13603 | ··when: |
| 13604 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13605 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13604 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13605 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13606 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 13606 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 13607 | ····==·0 | 13607 | ····==·0 |
| 13608 | ··tags: | 13608 | ··tags: |
| 13609 | ··-·CJIS-5.4.1.1 | 13609 | ··-·CJIS-5.4.1.1 |
| 13610 | ··-·NIST-800-171-3.1.7 | 13610 | ··-·NIST-800-171-3.1.7 |
| 13611 | ··-·NIST-800-53-AC-2(7)(b) | 13611 | ··-·NIST-800-53-AC-2(7)(b) |
| 13612 | ··-·NIST-800-53-AC-6(9) | 13612 | ··-·NIST-800-53-AC-6(9) |
| Offset 13623, 16 lines modified | Offset 13623, 16 lines modified | ||
| 13623 | ··-·restrict_strategy | 13623 | ··-·restrict_strategy |
| 13624 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 13624 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 13625 | ··set_fact: | 13625 | ··set_fact: |
| 13626 | ····all_files: | 13626 | ····all_files: |
| 13627 | ····-·/etc/audit/rules.d/actions.rules | 13627 | ····-·/etc/audit/rules.d/actions.rules |
| 13628 | ··when: | 13628 | ··when: |
| 13629 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13630 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13629 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13630 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13631 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 13631 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 13632 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 13632 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 13633 | ··tags: | 13633 | ··tags: |
| 13634 | ··-·CJIS-5.4.1.1 | 13634 | ··-·CJIS-5.4.1.1 |
| 13635 | ··-·NIST-800-171-3.1.7 | 13635 | ··-·NIST-800-171-3.1.7 |
| 13636 | ··-·NIST-800-53-AC-2(7)(b) | 13636 | ··-·NIST-800-53-AC-2(7)(b) |
| 13637 | ··-·NIST-800-53-AC-6(9) | 13637 | ··-·NIST-800-53-AC-6(9) |
| Offset 13649, 16 lines modified | Offset 13649, 16 lines modified | ||
| 13649 | ··-·restrict_strategy | 13649 | ··-·restrict_strategy |
| 13650 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 13650 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 13651 | ··set_fact: | 13651 | ··set_fact: |
| 13652 | ····all_files: | 13652 | ····all_files: |
| 13653 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 13653 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 13654 | ··when: | 13654 | ··when: |
| 13655 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13656 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 13655 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 13656 | ··-·'"audit"·in·ansible_facts.packages' | ||
| 13657 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 13657 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 13658 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 13658 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 13659 | ··tags: | 13659 | ··tags: |
| 13660 | ··-·CJIS-5.4.1.1 | 13660 | ··-·CJIS-5.4.1.1 |
| 13661 | ··-·NIST-800-171-3.1.7 | 13661 | ··-·NIST-800-171-3.1.7 |
| 13662 | ··-·NIST-800-53-AC-2(7)(b) | 13662 | ··-·NIST-800-53-AC-2(7)(b) |
| 13663 | ··-·NIST-800-53-AC-6(9) | 13663 | ··-·NIST-800-53-AC-6(9) |
| Offset 13677, 16 lines modified | Offset 13677, 16 lines modified | ||
| 13677 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 13677 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 48925/53642 bytes (91.21%) of diff not shown. | |||
| Offset 29868, 16 lines modified | Offset 29868, 16 lines modified | ||
| 29868 | ··-·no_reboot_needed | 29868 | ··-·no_reboot_needed |
| 29869 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 29869 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 29870 | ··stat: | 29870 | ··stat: |
| 29871 | ····path:·/boot/grub2/grub.cfg | 29871 | ····path:·/boot/grub2/grub.cfg |
| 29872 | ··register:·file_exists | 29872 | ··register:·file_exists |
| 29873 | ··when: | 29873 | ··when: |
| 29874 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29875 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29874 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29875 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29876 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29876 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29877 | ··tags: | 29877 | ··tags: |
| 29878 | ··-·CJIS-5.5.2.2 | 29878 | ··-·CJIS-5.5.2.2 |
| 29879 | ··-·NIST-800-171-3.4.5 | 29879 | ··-·NIST-800-171-3.4.5 |
| 29880 | ··-·NIST-800-53-AC-6(1) | 29880 | ··-·NIST-800-53-AC-6(1) |
| 29881 | ··-·NIST-800-53-CM-6(a) | 29881 | ··-·NIST-800-53-CM-6(a) |
| 29882 | ··-·PCI-DSS-Req-7.1 | 29882 | ··-·PCI-DSS-Req-7.1 |
| Offset 29889, 16 lines modified | Offset 29889, 16 lines modified | ||
| 29889 | ··-·no_reboot_needed | 29889 | ··-·no_reboot_needed |
| 29890 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 29890 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 29891 | ··file: | 29891 | ··file: |
| 29892 | ····path:·/boot/grub2/grub.cfg | 29892 | ····path:·/boot/grub2/grub.cfg |
| 29893 | ····group:·'0' | 29893 | ····group:·'0' |
| 29894 | ··when: | 29894 | ··when: |
| 29895 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29896 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29895 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29896 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29897 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29897 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29898 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 29898 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 29899 | ··tags: | 29899 | ··tags: |
| 29900 | ··-·CJIS-5.5.2.2 | 29900 | ··-·CJIS-5.5.2.2 |
| 29901 | ··-·NIST-800-171-3.4.5 | 29901 | ··-·NIST-800-171-3.4.5 |
| 29902 | ··-·NIST-800-53-AC-6(1) | 29902 | ··-·NIST-800-53-AC-6(1) |
| 29903 | ··-·NIST-800-53-CM-6(a) | 29903 | ··-·NIST-800-53-CM-6(a) |
| Offset 29906, 15 lines modified | Offset 29906, 15 lines modified | ||
| 29906 | ··-·configure_strategy | 29906 | ··-·configure_strategy |
| 29907 | ··-·file_groupowner_efi_grub2_cfg | 29907 | ··-·file_groupowner_efi_grub2_cfg |
| 29908 | ··-·low_complexity | 29908 | ··-·low_complexity |
| 29909 | ··-·low_disruption | 29909 | ··-·low_disruption |
| 29910 | ··-·medium_severity | 29910 | ··-·medium_severity |
| 29911 | ··-·no_reboot_needed</xccdf-1.2:fix> | 29911 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 29912 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 29912 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 29913 | if· | 29913 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 29914 | chgrp·0·/boot/grub2/grub.cfg | 29914 | chgrp·0·/boot/grub2/grub.cfg |
| 29915 | else | 29915 | else |
| 29916 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 29916 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 29917 | fi</xccdf-1.2:fix> | 29917 | fi</xccdf-1.2:fix> |
| 29918 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 29918 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 30006, 16 lines modified | Offset 30006, 16 lines modified | ||
| 30006 | ··-·no_reboot_needed | 30006 | ··-·no_reboot_needed |
| 30007 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 30007 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 30008 | ··stat: | 30008 | ··stat: |
| 30009 | ····path:·/boot/grub2/grub.cfg | 30009 | ····path:·/boot/grub2/grub.cfg |
| 30010 | ··register:·file_exists | 30010 | ··register:·file_exists |
| 30011 | ··when: | 30011 | ··when: |
| 30012 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30013 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30012 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30013 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30014 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30014 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30015 | ··tags: | 30015 | ··tags: |
| 30016 | ··-·CJIS-5.5.2.2 | 30016 | ··-·CJIS-5.5.2.2 |
| 30017 | ··-·NIST-800-171-3.4.5 | 30017 | ··-·NIST-800-171-3.4.5 |
| 30018 | ··-·NIST-800-53-AC-6(1) | 30018 | ··-·NIST-800-53-AC-6(1) |
| 30019 | ··-·NIST-800-53-CM-6(a) | 30019 | ··-·NIST-800-53-CM-6(a) |
| 30020 | ··-·PCI-DSS-Req-7.1 | 30020 | ··-·PCI-DSS-Req-7.1 |
| Offset 30027, 16 lines modified | Offset 30027, 16 lines modified | ||
| 30027 | ··-·no_reboot_needed | 30027 | ··-·no_reboot_needed |
| 30028 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 30028 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 30029 | ··file: | 30029 | ··file: |
| 30030 | ····path:·/boot/grub2/grub.cfg | 30030 | ····path:·/boot/grub2/grub.cfg |
| 30031 | ····owner:·'0' | 30031 | ····owner:·'0' |
| 30032 | ··when: | 30032 | ··when: |
| 30033 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30034 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30033 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30034 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30035 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30035 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30036 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 30036 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 30037 | ··tags: | 30037 | ··tags: |
| 30038 | ··-·CJIS-5.5.2.2 | 30038 | ··-·CJIS-5.5.2.2 |
| 30039 | ··-·NIST-800-171-3.4.5 | 30039 | ··-·NIST-800-171-3.4.5 |
| 30040 | ··-·NIST-800-53-AC-6(1) | 30040 | ··-·NIST-800-53-AC-6(1) |
| 30041 | ··-·NIST-800-53-CM-6(a) | 30041 | ··-·NIST-800-53-CM-6(a) |
| Offset 30044, 15 lines modified | Offset 30044, 15 lines modified | ||
| 30044 | ··-·configure_strategy | 30044 | ··-·configure_strategy |
| 30045 | ··-·file_owner_efi_grub2_cfg | 30045 | ··-·file_owner_efi_grub2_cfg |
| 30046 | ··-·low_complexity | 30046 | ··-·low_complexity |
| 30047 | ··-·low_disruption | 30047 | ··-·low_disruption |
| 30048 | ··-·medium_severity | 30048 | ··-·medium_severity |
| 30049 | ··-·no_reboot_needed</xccdf-1.2:fix> | 30049 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 30050 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 30050 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 30051 | if· | 30051 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 30052 | chown·0·/boot/grub2/grub.cfg | 30052 | chown·0·/boot/grub2/grub.cfg |
| 30053 | else | 30053 | else |
| 30054 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 30054 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 30055 | fi</xccdf-1.2:fix> | 30055 | fi</xccdf-1.2:fix> |
| 30056 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 30056 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 30137, 16 lines modified | Offset 30137, 16 lines modified | ||
| 30137 | ··-·no_reboot_needed | 30137 | ··-·no_reboot_needed |
| 30138 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 30138 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 30139 | ··stat: | 30139 | ··stat: |
| 30140 | ····path:·/boot/grub2/grub.cfg | 30140 | ····path:·/boot/grub2/grub.cfg |
| 30141 | ··register:·file_exists | 30141 | ··register:·file_exists |
| 30142 | ··when: | 30142 | ··when: |
| 30143 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30144 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30143 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30144 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30145 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30145 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30146 | ··tags: | 30146 | ··tags: |
| 30147 | ··-·NIST-800-171-3.4.5 | 30147 | ··-·NIST-800-171-3.4.5 |
| 30148 | ··-·NIST-800-53-AC-6(1) | 30148 | ··-·NIST-800-53-AC-6(1) |
| 30149 | ··-·NIST-800-53-CM-6(a) | 30149 | ··-·NIST-800-53-CM-6(a) |
| 30150 | ··-·configure_strategy | 30150 | ··-·configure_strategy |
| 30151 | ··-·file_permissions_efi_grub2_cfg | 30151 | ··-·file_permissions_efi_grub2_cfg |
| Offset 30156, 30 lines modified | Offset 30156, 30 lines modified | ||
| 30156 | ··-·no_reboot_needed | 30156 | ··-·no_reboot_needed |
| 30157 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 30157 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 30158 | ··file: | 30158 | ··file: |
| 30159 | ····path:·/boot/grub2/grub.cfg | 30159 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1452/6943 bytes (20.91%) of diff not shown. | |||
| Offset 29868, 16 lines modified | Offset 29868, 16 lines modified | ||
| 29868 | ··-·no_reboot_needed | 29868 | ··-·no_reboot_needed |
| 29869 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 29869 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 29870 | ··stat: | 29870 | ··stat: |
| 29871 | ····path:·/boot/grub2/grub.cfg | 29871 | ····path:·/boot/grub2/grub.cfg |
| 29872 | ··register:·file_exists | 29872 | ··register:·file_exists |
| 29873 | ··when: | 29873 | ··when: |
| 29874 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29875 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29874 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29875 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29876 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29876 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29877 | ··tags: | 29877 | ··tags: |
| 29878 | ··-·CJIS-5.5.2.2 | 29878 | ··-·CJIS-5.5.2.2 |
| 29879 | ··-·NIST-800-171-3.4.5 | 29879 | ··-·NIST-800-171-3.4.5 |
| 29880 | ··-·NIST-800-53-AC-6(1) | 29880 | ··-·NIST-800-53-AC-6(1) |
| 29881 | ··-·NIST-800-53-CM-6(a) | 29881 | ··-·NIST-800-53-CM-6(a) |
| 29882 | ··-·PCI-DSS-Req-7.1 | 29882 | ··-·PCI-DSS-Req-7.1 |
| Offset 29889, 16 lines modified | Offset 29889, 16 lines modified | ||
| 29889 | ··-·no_reboot_needed | 29889 | ··-·no_reboot_needed |
| 29890 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 29890 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 29891 | ··file: | 29891 | ··file: |
| 29892 | ····path:·/boot/grub2/grub.cfg | 29892 | ····path:·/boot/grub2/grub.cfg |
| 29893 | ····group:·'0' | 29893 | ····group:·'0' |
| 29894 | ··when: | 29894 | ··when: |
| 29895 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29896 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29895 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29896 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29897 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29897 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29898 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 29898 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 29899 | ··tags: | 29899 | ··tags: |
| 29900 | ··-·CJIS-5.5.2.2 | 29900 | ··-·CJIS-5.5.2.2 |
| 29901 | ··-·NIST-800-171-3.4.5 | 29901 | ··-·NIST-800-171-3.4.5 |
| 29902 | ··-·NIST-800-53-AC-6(1) | 29902 | ··-·NIST-800-53-AC-6(1) |
| 29903 | ··-·NIST-800-53-CM-6(a) | 29903 | ··-·NIST-800-53-CM-6(a) |
| Offset 29906, 15 lines modified | Offset 29906, 15 lines modified | ||
| 29906 | ··-·configure_strategy | 29906 | ··-·configure_strategy |
| 29907 | ··-·file_groupowner_efi_grub2_cfg | 29907 | ··-·file_groupowner_efi_grub2_cfg |
| 29908 | ··-·low_complexity | 29908 | ··-·low_complexity |
| 29909 | ··-·low_disruption | 29909 | ··-·low_disruption |
| 29910 | ··-·medium_severity | 29910 | ··-·medium_severity |
| 29911 | ··-·no_reboot_needed</xccdf-1.2:fix> | 29911 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 29912 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 29912 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 29913 | if· | 29913 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 29914 | chgrp·0·/boot/grub2/grub.cfg | 29914 | chgrp·0·/boot/grub2/grub.cfg |
| 29915 | else | 29915 | else |
| 29916 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 29916 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 29917 | fi</xccdf-1.2:fix> | 29917 | fi</xccdf-1.2:fix> |
| 29918 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 29918 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 30006, 16 lines modified | Offset 30006, 16 lines modified | ||
| 30006 | ··-·no_reboot_needed | 30006 | ··-·no_reboot_needed |
| 30007 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 30007 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 30008 | ··stat: | 30008 | ··stat: |
| 30009 | ····path:·/boot/grub2/grub.cfg | 30009 | ····path:·/boot/grub2/grub.cfg |
| 30010 | ··register:·file_exists | 30010 | ··register:·file_exists |
| 30011 | ··when: | 30011 | ··when: |
| 30012 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30013 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30012 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30013 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30014 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30014 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30015 | ··tags: | 30015 | ··tags: |
| 30016 | ··-·CJIS-5.5.2.2 | 30016 | ··-·CJIS-5.5.2.2 |
| 30017 | ··-·NIST-800-171-3.4.5 | 30017 | ··-·NIST-800-171-3.4.5 |
| 30018 | ··-·NIST-800-53-AC-6(1) | 30018 | ··-·NIST-800-53-AC-6(1) |
| 30019 | ··-·NIST-800-53-CM-6(a) | 30019 | ··-·NIST-800-53-CM-6(a) |
| 30020 | ··-·PCI-DSS-Req-7.1 | 30020 | ··-·PCI-DSS-Req-7.1 |
| Offset 30027, 16 lines modified | Offset 30027, 16 lines modified | ||
| 30027 | ··-·no_reboot_needed | 30027 | ··-·no_reboot_needed |
| 30028 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 30028 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 30029 | ··file: | 30029 | ··file: |
| 30030 | ····path:·/boot/grub2/grub.cfg | 30030 | ····path:·/boot/grub2/grub.cfg |
| 30031 | ····owner:·'0' | 30031 | ····owner:·'0' |
| 30032 | ··when: | 30032 | ··when: |
| 30033 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30034 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30033 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30034 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30035 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30035 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30036 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 30036 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 30037 | ··tags: | 30037 | ··tags: |
| 30038 | ··-·CJIS-5.5.2.2 | 30038 | ··-·CJIS-5.5.2.2 |
| 30039 | ··-·NIST-800-171-3.4.5 | 30039 | ··-·NIST-800-171-3.4.5 |
| 30040 | ··-·NIST-800-53-AC-6(1) | 30040 | ··-·NIST-800-53-AC-6(1) |
| 30041 | ··-·NIST-800-53-CM-6(a) | 30041 | ··-·NIST-800-53-CM-6(a) |
| Offset 30044, 15 lines modified | Offset 30044, 15 lines modified | ||
| 30044 | ··-·configure_strategy | 30044 | ··-·configure_strategy |
| 30045 | ··-·file_owner_efi_grub2_cfg | 30045 | ··-·file_owner_efi_grub2_cfg |
| 30046 | ··-·low_complexity | 30046 | ··-·low_complexity |
| 30047 | ··-·low_disruption | 30047 | ··-·low_disruption |
| 30048 | ··-·medium_severity | 30048 | ··-·medium_severity |
| 30049 | ··-·no_reboot_needed</xccdf-1.2:fix> | 30049 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 30050 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 30050 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 30051 | if· | 30051 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 30052 | chown·0·/boot/grub2/grub.cfg | 30052 | chown·0·/boot/grub2/grub.cfg |
| 30053 | else | 30053 | else |
| 30054 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 30054 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 30055 | fi</xccdf-1.2:fix> | 30055 | fi</xccdf-1.2:fix> |
| 30056 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 30056 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 30137, 16 lines modified | Offset 30137, 16 lines modified | ||
| 30137 | ··-·no_reboot_needed | 30137 | ··-·no_reboot_needed |
| 30138 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 30138 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 30139 | ··stat: | 30139 | ··stat: |
| 30140 | ····path:·/boot/grub2/grub.cfg | 30140 | ····path:·/boot/grub2/grub.cfg |
| 30141 | ··register:·file_exists | 30141 | ··register:·file_exists |
| 30142 | ··when: | 30142 | ··when: |
| 30143 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30144 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30143 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30144 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30145 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30145 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30146 | ··tags: | 30146 | ··tags: |
| 30147 | ··-·NIST-800-171-3.4.5 | 30147 | ··-·NIST-800-171-3.4.5 |
| 30148 | ··-·NIST-800-53-AC-6(1) | 30148 | ··-·NIST-800-53-AC-6(1) |
| 30149 | ··-·NIST-800-53-CM-6(a) | 30149 | ··-·NIST-800-53-CM-6(a) |
| 30150 | ··-·configure_strategy | 30150 | ··-·configure_strategy |
| 30151 | ··-·file_permissions_efi_grub2_cfg | 30151 | ··-·file_permissions_efi_grub2_cfg |
| Offset 30156, 30 lines modified | Offset 30156, 30 lines modified | ||
| 30156 | ··-·no_reboot_needed | 30156 | ··-·no_reboot_needed |
| 30157 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 30157 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 30158 | ··file: | 30158 | ··file: |
| 30159 | ····path:·/boot/grub2/grub.cfg | 30159 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1452/6943 bytes (20.91%) of diff not shown. | |||
| Offset 29756, 16 lines modified | Offset 29756, 16 lines modified | ||
| 29756 | ··-·no_reboot_needed | 29756 | ··-·no_reboot_needed |
| 29757 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 29757 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 29758 | ··stat: | 29758 | ··stat: |
| 29759 | ····path:·/boot/grub2/grub.cfg | 29759 | ····path:·/boot/grub2/grub.cfg |
| 29760 | ··register:·file_exists | 29760 | ··register:·file_exists |
| 29761 | ··when: | 29761 | ··when: |
| 29762 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29763 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29762 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29763 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29764 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29764 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29765 | ··tags: | 29765 | ··tags: |
| 29766 | ··-·CJIS-5.5.2.2 | 29766 | ··-·CJIS-5.5.2.2 |
| 29767 | ··-·NIST-800-171-3.4.5 | 29767 | ··-·NIST-800-171-3.4.5 |
| 29768 | ··-·NIST-800-53-AC-6(1) | 29768 | ··-·NIST-800-53-AC-6(1) |
| 29769 | ··-·NIST-800-53-CM-6(a) | 29769 | ··-·NIST-800-53-CM-6(a) |
| 29770 | ··-·PCI-DSS-Req-7.1 | 29770 | ··-·PCI-DSS-Req-7.1 |
| Offset 29777, 16 lines modified | Offset 29777, 16 lines modified | ||
| 29777 | ··-·no_reboot_needed | 29777 | ··-·no_reboot_needed |
| 29778 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 29778 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 29779 | ··file: | 29779 | ··file: |
| 29780 | ····path:·/boot/grub2/grub.cfg | 29780 | ····path:·/boot/grub2/grub.cfg |
| 29781 | ····group:·'0' | 29781 | ····group:·'0' |
| 29782 | ··when: | 29782 | ··when: |
| 29783 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29784 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29783 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29784 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29785 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29785 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29786 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 29786 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 29787 | ··tags: | 29787 | ··tags: |
| 29788 | ··-·CJIS-5.5.2.2 | 29788 | ··-·CJIS-5.5.2.2 |
| 29789 | ··-·NIST-800-171-3.4.5 | 29789 | ··-·NIST-800-171-3.4.5 |
| 29790 | ··-·NIST-800-53-AC-6(1) | 29790 | ··-·NIST-800-53-AC-6(1) |
| 29791 | ··-·NIST-800-53-CM-6(a) | 29791 | ··-·NIST-800-53-CM-6(a) |
| Offset 29794, 15 lines modified | Offset 29794, 15 lines modified | ||
| 29794 | ··-·configure_strategy | 29794 | ··-·configure_strategy |
| 29795 | ··-·file_groupowner_efi_grub2_cfg | 29795 | ··-·file_groupowner_efi_grub2_cfg |
| 29796 | ··-·low_complexity | 29796 | ··-·low_complexity |
| 29797 | ··-·low_disruption | 29797 | ··-·low_disruption |
| 29798 | ··-·medium_severity | 29798 | ··-·medium_severity |
| 29799 | ··-·no_reboot_needed</xccdf-1.2:fix> | 29799 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 29800 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 29800 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 29801 | if· | 29801 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 29802 | chgrp·0·/boot/grub2/grub.cfg | 29802 | chgrp·0·/boot/grub2/grub.cfg |
| 29803 | else | 29803 | else |
| 29804 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 29804 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 29805 | fi</xccdf-1.2:fix> | 29805 | fi</xccdf-1.2:fix> |
| 29806 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 29806 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 29894, 16 lines modified | Offset 29894, 16 lines modified | ||
| 29894 | ··-·no_reboot_needed | 29894 | ··-·no_reboot_needed |
| 29895 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 29895 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 29896 | ··stat: | 29896 | ··stat: |
| 29897 | ····path:·/boot/grub2/grub.cfg | 29897 | ····path:·/boot/grub2/grub.cfg |
| 29898 | ··register:·file_exists | 29898 | ··register:·file_exists |
| 29899 | ··when: | 29899 | ··when: |
| 29900 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29901 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29900 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29901 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29902 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29902 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29903 | ··tags: | 29903 | ··tags: |
| 29904 | ··-·CJIS-5.5.2.2 | 29904 | ··-·CJIS-5.5.2.2 |
| 29905 | ··-·NIST-800-171-3.4.5 | 29905 | ··-·NIST-800-171-3.4.5 |
| 29906 | ··-·NIST-800-53-AC-6(1) | 29906 | ··-·NIST-800-53-AC-6(1) |
| 29907 | ··-·NIST-800-53-CM-6(a) | 29907 | ··-·NIST-800-53-CM-6(a) |
| 29908 | ··-·PCI-DSS-Req-7.1 | 29908 | ··-·PCI-DSS-Req-7.1 |
| Offset 29915, 16 lines modified | Offset 29915, 16 lines modified | ||
| 29915 | ··-·no_reboot_needed | 29915 | ··-·no_reboot_needed |
| 29916 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 29916 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 29917 | ··file: | 29917 | ··file: |
| 29918 | ····path:·/boot/grub2/grub.cfg | 29918 | ····path:·/boot/grub2/grub.cfg |
| 29919 | ····owner:·'0' | 29919 | ····owner:·'0' |
| 29920 | ··when: | 29920 | ··when: |
| 29921 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29922 | ··-·'"grub2-common"·in·ansible_facts.packages' | 29921 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 29922 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 29923 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 29923 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 29924 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 29924 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 29925 | ··tags: | 29925 | ··tags: |
| 29926 | ··-·CJIS-5.5.2.2 | 29926 | ··-·CJIS-5.5.2.2 |
| 29927 | ··-·NIST-800-171-3.4.5 | 29927 | ··-·NIST-800-171-3.4.5 |
| 29928 | ··-·NIST-800-53-AC-6(1) | 29928 | ··-·NIST-800-53-AC-6(1) |
| 29929 | ··-·NIST-800-53-CM-6(a) | 29929 | ··-·NIST-800-53-CM-6(a) |
| Offset 29932, 15 lines modified | Offset 29932, 15 lines modified | ||
| 29932 | ··-·configure_strategy | 29932 | ··-·configure_strategy |
| 29933 | ··-·file_owner_efi_grub2_cfg | 29933 | ··-·file_owner_efi_grub2_cfg |
| 29934 | ··-·low_complexity | 29934 | ··-·low_complexity |
| 29935 | ··-·low_disruption | 29935 | ··-·low_disruption |
| 29936 | ··-·medium_severity | 29936 | ··-·medium_severity |
| 29937 | ··-·no_reboot_needed</xccdf-1.2:fix> | 29937 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 29938 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 29938 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 29939 | if· | 29939 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 29940 | chown·0·/boot/grub2/grub.cfg | 29940 | chown·0·/boot/grub2/grub.cfg |
| 29941 | else | 29941 | else |
| 29942 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 29942 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 29943 | fi</xccdf-1.2:fix> | 29943 | fi</xccdf-1.2:fix> |
| 29944 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 29944 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 30025, 16 lines modified | Offset 30025, 16 lines modified | ||
| 30025 | ··-·no_reboot_needed | 30025 | ··-·no_reboot_needed |
| 30026 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 30026 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 30027 | ··stat: | 30027 | ··stat: |
| 30028 | ····path:·/boot/grub2/grub.cfg | 30028 | ····path:·/boot/grub2/grub.cfg |
| 30029 | ··register:·file_exists | 30029 | ··register:·file_exists |
| 30030 | ··when: | 30030 | ··when: |
| 30031 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30032 | ··-·'"grub2-common"·in·ansible_facts.packages' | 30031 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 30032 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 30033 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 30033 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 30034 | ··tags: | 30034 | ··tags: |
| 30035 | ··-·NIST-800-171-3.4.5 | 30035 | ··-·NIST-800-171-3.4.5 |
| 30036 | ··-·NIST-800-53-AC-6(1) | 30036 | ··-·NIST-800-53-AC-6(1) |
| 30037 | ··-·NIST-800-53-CM-6(a) | 30037 | ··-·NIST-800-53-CM-6(a) |
| 30038 | ··-·configure_strategy | 30038 | ··-·configure_strategy |
| 30039 | ··-·file_permissions_efi_grub2_cfg | 30039 | ··-·file_permissions_efi_grub2_cfg |
| Offset 30044, 30 lines modified | Offset 30044, 30 lines modified | ||
| 30044 | ··-·no_reboot_needed | 30044 | ··-·no_reboot_needed |
| 30045 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 30045 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 30046 | ··file: | 30046 | ··file: |
| 30047 | ····path:·/boot/grub2/grub.cfg | 30047 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1444/6919 bytes (20.87%) of diff not shown. | |||
| Offset 11095, 16 lines modified | Offset 11095, 16 lines modified | ||
| 11095 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 11095 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 11096 | ··find: | 11096 | ··find: |
| 11097 | ····paths:·/etc/audit/rules.d/ | 11097 | ····paths:·/etc/audit/rules.d/ |
| 11098 | ····patterns:·'*.rules' | 11098 | ····patterns:·'*.rules' |
| 11099 | ··register:·find_rules_d | 11099 | ··register:·find_rules_d |
| 11100 | ··when: | 11100 | ··when: |
| 11101 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11102 | ··-·'"audit"·in·ansible_facts.packages' | 11101 | ··-·'"audit"·in·ansible_facts.packages' |
| 11102 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11103 | ··tags: | 11103 | ··tags: |
| 11104 | ··-·CJIS-5.4.1.1 | 11104 | ··-·CJIS-5.4.1.1 |
| 11105 | ··-·NIST-800-171-3.3.1 | 11105 | ··-·NIST-800-171-3.3.1 |
| 11106 | ··-·NIST-800-171-3.4.3 | 11106 | ··-·NIST-800-171-3.4.3 |
| 11107 | ··-·NIST-800-53-AC-6(9) | 11107 | ··-·NIST-800-53-AC-6(9) |
| 11108 | ··-·NIST-800-53-CM-6(a) | 11108 | ··-·NIST-800-53-CM-6(a) |
| 11109 | ··-·PCI-DSS-Req-10.5.2 | 11109 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11119, 16 lines modified | Offset 11119, 16 lines modified | ||
| 11119 | ··lineinfile: | 11119 | ··lineinfile: |
| 11120 | ····path:·'{{·item·}}' | 11120 | ····path:·'{{·item·}}' |
| 11121 | ····regexp:·^\s*(?:-e)\s+.*$ | 11121 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 11122 | ····state:·absent | 11122 | ····state:·absent |
| 11123 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 11123 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 11124 | ····}}' | 11124 | ····}}' |
| 11125 | ··when: | 11125 | ··when: |
| 11126 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11127 | ··-·'"audit"·in·ansible_facts.packages' | 11126 | ··-·'"audit"·in·ansible_facts.packages' |
| 11127 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11128 | ··tags: | 11128 | ··tags: |
| 11129 | ··-·CJIS-5.4.1.1 | 11129 | ··-·CJIS-5.4.1.1 |
| 11130 | ··-·NIST-800-171-3.3.1 | 11130 | ··-·NIST-800-171-3.3.1 |
| 11131 | ··-·NIST-800-171-3.4.3 | 11131 | ··-·NIST-800-171-3.4.3 |
| 11132 | ··-·NIST-800-53-AC-6(9) | 11132 | ··-·NIST-800-53-AC-6(9) |
| 11133 | ··-·NIST-800-53-CM-6(a) | 11133 | ··-·NIST-800-53-CM-6(a) |
| 11134 | ··-·PCI-DSS-Req-10.5.2 | 11134 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11145, 16 lines modified | Offset 11145, 16 lines modified | ||
| 11145 | ····create:·true | 11145 | ····create:·true |
| 11146 | ····line:·-e·2 | 11146 | ····line:·-e·2 |
| 11147 | ····mode:·o-rwx | 11147 | ····mode:·o-rwx |
| 11148 | ··loop: | 11148 | ··loop: |
| 11149 | ··-·/etc/audit/audit.rules | 11149 | ··-·/etc/audit/audit.rules |
| 11150 | ··-·/etc/audit/rules.d/immutable.rules | 11150 | ··-·/etc/audit/rules.d/immutable.rules |
| 11151 | ··when: | 11151 | ··when: |
| 11152 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11153 | ··-·'"audit"·in·ansible_facts.packages' | 11152 | ··-·'"audit"·in·ansible_facts.packages' |
| 11153 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11154 | ··tags: | 11154 | ··tags: |
| 11155 | ··-·CJIS-5.4.1.1 | 11155 | ··-·CJIS-5.4.1.1 |
| 11156 | ··-·NIST-800-171-3.3.1 | 11156 | ··-·NIST-800-171-3.3.1 |
| 11157 | ··-·NIST-800-171-3.4.3 | 11157 | ··-·NIST-800-171-3.4.3 |
| 11158 | ··-·NIST-800-53-AC-6(9) | 11158 | ··-·NIST-800-53-AC-6(9) |
| 11159 | ··-·NIST-800-53-CM-6(a) | 11159 | ··-·NIST-800-53-CM-6(a) |
| 11160 | ··-·PCI-DSS-Req-10.5.2 | 11160 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12034, 16 lines modified | Offset 12034, 16 lines modified | ||
| 12034 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 12034 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 12035 | ··find: | 12035 | ··find: |
| 12036 | ····paths:·/etc/audit/rules.d | 12036 | ····paths:·/etc/audit/rules.d |
| 12037 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 12037 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 12038 | ····patterns:·'*.rules' | 12038 | ····patterns:·'*.rules' |
| 12039 | ··register:·find_existing_watch_rules_d | 12039 | ··register:·find_existing_watch_rules_d |
| 12040 | ··when: | 12040 | ··when: |
| 12041 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12042 | ··-·'"audit"·in·ansible_facts.packages' | 12041 | ··-·'"audit"·in·ansible_facts.packages' |
| 12042 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12043 | ··tags: | 12043 | ··tags: |
| 12044 | ··-·CJIS-5.4.1.1 | 12044 | ··-·CJIS-5.4.1.1 |
| 12045 | ··-·NIST-800-171-3.1.7 | 12045 | ··-·NIST-800-171-3.1.7 |
| 12046 | ··-·NIST-800-53-AC-2(7)(b) | 12046 | ··-·NIST-800-53-AC-2(7)(b) |
| 12047 | ··-·NIST-800-53-AC-6(9) | 12047 | ··-·NIST-800-53-AC-6(9) |
| 12048 | ··-·NIST-800-53-AU-12(c) | 12048 | ··-·NIST-800-53-AU-12(c) |
| 12049 | ··-·NIST-800-53-AU-2(d) | 12049 | ··-·NIST-800-53-AU-2(d) |
| Offset 12060, 16 lines modified | Offset 12060, 16 lines modified | ||
| 12060 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 12060 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 12061 | ··find: | 12061 | ··find: |
| 12062 | ····paths:·/etc/audit/rules.d | 12062 | ····paths:·/etc/audit/rules.d |
| 12063 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 12063 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 12064 | ····patterns:·'*.rules' | 12064 | ····patterns:·'*.rules' |
| 12065 | ··register:·find_watch_key | 12065 | ··register:·find_watch_key |
| 12066 | ··when: | 12066 | ··when: |
| 12067 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12068 | ··-·'"audit"·in·ansible_facts.packages' | 12067 | ··-·'"audit"·in·ansible_facts.packages' |
| 12068 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12069 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 12069 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 12070 | ····==·0 | 12070 | ····==·0 |
| 12071 | ··tags: | 12071 | ··tags: |
| 12072 | ··-·CJIS-5.4.1.1 | 12072 | ··-·CJIS-5.4.1.1 |
| 12073 | ··-·NIST-800-171-3.1.7 | 12073 | ··-·NIST-800-171-3.1.7 |
| 12074 | ··-·NIST-800-53-AC-2(7)(b) | 12074 | ··-·NIST-800-53-AC-2(7)(b) |
| 12075 | ··-·NIST-800-53-AC-6(9) | 12075 | ··-·NIST-800-53-AC-6(9) |
| Offset 12086, 16 lines modified | Offset 12086, 16 lines modified | ||
| 12086 | ··-·restrict_strategy | 12086 | ··-·restrict_strategy |
| 12087 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 12087 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 12088 | ··set_fact: | 12088 | ··set_fact: |
| 12089 | ····all_files: | 12089 | ····all_files: |
| 12090 | ····-·/etc/audit/rules.d/actions.rules | 12090 | ····-·/etc/audit/rules.d/actions.rules |
| 12091 | ··when: | 12091 | ··when: |
| 12092 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12093 | ··-·'"audit"·in·ansible_facts.packages' | 12092 | ··-·'"audit"·in·ansible_facts.packages' |
| 12093 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12094 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 12094 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 12095 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 12095 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 12096 | ··tags: | 12096 | ··tags: |
| 12097 | ··-·CJIS-5.4.1.1 | 12097 | ··-·CJIS-5.4.1.1 |
| 12098 | ··-·NIST-800-171-3.1.7 | 12098 | ··-·NIST-800-171-3.1.7 |
| 12099 | ··-·NIST-800-53-AC-2(7)(b) | 12099 | ··-·NIST-800-53-AC-2(7)(b) |
| 12100 | ··-·NIST-800-53-AC-6(9) | 12100 | ··-·NIST-800-53-AC-6(9) |
| Offset 12112, 16 lines modified | Offset 12112, 16 lines modified | ||
| 12112 | ··-·restrict_strategy | 12112 | ··-·restrict_strategy |
| 12113 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 12113 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 12114 | ··set_fact: | 12114 | ··set_fact: |
| 12115 | ····all_files: | 12115 | ····all_files: |
| 12116 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 12116 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 12117 | ··when: | 12117 | ··when: |
| 12118 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12119 | ··-·'"audit"·in·ansible_facts.packages' | 12118 | ··-·'"audit"·in·ansible_facts.packages' |
| 12119 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12120 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 12120 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 12121 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 12121 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 12122 | ··tags: | 12122 | ··tags: |
| 12123 | ··-·CJIS-5.4.1.1 | 12123 | ··-·CJIS-5.4.1.1 |
| 12124 | ··-·NIST-800-171-3.1.7 | 12124 | ··-·NIST-800-171-3.1.7 |
| 12125 | ··-·NIST-800-53-AC-2(7)(b) | 12125 | ··-·NIST-800-53-AC-2(7)(b) |
| 12126 | ··-·NIST-800-53-AC-6(9) | 12126 | ··-·NIST-800-53-AC-6(9) |
| Offset 12140, 16 lines modified | Offset 12140, 16 lines modified | ||
| 12140 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 12140 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 53208/58555 bytes (90.87%) of diff not shown. | |||
| Offset 11095, 16 lines modified | Offset 11095, 16 lines modified | ||
| 11095 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 11095 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 11096 | ··find: | 11096 | ··find: |
| 11097 | ····paths:·/etc/audit/rules.d/ | 11097 | ····paths:·/etc/audit/rules.d/ |
| 11098 | ····patterns:·'*.rules' | 11098 | ····patterns:·'*.rules' |
| 11099 | ··register:·find_rules_d | 11099 | ··register:·find_rules_d |
| 11100 | ··when: | 11100 | ··when: |
| 11101 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11102 | ··-·'"audit"·in·ansible_facts.packages' | 11101 | ··-·'"audit"·in·ansible_facts.packages' |
| 11102 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11103 | ··tags: | 11103 | ··tags: |
| 11104 | ··-·CJIS-5.4.1.1 | 11104 | ··-·CJIS-5.4.1.1 |
| 11105 | ··-·NIST-800-171-3.3.1 | 11105 | ··-·NIST-800-171-3.3.1 |
| 11106 | ··-·NIST-800-171-3.4.3 | 11106 | ··-·NIST-800-171-3.4.3 |
| 11107 | ··-·NIST-800-53-AC-6(9) | 11107 | ··-·NIST-800-53-AC-6(9) |
| 11108 | ··-·NIST-800-53-CM-6(a) | 11108 | ··-·NIST-800-53-CM-6(a) |
| 11109 | ··-·PCI-DSS-Req-10.5.2 | 11109 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11119, 16 lines modified | Offset 11119, 16 lines modified | ||
| 11119 | ··lineinfile: | 11119 | ··lineinfile: |
| 11120 | ····path:·'{{·item·}}' | 11120 | ····path:·'{{·item·}}' |
| 11121 | ····regexp:·^\s*(?:-e)\s+.*$ | 11121 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 11122 | ····state:·absent | 11122 | ····state:·absent |
| 11123 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 11123 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 11124 | ····}}' | 11124 | ····}}' |
| 11125 | ··when: | 11125 | ··when: |
| 11126 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11127 | ··-·'"audit"·in·ansible_facts.packages' | 11126 | ··-·'"audit"·in·ansible_facts.packages' |
| 11127 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11128 | ··tags: | 11128 | ··tags: |
| 11129 | ··-·CJIS-5.4.1.1 | 11129 | ··-·CJIS-5.4.1.1 |
| 11130 | ··-·NIST-800-171-3.3.1 | 11130 | ··-·NIST-800-171-3.3.1 |
| 11131 | ··-·NIST-800-171-3.4.3 | 11131 | ··-·NIST-800-171-3.4.3 |
| 11132 | ··-·NIST-800-53-AC-6(9) | 11132 | ··-·NIST-800-53-AC-6(9) |
| 11133 | ··-·NIST-800-53-CM-6(a) | 11133 | ··-·NIST-800-53-CM-6(a) |
| 11134 | ··-·PCI-DSS-Req-10.5.2 | 11134 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11145, 16 lines modified | Offset 11145, 16 lines modified | ||
| 11145 | ····create:·true | 11145 | ····create:·true |
| 11146 | ····line:·-e·2 | 11146 | ····line:·-e·2 |
| 11147 | ····mode:·o-rwx | 11147 | ····mode:·o-rwx |
| 11148 | ··loop: | 11148 | ··loop: |
| 11149 | ··-·/etc/audit/audit.rules | 11149 | ··-·/etc/audit/audit.rules |
| 11150 | ··-·/etc/audit/rules.d/immutable.rules | 11150 | ··-·/etc/audit/rules.d/immutable.rules |
| 11151 | ··when: | 11151 | ··when: |
| 11152 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11153 | ··-·'"audit"·in·ansible_facts.packages' | 11152 | ··-·'"audit"·in·ansible_facts.packages' |
| 11153 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11154 | ··tags: | 11154 | ··tags: |
| 11155 | ··-·CJIS-5.4.1.1 | 11155 | ··-·CJIS-5.4.1.1 |
| 11156 | ··-·NIST-800-171-3.3.1 | 11156 | ··-·NIST-800-171-3.3.1 |
| 11157 | ··-·NIST-800-171-3.4.3 | 11157 | ··-·NIST-800-171-3.4.3 |
| 11158 | ··-·NIST-800-53-AC-6(9) | 11158 | ··-·NIST-800-53-AC-6(9) |
| 11159 | ··-·NIST-800-53-CM-6(a) | 11159 | ··-·NIST-800-53-CM-6(a) |
| 11160 | ··-·PCI-DSS-Req-10.5.2 | 11160 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 12034, 16 lines modified | Offset 12034, 16 lines modified | ||
| 12034 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 12034 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 12035 | ··find: | 12035 | ··find: |
| 12036 | ····paths:·/etc/audit/rules.d | 12036 | ····paths:·/etc/audit/rules.d |
| 12037 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 12037 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 12038 | ····patterns:·'*.rules' | 12038 | ····patterns:·'*.rules' |
| 12039 | ··register:·find_existing_watch_rules_d | 12039 | ··register:·find_existing_watch_rules_d |
| 12040 | ··when: | 12040 | ··when: |
| 12041 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12042 | ··-·'"audit"·in·ansible_facts.packages' | 12041 | ··-·'"audit"·in·ansible_facts.packages' |
| 12042 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12043 | ··tags: | 12043 | ··tags: |
| 12044 | ··-·CJIS-5.4.1.1 | 12044 | ··-·CJIS-5.4.1.1 |
| 12045 | ··-·NIST-800-171-3.1.7 | 12045 | ··-·NIST-800-171-3.1.7 |
| 12046 | ··-·NIST-800-53-AC-2(7)(b) | 12046 | ··-·NIST-800-53-AC-2(7)(b) |
| 12047 | ··-·NIST-800-53-AC-6(9) | 12047 | ··-·NIST-800-53-AC-6(9) |
| 12048 | ··-·NIST-800-53-AU-12(c) | 12048 | ··-·NIST-800-53-AU-12(c) |
| 12049 | ··-·NIST-800-53-AU-2(d) | 12049 | ··-·NIST-800-53-AU-2(d) |
| Offset 12060, 16 lines modified | Offset 12060, 16 lines modified | ||
| 12060 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 12060 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 12061 | ··find: | 12061 | ··find: |
| 12062 | ····paths:·/etc/audit/rules.d | 12062 | ····paths:·/etc/audit/rules.d |
| 12063 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 12063 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 12064 | ····patterns:·'*.rules' | 12064 | ····patterns:·'*.rules' |
| 12065 | ··register:·find_watch_key | 12065 | ··register:·find_watch_key |
| 12066 | ··when: | 12066 | ··when: |
| 12067 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12068 | ··-·'"audit"·in·ansible_facts.packages' | 12067 | ··-·'"audit"·in·ansible_facts.packages' |
| 12068 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12069 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 12069 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 12070 | ····==·0 | 12070 | ····==·0 |
| 12071 | ··tags: | 12071 | ··tags: |
| 12072 | ··-·CJIS-5.4.1.1 | 12072 | ··-·CJIS-5.4.1.1 |
| 12073 | ··-·NIST-800-171-3.1.7 | 12073 | ··-·NIST-800-171-3.1.7 |
| 12074 | ··-·NIST-800-53-AC-2(7)(b) | 12074 | ··-·NIST-800-53-AC-2(7)(b) |
| 12075 | ··-·NIST-800-53-AC-6(9) | 12075 | ··-·NIST-800-53-AC-6(9) |
| Offset 12086, 16 lines modified | Offset 12086, 16 lines modified | ||
| 12086 | ··-·restrict_strategy | 12086 | ··-·restrict_strategy |
| 12087 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 12087 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 12088 | ··set_fact: | 12088 | ··set_fact: |
| 12089 | ····all_files: | 12089 | ····all_files: |
| 12090 | ····-·/etc/audit/rules.d/actions.rules | 12090 | ····-·/etc/audit/rules.d/actions.rules |
| 12091 | ··when: | 12091 | ··when: |
| 12092 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12093 | ··-·'"audit"·in·ansible_facts.packages' | 12092 | ··-·'"audit"·in·ansible_facts.packages' |
| 12093 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12094 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 12094 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 12095 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 12095 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 12096 | ··tags: | 12096 | ··tags: |
| 12097 | ··-·CJIS-5.4.1.1 | 12097 | ··-·CJIS-5.4.1.1 |
| 12098 | ··-·NIST-800-171-3.1.7 | 12098 | ··-·NIST-800-171-3.1.7 |
| 12099 | ··-·NIST-800-53-AC-2(7)(b) | 12099 | ··-·NIST-800-53-AC-2(7)(b) |
| 12100 | ··-·NIST-800-53-AC-6(9) | 12100 | ··-·NIST-800-53-AC-6(9) |
| Offset 12112, 16 lines modified | Offset 12112, 16 lines modified | ||
| 12112 | ··-·restrict_strategy | 12112 | ··-·restrict_strategy |
| 12113 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 12113 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 12114 | ··set_fact: | 12114 | ··set_fact: |
| 12115 | ····all_files: | 12115 | ····all_files: |
| 12116 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 12116 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 12117 | ··when: | 12117 | ··when: |
| 12118 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12119 | ··-·'"audit"·in·ansible_facts.packages' | 12118 | ··-·'"audit"·in·ansible_facts.packages' |
| 12119 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12120 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 12120 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 12121 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 12121 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 12122 | ··tags: | 12122 | ··tags: |
| 12123 | ··-·CJIS-5.4.1.1 | 12123 | ··-·CJIS-5.4.1.1 |
| 12124 | ··-·NIST-800-171-3.1.7 | 12124 | ··-·NIST-800-171-3.1.7 |
| 12125 | ··-·NIST-800-53-AC-2(7)(b) | 12125 | ··-·NIST-800-53-AC-2(7)(b) |
| 12126 | ··-·NIST-800-53-AC-6(9) | 12126 | ··-·NIST-800-53-AC-6(9) |
| Offset 12140, 16 lines modified | Offset 12140, 16 lines modified | ||
| 12140 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 12140 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 53208/58555 bytes (90.87%) of diff not shown. | |||
| Offset 10991, 16 lines modified | Offset 10991, 16 lines modified | ||
| 10991 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 10991 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 10992 | ··find: | 10992 | ··find: |
| 10993 | ····paths:·/etc/audit/rules.d/ | 10993 | ····paths:·/etc/audit/rules.d/ |
| 10994 | ····patterns:·'*.rules' | 10994 | ····patterns:·'*.rules' |
| 10995 | ··register:·find_rules_d | 10995 | ··register:·find_rules_d |
| 10996 | ··when: | 10996 | ··when: |
| 10997 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 10998 | ··-·'"audit"·in·ansible_facts.packages' | 10997 | ··-·'"audit"·in·ansible_facts.packages' |
| 10998 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 10999 | ··tags: | 10999 | ··tags: |
| 11000 | ··-·CJIS-5.4.1.1 | 11000 | ··-·CJIS-5.4.1.1 |
| 11001 | ··-·NIST-800-171-3.3.1 | 11001 | ··-·NIST-800-171-3.3.1 |
| 11002 | ··-·NIST-800-171-3.4.3 | 11002 | ··-·NIST-800-171-3.4.3 |
| 11003 | ··-·NIST-800-53-AC-6(9) | 11003 | ··-·NIST-800-53-AC-6(9) |
| 11004 | ··-·NIST-800-53-CM-6(a) | 11004 | ··-·NIST-800-53-CM-6(a) |
| 11005 | ··-·PCI-DSS-Req-10.5.2 | 11005 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11015, 16 lines modified | Offset 11015, 16 lines modified | ||
| 11015 | ··lineinfile: | 11015 | ··lineinfile: |
| 11016 | ····path:·'{{·item·}}' | 11016 | ····path:·'{{·item·}}' |
| 11017 | ····regexp:·^\s*(?:-e)\s+.*$ | 11017 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 11018 | ····state:·absent | 11018 | ····state:·absent |
| 11019 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 11019 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 11020 | ····}}' | 11020 | ····}}' |
| 11021 | ··when: | 11021 | ··when: |
| 11022 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11023 | ··-·'"audit"·in·ansible_facts.packages' | 11022 | ··-·'"audit"·in·ansible_facts.packages' |
| 11023 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11024 | ··tags: | 11024 | ··tags: |
| 11025 | ··-·CJIS-5.4.1.1 | 11025 | ··-·CJIS-5.4.1.1 |
| 11026 | ··-·NIST-800-171-3.3.1 | 11026 | ··-·NIST-800-171-3.3.1 |
| 11027 | ··-·NIST-800-171-3.4.3 | 11027 | ··-·NIST-800-171-3.4.3 |
| 11028 | ··-·NIST-800-53-AC-6(9) | 11028 | ··-·NIST-800-53-AC-6(9) |
| 11029 | ··-·NIST-800-53-CM-6(a) | 11029 | ··-·NIST-800-53-CM-6(a) |
| 11030 | ··-·PCI-DSS-Req-10.5.2 | 11030 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11041, 16 lines modified | Offset 11041, 16 lines modified | ||
| 11041 | ····create:·true | 11041 | ····create:·true |
| 11042 | ····line:·-e·2 | 11042 | ····line:·-e·2 |
| 11043 | ····mode:·o-rwx | 11043 | ····mode:·o-rwx |
| 11044 | ··loop: | 11044 | ··loop: |
| 11045 | ··-·/etc/audit/audit.rules | 11045 | ··-·/etc/audit/audit.rules |
| 11046 | ··-·/etc/audit/rules.d/immutable.rules | 11046 | ··-·/etc/audit/rules.d/immutable.rules |
| 11047 | ··when: | 11047 | ··when: |
| 11048 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11049 | ··-·'"audit"·in·ansible_facts.packages' | 11048 | ··-·'"audit"·in·ansible_facts.packages' |
| 11049 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11050 | ··tags: | 11050 | ··tags: |
| 11051 | ··-·CJIS-5.4.1.1 | 11051 | ··-·CJIS-5.4.1.1 |
| 11052 | ··-·NIST-800-171-3.3.1 | 11052 | ··-·NIST-800-171-3.3.1 |
| 11053 | ··-·NIST-800-171-3.4.3 | 11053 | ··-·NIST-800-171-3.4.3 |
| 11054 | ··-·NIST-800-53-AC-6(9) | 11054 | ··-·NIST-800-53-AC-6(9) |
| 11055 | ··-·NIST-800-53-CM-6(a) | 11055 | ··-·NIST-800-53-CM-6(a) |
| 11056 | ··-·PCI-DSS-Req-10.5.2 | 11056 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 11930, 16 lines modified | Offset 11930, 16 lines modified | ||
| 11930 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 11930 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 11931 | ··find: | 11931 | ··find: |
| 11932 | ····paths:·/etc/audit/rules.d | 11932 | ····paths:·/etc/audit/rules.d |
| 11933 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 11933 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 11934 | ····patterns:·'*.rules' | 11934 | ····patterns:·'*.rules' |
| 11935 | ··register:·find_existing_watch_rules_d | 11935 | ··register:·find_existing_watch_rules_d |
| 11936 | ··when: | 11936 | ··when: |
| 11937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11938 | ··-·'"audit"·in·ansible_facts.packages' | 11937 | ··-·'"audit"·in·ansible_facts.packages' |
| 11938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11939 | ··tags: | 11939 | ··tags: |
| 11940 | ··-·CJIS-5.4.1.1 | 11940 | ··-·CJIS-5.4.1.1 |
| 11941 | ··-·NIST-800-171-3.1.7 | 11941 | ··-·NIST-800-171-3.1.7 |
| 11942 | ··-·NIST-800-53-AC-2(7)(b) | 11942 | ··-·NIST-800-53-AC-2(7)(b) |
| 11943 | ··-·NIST-800-53-AC-6(9) | 11943 | ··-·NIST-800-53-AC-6(9) |
| 11944 | ··-·NIST-800-53-AU-12(c) | 11944 | ··-·NIST-800-53-AU-12(c) |
| 11945 | ··-·NIST-800-53-AU-2(d) | 11945 | ··-·NIST-800-53-AU-2(d) |
| Offset 11956, 16 lines modified | Offset 11956, 16 lines modified | ||
| 11956 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 11956 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 11957 | ··find: | 11957 | ··find: |
| 11958 | ····paths:·/etc/audit/rules.d | 11958 | ····paths:·/etc/audit/rules.d |
| 11959 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 11959 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 11960 | ····patterns:·'*.rules' | 11960 | ····patterns:·'*.rules' |
| 11961 | ··register:·find_watch_key | 11961 | ··register:·find_watch_key |
| 11962 | ··when: | 11962 | ··when: |
| 11963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11964 | ··-·'"audit"·in·ansible_facts.packages' | 11963 | ··-·'"audit"·in·ansible_facts.packages' |
| 11964 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11965 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 11965 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 11966 | ····==·0 | 11966 | ····==·0 |
| 11967 | ··tags: | 11967 | ··tags: |
| 11968 | ··-·CJIS-5.4.1.1 | 11968 | ··-·CJIS-5.4.1.1 |
| 11969 | ··-·NIST-800-171-3.1.7 | 11969 | ··-·NIST-800-171-3.1.7 |
| 11970 | ··-·NIST-800-53-AC-2(7)(b) | 11970 | ··-·NIST-800-53-AC-2(7)(b) |
| 11971 | ··-·NIST-800-53-AC-6(9) | 11971 | ··-·NIST-800-53-AC-6(9) |
| Offset 11982, 16 lines modified | Offset 11982, 16 lines modified | ||
| 11982 | ··-·restrict_strategy | 11982 | ··-·restrict_strategy |
| 11983 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 11983 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 11984 | ··set_fact: | 11984 | ··set_fact: |
| 11985 | ····all_files: | 11985 | ····all_files: |
| 11986 | ····-·/etc/audit/rules.d/actions.rules | 11986 | ····-·/etc/audit/rules.d/actions.rules |
| 11987 | ··when: | 11987 | ··when: |
| 11988 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11989 | ··-·'"audit"·in·ansible_facts.packages' | 11988 | ··-·'"audit"·in·ansible_facts.packages' |
| 11989 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 11990 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 11990 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 11991 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 11991 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 11992 | ··tags: | 11992 | ··tags: |
| 11993 | ··-·CJIS-5.4.1.1 | 11993 | ··-·CJIS-5.4.1.1 |
| 11994 | ··-·NIST-800-171-3.1.7 | 11994 | ··-·NIST-800-171-3.1.7 |
| 11995 | ··-·NIST-800-53-AC-2(7)(b) | 11995 | ··-·NIST-800-53-AC-2(7)(b) |
| 11996 | ··-·NIST-800-53-AC-6(9) | 11996 | ··-·NIST-800-53-AC-6(9) |
| Offset 12008, 16 lines modified | Offset 12008, 16 lines modified | ||
| 12008 | ··-·restrict_strategy | 12008 | ··-·restrict_strategy |
| 12009 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 12009 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 12010 | ··set_fact: | 12010 | ··set_fact: |
| 12011 | ····all_files: | 12011 | ····all_files: |
| 12012 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 12012 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 12013 | ··when: | 12013 | ··when: |
| 12014 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12015 | ··-·'"audit"·in·ansible_facts.packages' | 12014 | ··-·'"audit"·in·ansible_facts.packages' |
| 12015 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 12016 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 12016 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 12017 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 12017 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 12018 | ··tags: | 12018 | ··tags: |
| 12019 | ··-·CJIS-5.4.1.1 | 12019 | ··-·CJIS-5.4.1.1 |
| 12020 | ··-·NIST-800-171-3.1.7 | 12020 | ··-·NIST-800-171-3.1.7 |
| 12021 | ··-·NIST-800-53-AC-2(7)(b) | 12021 | ··-·NIST-800-53-AC-2(7)(b) |
| 12022 | ··-·NIST-800-53-AC-6(9) | 12022 | ··-·NIST-800-53-AC-6(9) |
| Offset 12036, 16 lines modified | Offset 12036, 16 lines modified | ||
| 12036 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 12036 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 52996/58343 bytes (90.84%) of diff not shown. | |||
| Offset 151306, 16 lines modified | Offset 151306, 16 lines modified | ||
| 151306 | ··-·no_reboot_needed | 151306 | ··-·no_reboot_needed |
| 151307 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151307 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151308 | ··stat: | 151308 | ··stat: |
| 151309 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151309 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151310 | ··register:·file_exists | 151310 | ··register:·file_exists |
| 151311 | ··when: | 151311 | ··when: |
| 151312 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151313 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151312 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151313 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151314 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151314 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151315 | ··tags: | 151315 | ··tags: |
| 151316 | ··-·CJIS-5.5.2.2 | 151316 | ··-·CJIS-5.5.2.2 |
| 151317 | ··-·NIST-800-171-3.4.5 | 151317 | ··-·NIST-800-171-3.4.5 |
| 151318 | ··-·NIST-800-53-AC-6(1) | 151318 | ··-·NIST-800-53-AC-6(1) |
| 151319 | ··-·NIST-800-53-CM-6(a) | 151319 | ··-·NIST-800-53-CM-6(a) |
| 151320 | ··-·PCI-DSS-Req-7.1 | 151320 | ··-·PCI-DSS-Req-7.1 |
| Offset 151327, 16 lines modified | Offset 151327, 16 lines modified | ||
| 151327 | ··-·no_reboot_needed | 151327 | ··-·no_reboot_needed |
| 151328 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151328 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151329 | ··file: | 151329 | ··file: |
| 151330 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151330 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151331 | ····group:·'0' | 151331 | ····group:·'0' |
| 151332 | ··when: | 151332 | ··when: |
| 151333 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151334 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151333 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151334 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151336 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151336 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151337 | ··tags: | 151337 | ··tags: |
| 151338 | ··-·CJIS-5.5.2.2 | 151338 | ··-·CJIS-5.5.2.2 |
| 151339 | ··-·NIST-800-171-3.4.5 | 151339 | ··-·NIST-800-171-3.4.5 |
| 151340 | ··-·NIST-800-53-AC-6(1) | 151340 | ··-·NIST-800-53-AC-6(1) |
| 151341 | ··-·NIST-800-53-CM-6(a) | 151341 | ··-·NIST-800-53-CM-6(a) |
| Offset 151344, 15 lines modified | Offset 151344, 15 lines modified | ||
| 151344 | ··-·configure_strategy | 151344 | ··-·configure_strategy |
| 151345 | ··-·file_groupowner_efi_grub2_cfg | 151345 | ··-·file_groupowner_efi_grub2_cfg |
| 151346 | ··-·low_complexity | 151346 | ··-·low_complexity |
| 151347 | ··-·low_disruption | 151347 | ··-·low_disruption |
| 151348 | ··-·medium_severity | 151348 | ··-·medium_severity |
| 151349 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151349 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151350 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151350 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151351 | if· | 151351 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151352 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 151352 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 151353 | else | 151353 | else |
| 151354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151355 | fi</xccdf-1.2:fix> | 151355 | fi</xccdf-1.2:fix> |
| 151356 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151356 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151448, 16 lines modified | Offset 151448, 16 lines modified | ||
| 151448 | ··-·no_reboot_needed | 151448 | ··-·no_reboot_needed |
| 151449 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 151449 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 151450 | ··stat: | 151450 | ··stat: |
| 151451 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151451 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151452 | ··register:·file_exists | 151452 | ··register:·file_exists |
| 151453 | ··when: | 151453 | ··when: |
| 151454 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151455 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151454 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151455 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151456 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151456 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151457 | ··tags: | 151457 | ··tags: |
| 151458 | ··-·CJIS-5.5.2.2 | 151458 | ··-·CJIS-5.5.2.2 |
| 151459 | ··-·NIST-800-171-3.4.5 | 151459 | ··-·NIST-800-171-3.4.5 |
| 151460 | ··-·NIST-800-53-AC-6(1) | 151460 | ··-·NIST-800-53-AC-6(1) |
| 151461 | ··-·NIST-800-53-CM-6(a) | 151461 | ··-·NIST-800-53-CM-6(a) |
| 151462 | ··-·PCI-DSS-Req-7.1 | 151462 | ··-·PCI-DSS-Req-7.1 |
| Offset 151469, 16 lines modified | Offset 151469, 16 lines modified | ||
| 151469 | ··-·no_reboot_needed | 151469 | ··-·no_reboot_needed |
| 151470 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 151470 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 151471 | ··file: | 151471 | ··file: |
| 151472 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151472 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151473 | ····group:·'0' | 151473 | ····group:·'0' |
| 151474 | ··when: | 151474 | ··when: |
| 151475 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151476 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151475 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151476 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151477 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151477 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151478 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151478 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151479 | ··tags: | 151479 | ··tags: |
| 151480 | ··-·CJIS-5.5.2.2 | 151480 | ··-·CJIS-5.5.2.2 |
| 151481 | ··-·NIST-800-171-3.4.5 | 151481 | ··-·NIST-800-171-3.4.5 |
| 151482 | ··-·NIST-800-53-AC-6(1) | 151482 | ··-·NIST-800-53-AC-6(1) |
| 151483 | ··-·NIST-800-53-CM-6(a) | 151483 | ··-·NIST-800-53-CM-6(a) |
| Offset 151486, 15 lines modified | Offset 151486, 15 lines modified | ||
| 151486 | ··-·configure_strategy | 151486 | ··-·configure_strategy |
| 151487 | ··-·file_groupowner_efi_user_cfg | 151487 | ··-·file_groupowner_efi_user_cfg |
| 151488 | ··-·low_complexity | 151488 | ··-·low_complexity |
| 151489 | ··-·low_disruption | 151489 | ··-·low_disruption |
| 151490 | ··-·medium_severity | 151490 | ··-·medium_severity |
| 151491 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151491 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151492 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151492 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151493 | if· | 151493 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151494 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 151494 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 151495 | else | 151495 | else |
| 151496 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151496 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151497 | fi</xccdf-1.2:fix> | 151497 | fi</xccdf-1.2:fix> |
| 151498 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151498 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151586, 16 lines modified | Offset 151586, 16 lines modified | ||
| 151586 | ··-·no_reboot_needed | 151586 | ··-·no_reboot_needed |
| 151587 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151587 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151588 | ··stat: | 151588 | ··stat: |
| 151589 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151589 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151590 | ··register:·file_exists | 151590 | ··register:·file_exists |
| 151591 | ··when: | 151591 | ··when: |
| 151592 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151593 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151592 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151593 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151594 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151594 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151595 | ··tags: | 151595 | ··tags: |
| 151596 | ··-·CJIS-5.5.2.2 | 151596 | ··-·CJIS-5.5.2.2 |
| 151597 | ··-·NIST-800-171-3.4.5 | 151597 | ··-·NIST-800-171-3.4.5 |
| 151598 | ··-·NIST-800-53-AC-6(1) | 151598 | ··-·NIST-800-53-AC-6(1) |
| 151599 | ··-·NIST-800-53-CM-6(a) | 151599 | ··-·NIST-800-53-CM-6(a) |
| 151600 | ··-·PCI-DSS-Req-7.1 | 151600 | ··-·PCI-DSS-Req-7.1 |
| Offset 151607, 16 lines modified | Offset 151607, 16 lines modified | ||
| 151607 | ··-·no_reboot_needed | 151607 | ··-·no_reboot_needed |
| 151608 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151608 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151609 | ··file: | 151609 | ··file: |
| 151610 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151610 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9972/15564 bytes (64.07%) of diff not shown. | |||
| Offset 151308, 16 lines modified | Offset 151308, 16 lines modified | ||
| 151308 | ··-·no_reboot_needed | 151308 | ··-·no_reboot_needed |
| 151309 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151309 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151310 | ··stat: | 151310 | ··stat: |
| 151311 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151311 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151312 | ··register:·file_exists | 151312 | ··register:·file_exists |
| 151313 | ··when: | 151313 | ··when: |
| 151314 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151315 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151314 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151315 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151316 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151316 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151317 | ··tags: | 151317 | ··tags: |
| 151318 | ··-·CJIS-5.5.2.2 | 151318 | ··-·CJIS-5.5.2.2 |
| 151319 | ··-·NIST-800-171-3.4.5 | 151319 | ··-·NIST-800-171-3.4.5 |
| 151320 | ··-·NIST-800-53-AC-6(1) | 151320 | ··-·NIST-800-53-AC-6(1) |
| 151321 | ··-·NIST-800-53-CM-6(a) | 151321 | ··-·NIST-800-53-CM-6(a) |
| 151322 | ··-·PCI-DSS-Req-7.1 | 151322 | ··-·PCI-DSS-Req-7.1 |
| Offset 151329, 16 lines modified | Offset 151329, 16 lines modified | ||
| 151329 | ··-·no_reboot_needed | 151329 | ··-·no_reboot_needed |
| 151330 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151330 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151331 | ··file: | 151331 | ··file: |
| 151332 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151332 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151333 | ····group:·'0' | 151333 | ····group:·'0' |
| 151334 | ··when: | 151334 | ··when: |
| 151335 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151336 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151335 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151336 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151337 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151337 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151338 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151338 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151339 | ··tags: | 151339 | ··tags: |
| 151340 | ··-·CJIS-5.5.2.2 | 151340 | ··-·CJIS-5.5.2.2 |
| 151341 | ··-·NIST-800-171-3.4.5 | 151341 | ··-·NIST-800-171-3.4.5 |
| 151342 | ··-·NIST-800-53-AC-6(1) | 151342 | ··-·NIST-800-53-AC-6(1) |
| 151343 | ··-·NIST-800-53-CM-6(a) | 151343 | ··-·NIST-800-53-CM-6(a) |
| Offset 151346, 15 lines modified | Offset 151346, 15 lines modified | ||
| 151346 | ··-·configure_strategy | 151346 | ··-·configure_strategy |
| 151347 | ··-·file_groupowner_efi_grub2_cfg | 151347 | ··-·file_groupowner_efi_grub2_cfg |
| 151348 | ··-·low_complexity | 151348 | ··-·low_complexity |
| 151349 | ··-·low_disruption | 151349 | ··-·low_disruption |
| 151350 | ··-·medium_severity | 151350 | ··-·medium_severity |
| 151351 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151351 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151352 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151352 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151353 | if· | 151353 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151354 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 151354 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 151355 | else | 151355 | else |
| 151356 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151356 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151357 | fi</xccdf-1.2:fix> | 151357 | fi</xccdf-1.2:fix> |
| 151358 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151358 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151450, 16 lines modified | Offset 151450, 16 lines modified | ||
| 151450 | ··-·no_reboot_needed | 151450 | ··-·no_reboot_needed |
| 151451 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 151451 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 151452 | ··stat: | 151452 | ··stat: |
| 151453 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151453 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151454 | ··register:·file_exists | 151454 | ··register:·file_exists |
| 151455 | ··when: | 151455 | ··when: |
| 151456 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151457 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151456 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151457 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151458 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151458 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151459 | ··tags: | 151459 | ··tags: |
| 151460 | ··-·CJIS-5.5.2.2 | 151460 | ··-·CJIS-5.5.2.2 |
| 151461 | ··-·NIST-800-171-3.4.5 | 151461 | ··-·NIST-800-171-3.4.5 |
| 151462 | ··-·NIST-800-53-AC-6(1) | 151462 | ··-·NIST-800-53-AC-6(1) |
| 151463 | ··-·NIST-800-53-CM-6(a) | 151463 | ··-·NIST-800-53-CM-6(a) |
| 151464 | ··-·PCI-DSS-Req-7.1 | 151464 | ··-·PCI-DSS-Req-7.1 |
| Offset 151471, 16 lines modified | Offset 151471, 16 lines modified | ||
| 151471 | ··-·no_reboot_needed | 151471 | ··-·no_reboot_needed |
| 151472 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 151472 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 151473 | ··file: | 151473 | ··file: |
| 151474 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151474 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151475 | ····group:·'0' | 151475 | ····group:·'0' |
| 151476 | ··when: | 151476 | ··when: |
| 151477 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151478 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151477 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151478 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151479 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151479 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151480 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151480 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151481 | ··tags: | 151481 | ··tags: |
| 151482 | ··-·CJIS-5.5.2.2 | 151482 | ··-·CJIS-5.5.2.2 |
| 151483 | ··-·NIST-800-171-3.4.5 | 151483 | ··-·NIST-800-171-3.4.5 |
| 151484 | ··-·NIST-800-53-AC-6(1) | 151484 | ··-·NIST-800-53-AC-6(1) |
| 151485 | ··-·NIST-800-53-CM-6(a) | 151485 | ··-·NIST-800-53-CM-6(a) |
| Offset 151488, 15 lines modified | Offset 151488, 15 lines modified | ||
| 151488 | ··-·configure_strategy | 151488 | ··-·configure_strategy |
| 151489 | ··-·file_groupowner_efi_user_cfg | 151489 | ··-·file_groupowner_efi_user_cfg |
| 151490 | ··-·low_complexity | 151490 | ··-·low_complexity |
| 151491 | ··-·low_disruption | 151491 | ··-·low_disruption |
| 151492 | ··-·medium_severity | 151492 | ··-·medium_severity |
| 151493 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151493 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151494 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151494 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151495 | if· | 151495 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151496 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 151496 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 151497 | else | 151497 | else |
| 151498 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151498 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151499 | fi</xccdf-1.2:fix> | 151499 | fi</xccdf-1.2:fix> |
| 151500 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151500 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151588, 16 lines modified | Offset 151588, 16 lines modified | ||
| 151588 | ··-·no_reboot_needed | 151588 | ··-·no_reboot_needed |
| 151589 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151589 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151590 | ··stat: | 151590 | ··stat: |
| 151591 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151591 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151592 | ··register:·file_exists | 151592 | ··register:·file_exists |
| 151593 | ··when: | 151593 | ··when: |
| 151594 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151595 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151594 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151595 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151596 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151596 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151597 | ··tags: | 151597 | ··tags: |
| 151598 | ··-·CJIS-5.5.2.2 | 151598 | ··-·CJIS-5.5.2.2 |
| 151599 | ··-·NIST-800-171-3.4.5 | 151599 | ··-·NIST-800-171-3.4.5 |
| 151600 | ··-·NIST-800-53-AC-6(1) | 151600 | ··-·NIST-800-53-AC-6(1) |
| 151601 | ··-·NIST-800-53-CM-6(a) | 151601 | ··-·NIST-800-53-CM-6(a) |
| 151602 | ··-·PCI-DSS-Req-7.1 | 151602 | ··-·PCI-DSS-Req-7.1 |
| Offset 151609, 16 lines modified | Offset 151609, 16 lines modified | ||
| 151609 | ··-·no_reboot_needed | 151609 | ··-·no_reboot_needed |
| 151610 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151610 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151611 | ··file: | 151611 | ··file: |
| 151612 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151612 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9972/15564 bytes (64.07%) of diff not shown. | |||
| Offset 151134, 16 lines modified | Offset 151134, 16 lines modified | ||
| 151134 | ··-·no_reboot_needed | 151134 | ··-·no_reboot_needed |
| 151135 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151135 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151136 | ··stat: | 151136 | ··stat: |
| 151137 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151137 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151138 | ··register:·file_exists | 151138 | ··register:·file_exists |
| 151139 | ··when: | 151139 | ··when: |
| 151140 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151141 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151140 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151141 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151142 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151142 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151143 | ··tags: | 151143 | ··tags: |
| 151144 | ··-·CJIS-5.5.2.2 | 151144 | ··-·CJIS-5.5.2.2 |
| 151145 | ··-·NIST-800-171-3.4.5 | 151145 | ··-·NIST-800-171-3.4.5 |
| 151146 | ··-·NIST-800-53-AC-6(1) | 151146 | ··-·NIST-800-53-AC-6(1) |
| 151147 | ··-·NIST-800-53-CM-6(a) | 151147 | ··-·NIST-800-53-CM-6(a) |
| 151148 | ··-·PCI-DSS-Req-7.1 | 151148 | ··-·PCI-DSS-Req-7.1 |
| Offset 151155, 16 lines modified | Offset 151155, 16 lines modified | ||
| 151155 | ··-·no_reboot_needed | 151155 | ··-·no_reboot_needed |
| 151156 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151156 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151157 | ··file: | 151157 | ··file: |
| 151158 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151158 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151159 | ····group:·'0' | 151159 | ····group:·'0' |
| 151160 | ··when: | 151160 | ··when: |
| 151161 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151162 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151161 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151162 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151163 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151163 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151164 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151164 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151165 | ··tags: | 151165 | ··tags: |
| 151166 | ··-·CJIS-5.5.2.2 | 151166 | ··-·CJIS-5.5.2.2 |
| 151167 | ··-·NIST-800-171-3.4.5 | 151167 | ··-·NIST-800-171-3.4.5 |
| 151168 | ··-·NIST-800-53-AC-6(1) | 151168 | ··-·NIST-800-53-AC-6(1) |
| 151169 | ··-·NIST-800-53-CM-6(a) | 151169 | ··-·NIST-800-53-CM-6(a) |
| Offset 151172, 15 lines modified | Offset 151172, 15 lines modified | ||
| 151172 | ··-·configure_strategy | 151172 | ··-·configure_strategy |
| 151173 | ··-·file_groupowner_efi_grub2_cfg | 151173 | ··-·file_groupowner_efi_grub2_cfg |
| 151174 | ··-·low_complexity | 151174 | ··-·low_complexity |
| 151175 | ··-·low_disruption | 151175 | ··-·low_disruption |
| 151176 | ··-·medium_severity | 151176 | ··-·medium_severity |
| 151177 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151177 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151178 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151178 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151179 | if· | 151179 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151180 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 151180 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 151181 | else | 151181 | else |
| 151182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151183 | fi</xccdf-1.2:fix> | 151183 | fi</xccdf-1.2:fix> |
| 151184 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151184 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151276, 16 lines modified | Offset 151276, 16 lines modified | ||
| 151276 | ··-·no_reboot_needed | 151276 | ··-·no_reboot_needed |
| 151277 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 151277 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 151278 | ··stat: | 151278 | ··stat: |
| 151279 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151279 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151280 | ··register:·file_exists | 151280 | ··register:·file_exists |
| 151281 | ··when: | 151281 | ··when: |
| 151282 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151283 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151282 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151283 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151284 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151284 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151285 | ··tags: | 151285 | ··tags: |
| 151286 | ··-·CJIS-5.5.2.2 | 151286 | ··-·CJIS-5.5.2.2 |
| 151287 | ··-·NIST-800-171-3.4.5 | 151287 | ··-·NIST-800-171-3.4.5 |
| 151288 | ··-·NIST-800-53-AC-6(1) | 151288 | ··-·NIST-800-53-AC-6(1) |
| 151289 | ··-·NIST-800-53-CM-6(a) | 151289 | ··-·NIST-800-53-CM-6(a) |
| 151290 | ··-·PCI-DSS-Req-7.1 | 151290 | ··-·PCI-DSS-Req-7.1 |
| Offset 151297, 16 lines modified | Offset 151297, 16 lines modified | ||
| 151297 | ··-·no_reboot_needed | 151297 | ··-·no_reboot_needed |
| 151298 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 151298 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 151299 | ··file: | 151299 | ··file: |
| 151300 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151300 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151301 | ····group:·'0' | 151301 | ····group:·'0' |
| 151302 | ··when: | 151302 | ··when: |
| 151303 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151304 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151303 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151304 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151305 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151305 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151306 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151306 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151307 | ··tags: | 151307 | ··tags: |
| 151308 | ··-·CJIS-5.5.2.2 | 151308 | ··-·CJIS-5.5.2.2 |
| 151309 | ··-·NIST-800-171-3.4.5 | 151309 | ··-·NIST-800-171-3.4.5 |
| 151310 | ··-·NIST-800-53-AC-6(1) | 151310 | ··-·NIST-800-53-AC-6(1) |
| 151311 | ··-·NIST-800-53-CM-6(a) | 151311 | ··-·NIST-800-53-CM-6(a) |
| Offset 151314, 15 lines modified | Offset 151314, 15 lines modified | ||
| 151314 | ··-·configure_strategy | 151314 | ··-·configure_strategy |
| 151315 | ··-·file_groupowner_efi_user_cfg | 151315 | ··-·file_groupowner_efi_user_cfg |
| 151316 | ··-·low_complexity | 151316 | ··-·low_complexity |
| 151317 | ··-·low_disruption | 151317 | ··-·low_disruption |
| 151318 | ··-·medium_severity | 151318 | ··-·medium_severity |
| 151319 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151319 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151320 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151320 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151321 | if· | 151321 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151322 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 151322 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 151323 | else | 151323 | else |
| 151324 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151324 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151325 | fi</xccdf-1.2:fix> | 151325 | fi</xccdf-1.2:fix> |
| 151326 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151326 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151414, 16 lines modified | Offset 151414, 16 lines modified | ||
| 151414 | ··-·no_reboot_needed | 151414 | ··-·no_reboot_needed |
| 151415 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151415 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151416 | ··stat: | 151416 | ··stat: |
| 151417 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151417 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151418 | ··register:·file_exists | 151418 | ··register:·file_exists |
| 151419 | ··when: | 151419 | ··when: |
| 151420 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151421 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151420 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151421 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151422 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151422 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151423 | ··tags: | 151423 | ··tags: |
| 151424 | ··-·CJIS-5.5.2.2 | 151424 | ··-·CJIS-5.5.2.2 |
| 151425 | ··-·NIST-800-171-3.4.5 | 151425 | ··-·NIST-800-171-3.4.5 |
| 151426 | ··-·NIST-800-53-AC-6(1) | 151426 | ··-·NIST-800-53-AC-6(1) |
| 151427 | ··-·NIST-800-53-CM-6(a) | 151427 | ··-·NIST-800-53-CM-6(a) |
| 151428 | ··-·PCI-DSS-Req-7.1 | 151428 | ··-·PCI-DSS-Req-7.1 |
| Offset 151435, 16 lines modified | Offset 151435, 16 lines modified | ||
| 151435 | ··-·no_reboot_needed | 151435 | ··-·no_reboot_needed |
| 151436 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151436 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151437 | ··file: | 151437 | ··file: |
| 151438 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151438 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9936/15512 bytes (64.05%) of diff not shown. | |||
| Offset 169143, 16 lines modified | Offset 169143, 16 lines modified | ||
| 169143 | ··-·no_reboot_needed | 169143 | ··-·no_reboot_needed |
| 169144 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169144 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169145 | ··stat: | 169145 | ··stat: |
| 169146 | ····path:·/boot/grub2/grub.cfg | 169146 | ····path:·/boot/grub2/grub.cfg |
| 169147 | ··register:·file_exists | 169147 | ··register:·file_exists |
| 169148 | ··when: | 169148 | ··when: |
| 169149 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169150 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169149 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169150 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169151 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169151 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169152 | ··tags: | 169152 | ··tags: |
| 169153 | ··-·CJIS-5.5.2.2 | 169153 | ··-·CJIS-5.5.2.2 |
| 169154 | ··-·NIST-800-171-3.4.5 | 169154 | ··-·NIST-800-171-3.4.5 |
| 169155 | ··-·NIST-800-53-AC-6(1) | 169155 | ··-·NIST-800-53-AC-6(1) |
| 169156 | ··-·NIST-800-53-CM-6(a) | 169156 | ··-·NIST-800-53-CM-6(a) |
| 169157 | ··-·PCI-DSS-Req-7.1 | 169157 | ··-·PCI-DSS-Req-7.1 |
| Offset 169164, 16 lines modified | Offset 169164, 16 lines modified | ||
| 169164 | ··-·no_reboot_needed | 169164 | ··-·no_reboot_needed |
| 169165 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 169165 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 169166 | ··file: | 169166 | ··file: |
| 169167 | ····path:·/boot/grub2/grub.cfg | 169167 | ····path:·/boot/grub2/grub.cfg |
| 169168 | ····group:·'0' | 169168 | ····group:·'0' |
| 169169 | ··when: | 169169 | ··when: |
| 169170 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169171 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169170 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169171 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169172 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169172 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169173 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169173 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169174 | ··tags: | 169174 | ··tags: |
| 169175 | ··-·CJIS-5.5.2.2 | 169175 | ··-·CJIS-5.5.2.2 |
| 169176 | ··-·NIST-800-171-3.4.5 | 169176 | ··-·NIST-800-171-3.4.5 |
| 169177 | ··-·NIST-800-53-AC-6(1) | 169177 | ··-·NIST-800-53-AC-6(1) |
| 169178 | ··-·NIST-800-53-CM-6(a) | 169178 | ··-·NIST-800-53-CM-6(a) |
| Offset 169181, 15 lines modified | Offset 169181, 15 lines modified | ||
| 169181 | ··-·configure_strategy | 169181 | ··-·configure_strategy |
| 169182 | ··-·file_groupowner_grub2_cfg | 169182 | ··-·file_groupowner_grub2_cfg |
| 169183 | ··-·low_complexity | 169183 | ··-·low_complexity |
| 169184 | ··-·low_disruption | 169184 | ··-·low_disruption |
| 169185 | ··-·medium_severity | 169185 | ··-·medium_severity |
| 169186 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169186 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169187 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169187 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169188 | if· | 169188 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169189 | chgrp·0·/boot/grub2/grub.cfg | 169189 | chgrp·0·/boot/grub2/grub.cfg |
| 169190 | else | 169190 | else |
| 169191 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169191 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169192 | fi</xccdf-1.2:fix> | 169192 | fi</xccdf-1.2:fix> |
| 169193 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169193 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169297, 16 lines modified | Offset 169297, 16 lines modified | ||
| 169297 | ··-·no_reboot_needed | 169297 | ··-·no_reboot_needed |
| 169298 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169298 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169299 | ··stat: | 169299 | ··stat: |
| 169300 | ····path:·/boot/grub2/user.cfg | 169300 | ····path:·/boot/grub2/user.cfg |
| 169301 | ··register:·file_exists | 169301 | ··register:·file_exists |
| 169302 | ··when: | 169302 | ··when: |
| 169303 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169304 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169303 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169304 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169305 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169305 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169306 | ··tags: | 169306 | ··tags: |
| 169307 | ··-·CJIS-5.5.2.2 | 169307 | ··-·CJIS-5.5.2.2 |
| 169308 | ··-·NIST-800-171-3.4.5 | 169308 | ··-·NIST-800-171-3.4.5 |
| 169309 | ··-·NIST-800-53-AC-6(1) | 169309 | ··-·NIST-800-53-AC-6(1) |
| 169310 | ··-·NIST-800-53-CM-6(a) | 169310 | ··-·NIST-800-53-CM-6(a) |
| 169311 | ··-·PCI-DSS-Req-7.1 | 169311 | ··-·PCI-DSS-Req-7.1 |
| Offset 169318, 16 lines modified | Offset 169318, 16 lines modified | ||
| 169318 | ··-·no_reboot_needed | 169318 | ··-·no_reboot_needed |
| 169319 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 169319 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 169320 | ··file: | 169320 | ··file: |
| 169321 | ····path:·/boot/grub2/user.cfg | 169321 | ····path:·/boot/grub2/user.cfg |
| 169322 | ····group:·'0' | 169322 | ····group:·'0' |
| 169323 | ··when: | 169323 | ··when: |
| 169324 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169325 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169324 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169325 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169326 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169326 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169327 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169327 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169328 | ··tags: | 169328 | ··tags: |
| 169329 | ··-·CJIS-5.5.2.2 | 169329 | ··-·CJIS-5.5.2.2 |
| 169330 | ··-·NIST-800-171-3.4.5 | 169330 | ··-·NIST-800-171-3.4.5 |
| 169331 | ··-·NIST-800-53-AC-6(1) | 169331 | ··-·NIST-800-53-AC-6(1) |
| 169332 | ··-·NIST-800-53-CM-6(a) | 169332 | ··-·NIST-800-53-CM-6(a) |
| Offset 169335, 15 lines modified | Offset 169335, 15 lines modified | ||
| 169335 | ··-·configure_strategy | 169335 | ··-·configure_strategy |
| 169336 | ··-·file_groupowner_user_cfg | 169336 | ··-·file_groupowner_user_cfg |
| 169337 | ··-·low_complexity | 169337 | ··-·low_complexity |
| 169338 | ··-·low_disruption | 169338 | ··-·low_disruption |
| 169339 | ··-·medium_severity | 169339 | ··-·medium_severity |
| 169340 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169340 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169341 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169341 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169342 | if· | 169342 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169343 | chgrp·0·/boot/grub2/user.cfg | 169343 | chgrp·0·/boot/grub2/user.cfg |
| 169344 | else | 169344 | else |
| 169345 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169345 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169346 | fi</xccdf-1.2:fix> | 169346 | fi</xccdf-1.2:fix> |
| 169347 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169347 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169446, 16 lines modified | Offset 169446, 16 lines modified | ||
| 169446 | ··-·no_reboot_needed | 169446 | ··-·no_reboot_needed |
| 169447 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169447 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169448 | ··stat: | 169448 | ··stat: |
| 169449 | ····path:·/boot/grub2/grub.cfg | 169449 | ····path:·/boot/grub2/grub.cfg |
| 169450 | ··register:·file_exists | 169450 | ··register:·file_exists |
| 169451 | ··when: | 169451 | ··when: |
| 169452 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169453 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169452 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169453 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169454 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169454 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169455 | ··tags: | 169455 | ··tags: |
| 169456 | ··-·CJIS-5.5.2.2 | 169456 | ··-·CJIS-5.5.2.2 |
| 169457 | ··-·NIST-800-171-3.4.5 | 169457 | ··-·NIST-800-171-3.4.5 |
| 169458 | ··-·NIST-800-53-AC-6(1) | 169458 | ··-·NIST-800-53-AC-6(1) |
| 169459 | ··-·NIST-800-53-CM-6(a) | 169459 | ··-·NIST-800-53-CM-6(a) |
| 169460 | ··-·PCI-DSS-Req-7.1 | 169460 | ··-·PCI-DSS-Req-7.1 |
| Offset 169467, 16 lines modified | Offset 169467, 16 lines modified | ||
| 169467 | ··-·no_reboot_needed | 169467 | ··-·no_reboot_needed |
| 169468 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 169468 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 169469 | ··file: | 169469 | ··file: |
| 169470 | ····path:·/boot/grub2/grub.cfg | 169470 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 24047/29545 bytes (81.39%) of diff not shown. | |||
| Offset 169145, 16 lines modified | Offset 169145, 16 lines modified | ||
| 169145 | ··-·no_reboot_needed | 169145 | ··-·no_reboot_needed |
| 169146 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169146 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169147 | ··stat: | 169147 | ··stat: |
| 169148 | ····path:·/boot/grub2/grub.cfg | 169148 | ····path:·/boot/grub2/grub.cfg |
| 169149 | ··register:·file_exists | 169149 | ··register:·file_exists |
| 169150 | ··when: | 169150 | ··when: |
| 169151 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169152 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169151 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169152 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169153 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169153 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169154 | ··tags: | 169154 | ··tags: |
| 169155 | ··-·CJIS-5.5.2.2 | 169155 | ··-·CJIS-5.5.2.2 |
| 169156 | ··-·NIST-800-171-3.4.5 | 169156 | ··-·NIST-800-171-3.4.5 |
| 169157 | ··-·NIST-800-53-AC-6(1) | 169157 | ··-·NIST-800-53-AC-6(1) |
| 169158 | ··-·NIST-800-53-CM-6(a) | 169158 | ··-·NIST-800-53-CM-6(a) |
| 169159 | ··-·PCI-DSS-Req-7.1 | 169159 | ··-·PCI-DSS-Req-7.1 |
| Offset 169166, 16 lines modified | Offset 169166, 16 lines modified | ||
| 169166 | ··-·no_reboot_needed | 169166 | ··-·no_reboot_needed |
| 169167 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 169167 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 169168 | ··file: | 169168 | ··file: |
| 169169 | ····path:·/boot/grub2/grub.cfg | 169169 | ····path:·/boot/grub2/grub.cfg |
| 169170 | ····group:·'0' | 169170 | ····group:·'0' |
| 169171 | ··when: | 169171 | ··when: |
| 169172 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169173 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169172 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169173 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169174 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169174 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169175 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169175 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169176 | ··tags: | 169176 | ··tags: |
| 169177 | ··-·CJIS-5.5.2.2 | 169177 | ··-·CJIS-5.5.2.2 |
| 169178 | ··-·NIST-800-171-3.4.5 | 169178 | ··-·NIST-800-171-3.4.5 |
| 169179 | ··-·NIST-800-53-AC-6(1) | 169179 | ··-·NIST-800-53-AC-6(1) |
| 169180 | ··-·NIST-800-53-CM-6(a) | 169180 | ··-·NIST-800-53-CM-6(a) |
| Offset 169183, 15 lines modified | Offset 169183, 15 lines modified | ||
| 169183 | ··-·configure_strategy | 169183 | ··-·configure_strategy |
| 169184 | ··-·file_groupowner_grub2_cfg | 169184 | ··-·file_groupowner_grub2_cfg |
| 169185 | ··-·low_complexity | 169185 | ··-·low_complexity |
| 169186 | ··-·low_disruption | 169186 | ··-·low_disruption |
| 169187 | ··-·medium_severity | 169187 | ··-·medium_severity |
| 169188 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169188 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169189 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169189 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169190 | if· | 169190 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169191 | chgrp·0·/boot/grub2/grub.cfg | 169191 | chgrp·0·/boot/grub2/grub.cfg |
| 169192 | else | 169192 | else |
| 169193 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169193 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169194 | fi</xccdf-1.2:fix> | 169194 | fi</xccdf-1.2:fix> |
| 169195 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169195 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169299, 16 lines modified | Offset 169299, 16 lines modified | ||
| 169299 | ··-·no_reboot_needed | 169299 | ··-·no_reboot_needed |
| 169300 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169300 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169301 | ··stat: | 169301 | ··stat: |
| 169302 | ····path:·/boot/grub2/user.cfg | 169302 | ····path:·/boot/grub2/user.cfg |
| 169303 | ··register:·file_exists | 169303 | ··register:·file_exists |
| 169304 | ··when: | 169304 | ··when: |
| 169305 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169306 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169305 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169306 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169307 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169307 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169308 | ··tags: | 169308 | ··tags: |
| 169309 | ··-·CJIS-5.5.2.2 | 169309 | ··-·CJIS-5.5.2.2 |
| 169310 | ··-·NIST-800-171-3.4.5 | 169310 | ··-·NIST-800-171-3.4.5 |
| 169311 | ··-·NIST-800-53-AC-6(1) | 169311 | ··-·NIST-800-53-AC-6(1) |
| 169312 | ··-·NIST-800-53-CM-6(a) | 169312 | ··-·NIST-800-53-CM-6(a) |
| 169313 | ··-·PCI-DSS-Req-7.1 | 169313 | ··-·PCI-DSS-Req-7.1 |
| Offset 169320, 16 lines modified | Offset 169320, 16 lines modified | ||
| 169320 | ··-·no_reboot_needed | 169320 | ··-·no_reboot_needed |
| 169321 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 169321 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 169322 | ··file: | 169322 | ··file: |
| 169323 | ····path:·/boot/grub2/user.cfg | 169323 | ····path:·/boot/grub2/user.cfg |
| 169324 | ····group:·'0' | 169324 | ····group:·'0' |
| 169325 | ··when: | 169325 | ··when: |
| 169326 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169327 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169326 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169327 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169328 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169328 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169329 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169329 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169330 | ··tags: | 169330 | ··tags: |
| 169331 | ··-·CJIS-5.5.2.2 | 169331 | ··-·CJIS-5.5.2.2 |
| 169332 | ··-·NIST-800-171-3.4.5 | 169332 | ··-·NIST-800-171-3.4.5 |
| 169333 | ··-·NIST-800-53-AC-6(1) | 169333 | ··-·NIST-800-53-AC-6(1) |
| 169334 | ··-·NIST-800-53-CM-6(a) | 169334 | ··-·NIST-800-53-CM-6(a) |
| Offset 169337, 15 lines modified | Offset 169337, 15 lines modified | ||
| 169337 | ··-·configure_strategy | 169337 | ··-·configure_strategy |
| 169338 | ··-·file_groupowner_user_cfg | 169338 | ··-·file_groupowner_user_cfg |
| 169339 | ··-·low_complexity | 169339 | ··-·low_complexity |
| 169340 | ··-·low_disruption | 169340 | ··-·low_disruption |
| 169341 | ··-·medium_severity | 169341 | ··-·medium_severity |
| 169342 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169342 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169343 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169343 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169344 | if· | 169344 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169345 | chgrp·0·/boot/grub2/user.cfg | 169345 | chgrp·0·/boot/grub2/user.cfg |
| 169346 | else | 169346 | else |
| 169347 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169347 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169348 | fi</xccdf-1.2:fix> | 169348 | fi</xccdf-1.2:fix> |
| 169349 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169349 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169448, 16 lines modified | Offset 169448, 16 lines modified | ||
| 169448 | ··-·no_reboot_needed | 169448 | ··-·no_reboot_needed |
| 169449 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169449 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169450 | ··stat: | 169450 | ··stat: |
| 169451 | ····path:·/boot/grub2/grub.cfg | 169451 | ····path:·/boot/grub2/grub.cfg |
| 169452 | ··register:·file_exists | 169452 | ··register:·file_exists |
| 169453 | ··when: | 169453 | ··when: |
| 169454 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169455 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169454 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169455 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169456 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169456 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169457 | ··tags: | 169457 | ··tags: |
| 169458 | ··-·CJIS-5.5.2.2 | 169458 | ··-·CJIS-5.5.2.2 |
| 169459 | ··-·NIST-800-171-3.4.5 | 169459 | ··-·NIST-800-171-3.4.5 |
| 169460 | ··-·NIST-800-53-AC-6(1) | 169460 | ··-·NIST-800-53-AC-6(1) |
| 169461 | ··-·NIST-800-53-CM-6(a) | 169461 | ··-·NIST-800-53-CM-6(a) |
| 169462 | ··-·PCI-DSS-Req-7.1 | 169462 | ··-·PCI-DSS-Req-7.1 |
| Offset 169469, 16 lines modified | Offset 169469, 16 lines modified | ||
| 169469 | ··-·no_reboot_needed | 169469 | ··-·no_reboot_needed |
| 169470 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 169470 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 169471 | ··file: | 169471 | ··file: |
| 169472 | ····path:·/boot/grub2/grub.cfg | 169472 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 24047/29545 bytes (81.39%) of diff not shown. | |||
| Offset 168935, 16 lines modified | Offset 168935, 16 lines modified | ||
| 168935 | ··-·no_reboot_needed | 168935 | ··-·no_reboot_needed |
| 168936 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 168936 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 168937 | ··stat: | 168937 | ··stat: |
| 168938 | ····path:·/boot/grub2/grub.cfg | 168938 | ····path:·/boot/grub2/grub.cfg |
| 168939 | ··register:·file_exists | 168939 | ··register:·file_exists |
| 168940 | ··when: | 168940 | ··when: |
| 168941 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168942 | ··-·'"grub2-common"·in·ansible_facts.packages' | 168941 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 168942 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168943 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 168943 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 168944 | ··tags: | 168944 | ··tags: |
| 168945 | ··-·CJIS-5.5.2.2 | 168945 | ··-·CJIS-5.5.2.2 |
| 168946 | ··-·NIST-800-171-3.4.5 | 168946 | ··-·NIST-800-171-3.4.5 |
| 168947 | ··-·NIST-800-53-AC-6(1) | 168947 | ··-·NIST-800-53-AC-6(1) |
| 168948 | ··-·NIST-800-53-CM-6(a) | 168948 | ··-·NIST-800-53-CM-6(a) |
| 168949 | ··-·PCI-DSS-Req-7.1 | 168949 | ··-·PCI-DSS-Req-7.1 |
| Offset 168956, 16 lines modified | Offset 168956, 16 lines modified | ||
| 168956 | ··-·no_reboot_needed | 168956 | ··-·no_reboot_needed |
| 168957 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 168957 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 168958 | ··file: | 168958 | ··file: |
| 168959 | ····path:·/boot/grub2/grub.cfg | 168959 | ····path:·/boot/grub2/grub.cfg |
| 168960 | ····group:·'0' | 168960 | ····group:·'0' |
| 168961 | ··when: | 168961 | ··when: |
| 168962 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168963 | ··-·'"grub2-common"·in·ansible_facts.packages' | 168962 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 168963 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168964 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 168964 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 168965 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 168965 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 168966 | ··tags: | 168966 | ··tags: |
| 168967 | ··-·CJIS-5.5.2.2 | 168967 | ··-·CJIS-5.5.2.2 |
| 168968 | ··-·NIST-800-171-3.4.5 | 168968 | ··-·NIST-800-171-3.4.5 |
| 168969 | ··-·NIST-800-53-AC-6(1) | 168969 | ··-·NIST-800-53-AC-6(1) |
| 168970 | ··-·NIST-800-53-CM-6(a) | 168970 | ··-·NIST-800-53-CM-6(a) |
| Offset 168973, 15 lines modified | Offset 168973, 15 lines modified | ||
| 168973 | ··-·configure_strategy | 168973 | ··-·configure_strategy |
| 168974 | ··-·file_groupowner_grub2_cfg | 168974 | ··-·file_groupowner_grub2_cfg |
| 168975 | ··-·low_complexity | 168975 | ··-·low_complexity |
| 168976 | ··-·low_disruption | 168976 | ··-·low_disruption |
| 168977 | ··-·medium_severity | 168977 | ··-·medium_severity |
| 168978 | ··-·no_reboot_needed</xccdf-1.2:fix> | 168978 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 168979 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 168979 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 168980 | if· | 168980 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 168981 | chgrp·0·/boot/grub2/grub.cfg | 168981 | chgrp·0·/boot/grub2/grub.cfg |
| 168982 | else | 168982 | else |
| 168983 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 168983 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 168984 | fi</xccdf-1.2:fix> | 168984 | fi</xccdf-1.2:fix> |
| 168985 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 168985 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169089, 16 lines modified | Offset 169089, 16 lines modified | ||
| 169089 | ··-·no_reboot_needed | 169089 | ··-·no_reboot_needed |
| 169090 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169090 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169091 | ··stat: | 169091 | ··stat: |
| 169092 | ····path:·/boot/grub2/user.cfg | 169092 | ····path:·/boot/grub2/user.cfg |
| 169093 | ··register:·file_exists | 169093 | ··register:·file_exists |
| 169094 | ··when: | 169094 | ··when: |
| 169095 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169096 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169095 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169096 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169097 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169097 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169098 | ··tags: | 169098 | ··tags: |
| 169099 | ··-·CJIS-5.5.2.2 | 169099 | ··-·CJIS-5.5.2.2 |
| 169100 | ··-·NIST-800-171-3.4.5 | 169100 | ··-·NIST-800-171-3.4.5 |
| 169101 | ··-·NIST-800-53-AC-6(1) | 169101 | ··-·NIST-800-53-AC-6(1) |
| 169102 | ··-·NIST-800-53-CM-6(a) | 169102 | ··-·NIST-800-53-CM-6(a) |
| 169103 | ··-·PCI-DSS-Req-7.1 | 169103 | ··-·PCI-DSS-Req-7.1 |
| Offset 169110, 16 lines modified | Offset 169110, 16 lines modified | ||
| 169110 | ··-·no_reboot_needed | 169110 | ··-·no_reboot_needed |
| 169111 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 169111 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 169112 | ··file: | 169112 | ··file: |
| 169113 | ····path:·/boot/grub2/user.cfg | 169113 | ····path:·/boot/grub2/user.cfg |
| 169114 | ····group:·'0' | 169114 | ····group:·'0' |
| 169115 | ··when: | 169115 | ··when: |
| 169116 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169117 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169116 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169117 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169118 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169118 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169119 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169119 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169120 | ··tags: | 169120 | ··tags: |
| 169121 | ··-·CJIS-5.5.2.2 | 169121 | ··-·CJIS-5.5.2.2 |
| 169122 | ··-·NIST-800-171-3.4.5 | 169122 | ··-·NIST-800-171-3.4.5 |
| 169123 | ··-·NIST-800-53-AC-6(1) | 169123 | ··-·NIST-800-53-AC-6(1) |
| 169124 | ··-·NIST-800-53-CM-6(a) | 169124 | ··-·NIST-800-53-CM-6(a) |
| Offset 169127, 15 lines modified | Offset 169127, 15 lines modified | ||
| 169127 | ··-·configure_strategy | 169127 | ··-·configure_strategy |
| 169128 | ··-·file_groupowner_user_cfg | 169128 | ··-·file_groupowner_user_cfg |
| 169129 | ··-·low_complexity | 169129 | ··-·low_complexity |
| 169130 | ··-·low_disruption | 169130 | ··-·low_disruption |
| 169131 | ··-·medium_severity | 169131 | ··-·medium_severity |
| 169132 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169132 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169133 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169133 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169134 | if· | 169134 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169135 | chgrp·0·/boot/grub2/user.cfg | 169135 | chgrp·0·/boot/grub2/user.cfg |
| 169136 | else | 169136 | else |
| 169137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169138 | fi</xccdf-1.2:fix> | 169138 | fi</xccdf-1.2:fix> |
| 169139 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169139 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169238, 16 lines modified | Offset 169238, 16 lines modified | ||
| 169238 | ··-·no_reboot_needed | 169238 | ··-·no_reboot_needed |
| 169239 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169239 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169240 | ··stat: | 169240 | ··stat: |
| 169241 | ····path:·/boot/grub2/grub.cfg | 169241 | ····path:·/boot/grub2/grub.cfg |
| 169242 | ··register:·file_exists | 169242 | ··register:·file_exists |
| 169243 | ··when: | 169243 | ··when: |
| 169244 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169245 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169244 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169245 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169246 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169246 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169247 | ··tags: | 169247 | ··tags: |
| 169248 | ··-·CJIS-5.5.2.2 | 169248 | ··-·CJIS-5.5.2.2 |
| 169249 | ··-·NIST-800-171-3.4.5 | 169249 | ··-·NIST-800-171-3.4.5 |
| 169250 | ··-·NIST-800-53-AC-6(1) | 169250 | ··-·NIST-800-53-AC-6(1) |
| 169251 | ··-·NIST-800-53-CM-6(a) | 169251 | ··-·NIST-800-53-CM-6(a) |
| 169252 | ··-·PCI-DSS-Req-7.1 | 169252 | ··-·PCI-DSS-Req-7.1 |
| Offset 169259, 16 lines modified | Offset 169259, 16 lines modified | ||
| 169259 | ··-·no_reboot_needed | 169259 | ··-·no_reboot_needed |
| 169260 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 169260 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 169261 | ··file: | 169261 | ··file: |
| 169262 | ····path:·/boot/grub2/grub.cfg | 169262 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 23963/29445 bytes (81.38%) of diff not shown. | |||
| Offset 167790, 16 lines modified | Offset 167790, 16 lines modified | ||
| 167790 | ··-·no_reboot_needed | 167790 | ··-·no_reboot_needed |
| 167791 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 167791 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 167792 | ··stat: | 167792 | ··stat: |
| 167793 | ····path:·/boot/grub2/user.cfg | 167793 | ····path:·/boot/grub2/user.cfg |
| 167794 | ··register:·file_exists | 167794 | ··register:·file_exists |
| 167795 | ··when: | 167795 | ··when: |
| 167796 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167797 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167796 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167797 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167798 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167798 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167799 | ··tags: | 167799 | ··tags: |
| 167800 | ··-·CJIS-5.5.2.2 | 167800 | ··-·CJIS-5.5.2.2 |
| 167801 | ··-·NIST-800-171-3.4.5 | 167801 | ··-·NIST-800-171-3.4.5 |
| 167802 | ··-·NIST-800-53-AC-6(1) | 167802 | ··-·NIST-800-53-AC-6(1) |
| 167803 | ··-·NIST-800-53-CM-6(a) | 167803 | ··-·NIST-800-53-CM-6(a) |
| 167804 | ··-·PCI-DSS-Req-7.1 | 167804 | ··-·PCI-DSS-Req-7.1 |
| Offset 167811, 16 lines modified | Offset 167811, 16 lines modified | ||
| 167811 | ··-·no_reboot_needed | 167811 | ··-·no_reboot_needed |
| 167812 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 167812 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 167813 | ··file: | 167813 | ··file: |
| 167814 | ····path:·/boot/grub2/user.cfg | 167814 | ····path:·/boot/grub2/user.cfg |
| 167815 | ····group:·'0' | 167815 | ····group:·'0' |
| 167816 | ··when: | 167816 | ··when: |
| 167817 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167818 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167817 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167818 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167819 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167819 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167820 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 167820 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 167821 | ··tags: | 167821 | ··tags: |
| 167822 | ··-·CJIS-5.5.2.2 | 167822 | ··-·CJIS-5.5.2.2 |
| 167823 | ··-·NIST-800-171-3.4.5 | 167823 | ··-·NIST-800-171-3.4.5 |
| 167824 | ··-·NIST-800-53-AC-6(1) | 167824 | ··-·NIST-800-53-AC-6(1) |
| 167825 | ··-·NIST-800-53-CM-6(a) | 167825 | ··-·NIST-800-53-CM-6(a) |
| Offset 167828, 15 lines modified | Offset 167828, 15 lines modified | ||
| 167828 | ··-·configure_strategy | 167828 | ··-·configure_strategy |
| 167829 | ··-·file_groupowner_efi_user_cfg | 167829 | ··-·file_groupowner_efi_user_cfg |
| 167830 | ··-·low_complexity | 167830 | ··-·low_complexity |
| 167831 | ··-·low_disruption | 167831 | ··-·low_disruption |
| 167832 | ··-·medium_severity | 167832 | ··-·medium_severity |
| 167833 | ··-·no_reboot_needed</xccdf-1.2:fix> | 167833 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 167834 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 167834 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 167835 | if· | 167835 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 167836 | chgrp·0·/boot/grub2/user.cfg | 167836 | chgrp·0·/boot/grub2/user.cfg |
| 167837 | else | 167837 | else |
| 167838 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167838 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167839 | fi</xccdf-1.2:fix> | 167839 | fi</xccdf-1.2:fix> |
| 167840 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 167840 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 167927, 16 lines modified | Offset 167927, 16 lines modified | ||
| 167927 | ··-·no_reboot_needed | 167927 | ··-·no_reboot_needed |
| 167928 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 167928 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 167929 | ··stat: | 167929 | ··stat: |
| 167930 | ····path:·/boot/grub2/user.cfg | 167930 | ····path:·/boot/grub2/user.cfg |
| 167931 | ··register:·file_exists | 167931 | ··register:·file_exists |
| 167932 | ··when: | 167932 | ··when: |
| 167933 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167934 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167933 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167934 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167935 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167935 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167936 | ··tags: | 167936 | ··tags: |
| 167937 | ··-·CJIS-5.5.2.2 | 167937 | ··-·CJIS-5.5.2.2 |
| 167938 | ··-·NIST-800-171-3.4.5 | 167938 | ··-·NIST-800-171-3.4.5 |
| 167939 | ··-·NIST-800-53-AC-6(1) | 167939 | ··-·NIST-800-53-AC-6(1) |
| 167940 | ··-·NIST-800-53-CM-6(a) | 167940 | ··-·NIST-800-53-CM-6(a) |
| 167941 | ··-·PCI-DSS-Req-7.1 | 167941 | ··-·PCI-DSS-Req-7.1 |
| Offset 167948, 16 lines modified | Offset 167948, 16 lines modified | ||
| 167948 | ··-·no_reboot_needed | 167948 | ··-·no_reboot_needed |
| 167949 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 167949 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 167950 | ··file: | 167950 | ··file: |
| 167951 | ····path:·/boot/grub2/user.cfg | 167951 | ····path:·/boot/grub2/user.cfg |
| 167952 | ····owner:·'0' | 167952 | ····owner:·'0' |
| 167953 | ··when: | 167953 | ··when: |
| 167954 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167955 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167954 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167955 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167956 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167956 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167957 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 167957 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 167958 | ··tags: | 167958 | ··tags: |
| 167959 | ··-·CJIS-5.5.2.2 | 167959 | ··-·CJIS-5.5.2.2 |
| 167960 | ··-·NIST-800-171-3.4.5 | 167960 | ··-·NIST-800-171-3.4.5 |
| 167961 | ··-·NIST-800-53-AC-6(1) | 167961 | ··-·NIST-800-53-AC-6(1) |
| 167962 | ··-·NIST-800-53-CM-6(a) | 167962 | ··-·NIST-800-53-CM-6(a) |
| Offset 167965, 15 lines modified | Offset 167965, 15 lines modified | ||
| 167965 | ··-·configure_strategy | 167965 | ··-·configure_strategy |
| 167966 | ··-·file_owner_efi_user_cfg | 167966 | ··-·file_owner_efi_user_cfg |
| 167967 | ··-·low_complexity | 167967 | ··-·low_complexity |
| 167968 | ··-·low_disruption | 167968 | ··-·low_disruption |
| 167969 | ··-·medium_severity | 167969 | ··-·medium_severity |
| 167970 | ··-·no_reboot_needed</xccdf-1.2:fix> | 167970 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 167971 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 167971 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 167972 | if· | 167972 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 167973 | chown·0·/boot/grub2/user.cfg | 167973 | chown·0·/boot/grub2/user.cfg |
| 167974 | else | 167974 | else |
| 167975 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167975 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167976 | fi</xccdf-1.2:fix> | 167976 | fi</xccdf-1.2:fix> |
| 167977 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 167977 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 168057, 16 lines modified | Offset 168057, 16 lines modified | ||
| 168057 | ··-·no_reboot_needed | 168057 | ··-·no_reboot_needed |
| 168058 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 168058 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 168059 | ··stat: | 168059 | ··stat: |
| 168060 | ····path:·/boot/grub2/grub.cfg | 168060 | ····path:·/boot/grub2/grub.cfg |
| 168061 | ··register:·file_exists | 168061 | ··register:·file_exists |
| 168062 | ··when: | 168062 | ··when: |
| 168063 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168064 | ··-·'"grub2-common"·in·ansible_facts.packages' | 168063 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 168064 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168065 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 168065 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 168066 | ··tags: | 168066 | ··tags: |
| 168067 | ··-·NIST-800-171-3.4.5 | 168067 | ··-·NIST-800-171-3.4.5 |
| 168068 | ··-·NIST-800-53-AC-6(1) | 168068 | ··-·NIST-800-53-AC-6(1) |
| 168069 | ··-·NIST-800-53-CM-6(a) | 168069 | ··-·NIST-800-53-CM-6(a) |
| 168070 | ··-·configure_strategy | 168070 | ··-·configure_strategy |
| 168071 | ··-·file_permissions_efi_grub2_cfg | 168071 | ··-·file_permissions_efi_grub2_cfg |
| Offset 168076, 30 lines modified | Offset 168076, 30 lines modified | ||
| 168076 | ··-·no_reboot_needed | 168076 | ··-·no_reboot_needed |
| 168077 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 168077 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 168078 | ··file: | 168078 | ··file: |
| 168079 | ····path:·/boot/grub2/grub.cfg | 168079 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 5141/10644 bytes (48.30%) of diff not shown. | |||
| Offset 167792, 16 lines modified | Offset 167792, 16 lines modified | ||
| 167792 | ··-·no_reboot_needed | 167792 | ··-·no_reboot_needed |
| 167793 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 167793 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 167794 | ··stat: | 167794 | ··stat: |
| 167795 | ····path:·/boot/grub2/user.cfg | 167795 | ····path:·/boot/grub2/user.cfg |
| 167796 | ··register:·file_exists | 167796 | ··register:·file_exists |
| 167797 | ··when: | 167797 | ··when: |
| 167798 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167799 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167798 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167799 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167800 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167800 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167801 | ··tags: | 167801 | ··tags: |
| 167802 | ··-·CJIS-5.5.2.2 | 167802 | ··-·CJIS-5.5.2.2 |
| 167803 | ··-·NIST-800-171-3.4.5 | 167803 | ··-·NIST-800-171-3.4.5 |
| 167804 | ··-·NIST-800-53-AC-6(1) | 167804 | ··-·NIST-800-53-AC-6(1) |
| 167805 | ··-·NIST-800-53-CM-6(a) | 167805 | ··-·NIST-800-53-CM-6(a) |
| 167806 | ··-·PCI-DSS-Req-7.1 | 167806 | ··-·PCI-DSS-Req-7.1 |
| Offset 167813, 16 lines modified | Offset 167813, 16 lines modified | ||
| 167813 | ··-·no_reboot_needed | 167813 | ··-·no_reboot_needed |
| 167814 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 167814 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 167815 | ··file: | 167815 | ··file: |
| 167816 | ····path:·/boot/grub2/user.cfg | 167816 | ····path:·/boot/grub2/user.cfg |
| 167817 | ····group:·'0' | 167817 | ····group:·'0' |
| 167818 | ··when: | 167818 | ··when: |
| 167819 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167820 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167819 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167820 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167821 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167821 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167822 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 167822 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 167823 | ··tags: | 167823 | ··tags: |
| 167824 | ··-·CJIS-5.5.2.2 | 167824 | ··-·CJIS-5.5.2.2 |
| 167825 | ··-·NIST-800-171-3.4.5 | 167825 | ··-·NIST-800-171-3.4.5 |
| 167826 | ··-·NIST-800-53-AC-6(1) | 167826 | ··-·NIST-800-53-AC-6(1) |
| 167827 | ··-·NIST-800-53-CM-6(a) | 167827 | ··-·NIST-800-53-CM-6(a) |
| Offset 167830, 15 lines modified | Offset 167830, 15 lines modified | ||
| 167830 | ··-·configure_strategy | 167830 | ··-·configure_strategy |
| 167831 | ··-·file_groupowner_efi_user_cfg | 167831 | ··-·file_groupowner_efi_user_cfg |
| 167832 | ··-·low_complexity | 167832 | ··-·low_complexity |
| 167833 | ··-·low_disruption | 167833 | ··-·low_disruption |
| 167834 | ··-·medium_severity | 167834 | ··-·medium_severity |
| 167835 | ··-·no_reboot_needed</xccdf-1.2:fix> | 167835 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 167836 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 167836 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 167837 | if· | 167837 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 167838 | chgrp·0·/boot/grub2/user.cfg | 167838 | chgrp·0·/boot/grub2/user.cfg |
| 167839 | else | 167839 | else |
| 167840 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167840 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167841 | fi</xccdf-1.2:fix> | 167841 | fi</xccdf-1.2:fix> |
| 167842 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 167842 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 167929, 16 lines modified | Offset 167929, 16 lines modified | ||
| 167929 | ··-·no_reboot_needed | 167929 | ··-·no_reboot_needed |
| 167930 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 167930 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 167931 | ··stat: | 167931 | ··stat: |
| 167932 | ····path:·/boot/grub2/user.cfg | 167932 | ····path:·/boot/grub2/user.cfg |
| 167933 | ··register:·file_exists | 167933 | ··register:·file_exists |
| 167934 | ··when: | 167934 | ··when: |
| 167935 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167936 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167935 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167936 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167938 | ··tags: | 167938 | ··tags: |
| 167939 | ··-·CJIS-5.5.2.2 | 167939 | ··-·CJIS-5.5.2.2 |
| 167940 | ··-·NIST-800-171-3.4.5 | 167940 | ··-·NIST-800-171-3.4.5 |
| 167941 | ··-·NIST-800-53-AC-6(1) | 167941 | ··-·NIST-800-53-AC-6(1) |
| 167942 | ··-·NIST-800-53-CM-6(a) | 167942 | ··-·NIST-800-53-CM-6(a) |
| 167943 | ··-·PCI-DSS-Req-7.1 | 167943 | ··-·PCI-DSS-Req-7.1 |
| Offset 167950, 16 lines modified | Offset 167950, 16 lines modified | ||
| 167950 | ··-·no_reboot_needed | 167950 | ··-·no_reboot_needed |
| 167951 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 167951 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 167952 | ··file: | 167952 | ··file: |
| 167953 | ····path:·/boot/grub2/user.cfg | 167953 | ····path:·/boot/grub2/user.cfg |
| 167954 | ····owner:·'0' | 167954 | ····owner:·'0' |
| 167955 | ··when: | 167955 | ··when: |
| 167956 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167957 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167956 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167957 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167958 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167958 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167959 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 167959 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 167960 | ··tags: | 167960 | ··tags: |
| 167961 | ··-·CJIS-5.5.2.2 | 167961 | ··-·CJIS-5.5.2.2 |
| 167962 | ··-·NIST-800-171-3.4.5 | 167962 | ··-·NIST-800-171-3.4.5 |
| 167963 | ··-·NIST-800-53-AC-6(1) | 167963 | ··-·NIST-800-53-AC-6(1) |
| 167964 | ··-·NIST-800-53-CM-6(a) | 167964 | ··-·NIST-800-53-CM-6(a) |
| Offset 167967, 15 lines modified | Offset 167967, 15 lines modified | ||
| 167967 | ··-·configure_strategy | 167967 | ··-·configure_strategy |
| 167968 | ··-·file_owner_efi_user_cfg | 167968 | ··-·file_owner_efi_user_cfg |
| 167969 | ··-·low_complexity | 167969 | ··-·low_complexity |
| 167970 | ··-·low_disruption | 167970 | ··-·low_disruption |
| 167971 | ··-·medium_severity | 167971 | ··-·medium_severity |
| 167972 | ··-·no_reboot_needed</xccdf-1.2:fix> | 167972 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 167973 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 167973 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 167974 | if· | 167974 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 167975 | chown·0·/boot/grub2/user.cfg | 167975 | chown·0·/boot/grub2/user.cfg |
| 167976 | else | 167976 | else |
| 167977 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167977 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167978 | fi</xccdf-1.2:fix> | 167978 | fi</xccdf-1.2:fix> |
| 167979 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 167979 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 168059, 16 lines modified | Offset 168059, 16 lines modified | ||
| 168059 | ··-·no_reboot_needed | 168059 | ··-·no_reboot_needed |
| 168060 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 168060 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 168061 | ··stat: | 168061 | ··stat: |
| 168062 | ····path:·/boot/grub2/grub.cfg | 168062 | ····path:·/boot/grub2/grub.cfg |
| 168063 | ··register:·file_exists | 168063 | ··register:·file_exists |
| 168064 | ··when: | 168064 | ··when: |
| 168065 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168066 | ··-·'"grub2-common"·in·ansible_facts.packages' | 168065 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 168066 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 168067 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 168067 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 168068 | ··tags: | 168068 | ··tags: |
| 168069 | ··-·NIST-800-171-3.4.5 | 168069 | ··-·NIST-800-171-3.4.5 |
| 168070 | ··-·NIST-800-53-AC-6(1) | 168070 | ··-·NIST-800-53-AC-6(1) |
| 168071 | ··-·NIST-800-53-CM-6(a) | 168071 | ··-·NIST-800-53-CM-6(a) |
| 168072 | ··-·configure_strategy | 168072 | ··-·configure_strategy |
| 168073 | ··-·file_permissions_efi_grub2_cfg | 168073 | ··-·file_permissions_efi_grub2_cfg |
| Offset 168078, 30 lines modified | Offset 168078, 30 lines modified | ||
| 168078 | ··-·no_reboot_needed | 168078 | ··-·no_reboot_needed |
| 168079 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 168079 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 168080 | ··file: | 168080 | ··file: |
| 168081 | ····path:·/boot/grub2/grub.cfg | 168081 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 5141/10644 bytes (48.30%) of diff not shown. | |||
| Offset 167626, 16 lines modified | Offset 167626, 16 lines modified | ||
| 167626 | ··-·no_reboot_needed | 167626 | ··-·no_reboot_needed |
| 167627 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 167627 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 167628 | ··stat: | 167628 | ··stat: |
| 167629 | ····path:·/boot/grub2/user.cfg | 167629 | ····path:·/boot/grub2/user.cfg |
| 167630 | ··register:·file_exists | 167630 | ··register:·file_exists |
| 167631 | ··when: | 167631 | ··when: |
| 167632 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167633 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167632 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167633 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167634 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167634 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167635 | ··tags: | 167635 | ··tags: |
| 167636 | ··-·CJIS-5.5.2.2 | 167636 | ··-·CJIS-5.5.2.2 |
| 167637 | ··-·NIST-800-171-3.4.5 | 167637 | ··-·NIST-800-171-3.4.5 |
| 167638 | ··-·NIST-800-53-AC-6(1) | 167638 | ··-·NIST-800-53-AC-6(1) |
| 167639 | ··-·NIST-800-53-CM-6(a) | 167639 | ··-·NIST-800-53-CM-6(a) |
| 167640 | ··-·PCI-DSS-Req-7.1 | 167640 | ··-·PCI-DSS-Req-7.1 |
| Offset 167647, 16 lines modified | Offset 167647, 16 lines modified | ||
| 167647 | ··-·no_reboot_needed | 167647 | ··-·no_reboot_needed |
| 167648 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 167648 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 167649 | ··file: | 167649 | ··file: |
| 167650 | ····path:·/boot/grub2/user.cfg | 167650 | ····path:·/boot/grub2/user.cfg |
| 167651 | ····group:·'0' | 167651 | ····group:·'0' |
| 167652 | ··when: | 167652 | ··when: |
| 167653 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167654 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167653 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167654 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167655 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167655 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167656 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 167656 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 167657 | ··tags: | 167657 | ··tags: |
| 167658 | ··-·CJIS-5.5.2.2 | 167658 | ··-·CJIS-5.5.2.2 |
| 167659 | ··-·NIST-800-171-3.4.5 | 167659 | ··-·NIST-800-171-3.4.5 |
| 167660 | ··-·NIST-800-53-AC-6(1) | 167660 | ··-·NIST-800-53-AC-6(1) |
| 167661 | ··-·NIST-800-53-CM-6(a) | 167661 | ··-·NIST-800-53-CM-6(a) |
| Offset 167664, 15 lines modified | Offset 167664, 15 lines modified | ||
| 167664 | ··-·configure_strategy | 167664 | ··-·configure_strategy |
| 167665 | ··-·file_groupowner_efi_user_cfg | 167665 | ··-·file_groupowner_efi_user_cfg |
| 167666 | ··-·low_complexity | 167666 | ··-·low_complexity |
| 167667 | ··-·low_disruption | 167667 | ··-·low_disruption |
| 167668 | ··-·medium_severity | 167668 | ··-·medium_severity |
| 167669 | ··-·no_reboot_needed</xccdf-1.2:fix> | 167669 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 167670 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 167670 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 167671 | if· | 167671 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 167672 | chgrp·0·/boot/grub2/user.cfg | 167672 | chgrp·0·/boot/grub2/user.cfg |
| 167673 | else | 167673 | else |
| 167674 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167674 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167675 | fi</xccdf-1.2:fix> | 167675 | fi</xccdf-1.2:fix> |
| 167676 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 167676 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 167763, 16 lines modified | Offset 167763, 16 lines modified | ||
| 167763 | ··-·no_reboot_needed | 167763 | ··-·no_reboot_needed |
| 167764 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 167764 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 167765 | ··stat: | 167765 | ··stat: |
| 167766 | ····path:·/boot/grub2/user.cfg | 167766 | ····path:·/boot/grub2/user.cfg |
| 167767 | ··register:·file_exists | 167767 | ··register:·file_exists |
| 167768 | ··when: | 167768 | ··when: |
| 167769 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167770 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167769 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167770 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167771 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167771 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167772 | ··tags: | 167772 | ··tags: |
| 167773 | ··-·CJIS-5.5.2.2 | 167773 | ··-·CJIS-5.5.2.2 |
| 167774 | ··-·NIST-800-171-3.4.5 | 167774 | ··-·NIST-800-171-3.4.5 |
| 167775 | ··-·NIST-800-53-AC-6(1) | 167775 | ··-·NIST-800-53-AC-6(1) |
| 167776 | ··-·NIST-800-53-CM-6(a) | 167776 | ··-·NIST-800-53-CM-6(a) |
| 167777 | ··-·PCI-DSS-Req-7.1 | 167777 | ··-·PCI-DSS-Req-7.1 |
| Offset 167784, 16 lines modified | Offset 167784, 16 lines modified | ||
| 167784 | ··-·no_reboot_needed | 167784 | ··-·no_reboot_needed |
| 167785 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 167785 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 167786 | ··file: | 167786 | ··file: |
| 167787 | ····path:·/boot/grub2/user.cfg | 167787 | ····path:·/boot/grub2/user.cfg |
| 167788 | ····owner:·'0' | 167788 | ····owner:·'0' |
| 167789 | ··when: | 167789 | ··when: |
| 167790 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167791 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167790 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167791 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167792 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167792 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167793 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 167793 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 167794 | ··tags: | 167794 | ··tags: |
| 167795 | ··-·CJIS-5.5.2.2 | 167795 | ··-·CJIS-5.5.2.2 |
| 167796 | ··-·NIST-800-171-3.4.5 | 167796 | ··-·NIST-800-171-3.4.5 |
| 167797 | ··-·NIST-800-53-AC-6(1) | 167797 | ··-·NIST-800-53-AC-6(1) |
| 167798 | ··-·NIST-800-53-CM-6(a) | 167798 | ··-·NIST-800-53-CM-6(a) |
| Offset 167801, 15 lines modified | Offset 167801, 15 lines modified | ||
| 167801 | ··-·configure_strategy | 167801 | ··-·configure_strategy |
| 167802 | ··-·file_owner_efi_user_cfg | 167802 | ··-·file_owner_efi_user_cfg |
| 167803 | ··-·low_complexity | 167803 | ··-·low_complexity |
| 167804 | ··-·low_disruption | 167804 | ··-·low_disruption |
| 167805 | ··-·medium_severity | 167805 | ··-·medium_severity |
| 167806 | ··-·no_reboot_needed</xccdf-1.2:fix> | 167806 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 167807 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 167807 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 167808 | if· | 167808 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 167809 | chown·0·/boot/grub2/user.cfg | 167809 | chown·0·/boot/grub2/user.cfg |
| 167810 | else | 167810 | else |
| 167811 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167811 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167812 | fi</xccdf-1.2:fix> | 167812 | fi</xccdf-1.2:fix> |
| 167813 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 167813 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 167893, 16 lines modified | Offset 167893, 16 lines modified | ||
| 167893 | ··-·no_reboot_needed | 167893 | ··-·no_reboot_needed |
| 167894 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 167894 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 167895 | ··stat: | 167895 | ··stat: |
| 167896 | ····path:·/boot/grub2/grub.cfg | 167896 | ····path:·/boot/grub2/grub.cfg |
| 167897 | ··register:·file_exists | 167897 | ··register:·file_exists |
| 167898 | ··when: | 167898 | ··when: |
| 167899 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167900 | ··-·'"grub2-common"·in·ansible_facts.packages' | 167899 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 167900 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 167901 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 167901 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 167902 | ··tags: | 167902 | ··tags: |
| 167903 | ··-·NIST-800-171-3.4.5 | 167903 | ··-·NIST-800-171-3.4.5 |
| 167904 | ··-·NIST-800-53-AC-6(1) | 167904 | ··-·NIST-800-53-AC-6(1) |
| 167905 | ··-·NIST-800-53-CM-6(a) | 167905 | ··-·NIST-800-53-CM-6(a) |
| 167906 | ··-·configure_strategy | 167906 | ··-·configure_strategy |
| 167907 | ··-·file_permissions_efi_grub2_cfg | 167907 | ··-·file_permissions_efi_grub2_cfg |
| Offset 167912, 30 lines modified | Offset 167912, 30 lines modified | ||
| 167912 | ··-·no_reboot_needed | 167912 | ··-·no_reboot_needed |
| 167913 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 167913 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 167914 | ··file: | 167914 | ··file: |
| 167915 | ····path:·/boot/grub2/grub.cfg | 167915 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 5121/10608 bytes (48.27%) of diff not shown. | |||
| Offset 39087, 16 lines modified | Offset 39087, 16 lines modified | ||
| 39087 | ··-·reboot_required | 39087 | ··-·reboot_required |
| 39088 | ··-·restrict_strategy | 39088 | ··-·restrict_strategy |
| 39089 | -·name:·Set·architecture·for·audit·open·tasks | 39089 | -·name:·Set·architecture·for·audit·open·tasks |
| 39090 | ··set_fact: | 39090 | ··set_fact: |
| 39091 | ····audit_arch:·b64 | 39091 | ····audit_arch:·b64 |
| 39092 | ··when: | 39092 | ··when: |
| 39093 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39094 | ··-·'"audit"·in·ansible_facts.packages' | 39093 | ··-·'"audit"·in·ansible_facts.packages' |
| 39094 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39095 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 39095 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 39096 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 39096 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 39097 | ··tags: | 39097 | ··tags: |
| 39098 | ··-·NIST-800-53-AC-2(4) | 39098 | ··-·NIST-800-53-AC-2(4) |
| 39099 | ··-·NIST-800-53-AC-6(9) | 39099 | ··-·NIST-800-53-AC-6(9) |
| 39100 | ··-·NIST-800-53-AU-12(c) | 39100 | ··-·NIST-800-53-AU-12(c) |
| 39101 | ··-·NIST-800-53-AU-2(d) | 39101 | ··-·NIST-800-53-AU-2(d) |
| Offset 39225, 16 lines modified | Offset 39225, 16 lines modified | ||
| 39225 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 39225 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 39226 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39226 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39227 | ······create:·true | 39227 | ······create:·true |
| 39228 | ······mode:·o-rwx | 39228 | ······mode:·o-rwx |
| 39229 | ······state:·present | 39229 | ······state:·present |
| 39230 | ····when:·syscalls_found·|·length·==·0 | 39230 | ····when:·syscalls_found·|·length·==·0 |
| 39231 | ··when: | 39231 | ··when: |
| 39232 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39233 | ··-·'"audit"·in·ansible_facts.packages' | 39232 | ··-·'"audit"·in·ansible_facts.packages' |
| 39233 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39234 | ··tags: | 39234 | ··tags: |
| 39235 | ··-·NIST-800-53-AC-2(4) | 39235 | ··-·NIST-800-53-AC-2(4) |
| 39236 | ··-·NIST-800-53-AC-6(9) | 39236 | ··-·NIST-800-53-AC-6(9) |
| 39237 | ··-·NIST-800-53-AU-12(c) | 39237 | ··-·NIST-800-53-AU-12(c) |
| 39238 | ··-·NIST-800-53-AU-2(d) | 39238 | ··-·NIST-800-53-AU-2(d) |
| 39239 | ··-·NIST-800-53-CM-6(a) | 39239 | ··-·NIST-800-53-CM-6(a) |
| 39240 | ··-·audit_rules_etc_group_open | 39240 | ··-·audit_rules_etc_group_open |
| Offset 39361, 31 lines modified | Offset 39361, 31 lines modified | ||
| 39361 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 39361 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 39362 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39362 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39363 | ······create:·true | 39363 | ······create:·true |
| 39364 | ······mode:·o-rwx | 39364 | ······mode:·o-rwx |
| 39365 | ······state:·present | 39365 | ······state:·present |
| 39366 | ····when:·syscalls_found·|·length·==·0 | 39366 | ····when:·syscalls_found·|·length·==·0 |
| 39367 | ··when: | 39367 | ··when: |
| 39368 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39369 | ··-·'"audit"·in·ansible_facts.packages' | 39368 | ··-·'"audit"·in·ansible_facts.packages' |
| 39369 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39370 | ··-·audit_arch·==·"b64" | 39370 | ··-·audit_arch·==·"b64" |
| 39371 | ··tags: | 39371 | ··tags: |
| 39372 | ··-·NIST-800-53-AC-2(4) | 39372 | ··-·NIST-800-53-AC-2(4) |
| 39373 | ··-·NIST-800-53-AC-6(9) | 39373 | ··-·NIST-800-53-AC-6(9) |
| 39374 | ··-·NIST-800-53-AU-12(c) | 39374 | ··-·NIST-800-53-AU-12(c) |
| 39375 | ··-·NIST-800-53-AU-2(d) | 39375 | ··-·NIST-800-53-AU-2(d) |
| 39376 | ··-·NIST-800-53-CM-6(a) | 39376 | ··-·NIST-800-53-CM-6(a) |
| 39377 | ··-·audit_rules_etc_group_open | 39377 | ··-·audit_rules_etc_group_open |
| 39378 | ··-·low_complexity | 39378 | ··-·low_complexity |
| 39379 | ··-·low_disruption | 39379 | ··-·low_disruption |
| 39380 | ··-·medium_severity | 39380 | ··-·medium_severity |
| 39381 | ··-·reboot_required | 39381 | ··-·reboot_required |
| 39382 | ··-·restrict_strategy</xccdf-1.2:fix> | 39382 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 39383 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 39383 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 39384 | if· | 39384 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 39385 | #·First·perform·the·remediation·of·the·syscall·rule | 39385 | #·First·perform·the·remediation·of·the·syscall·rule |
| 39386 | #·Retrieve·hardware·architecture·of·the·underlying·system | 39386 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 39387 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 39387 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 39388 | for·ARCH·in·"${RULE_ARCHS[@]}" | 39388 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 39389 | do | 39389 | do |
| Offset 39781, 16 lines modified | Offset 39781, 16 lines modified | ||
| 39781 | ··-·reboot_required | 39781 | ··-·reboot_required |
| 39782 | ··-·restrict_strategy | 39782 | ··-·restrict_strategy |
| 39783 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 39783 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 39784 | ··set_fact: | 39784 | ··set_fact: |
| 39785 | ····audit_arch:·b64 | 39785 | ····audit_arch:·b64 |
| 39786 | ··when: | 39786 | ··when: |
| 39787 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39788 | ··-·'"audit"·in·ansible_facts.packages' | 39787 | ··-·'"audit"·in·ansible_facts.packages' |
| 39788 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39789 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 39789 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 39790 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 39790 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 39791 | ··tags: | 39791 | ··tags: |
| 39792 | ··-·NIST-800-53-AC-2(4) | 39792 | ··-·NIST-800-53-AC-2(4) |
| 39793 | ··-·NIST-800-53-AC-6(9) | 39793 | ··-·NIST-800-53-AC-6(9) |
| 39794 | ··-·NIST-800-53-AU-12(c) | 39794 | ··-·NIST-800-53-AU-12(c) |
| 39795 | ··-·NIST-800-53-AU-2(d) | 39795 | ··-·NIST-800-53-AU-2(d) |
| Offset 39919, 16 lines modified | Offset 39919, 16 lines modified | ||
| 39919 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 39919 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 39920 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39920 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39921 | ······create:·true | 39921 | ······create:·true |
| 39922 | ······mode:·o-rwx | 39922 | ······mode:·o-rwx |
| 39923 | ······state:·present | 39923 | ······state:·present |
| 39924 | ····when:·syscalls_found·|·length·==·0 | 39924 | ····when:·syscalls_found·|·length·==·0 |
| 39925 | ··when: | 39925 | ··when: |
| 39926 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39927 | ··-·'"audit"·in·ansible_facts.packages' | 39926 | ··-·'"audit"·in·ansible_facts.packages' |
| 39927 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39928 | ··tags: | 39928 | ··tags: |
| 39929 | ··-·NIST-800-53-AC-2(4) | 39929 | ··-·NIST-800-53-AC-2(4) |
| 39930 | ··-·NIST-800-53-AC-6(9) | 39930 | ··-·NIST-800-53-AC-6(9) |
| 39931 | ··-·NIST-800-53-AU-12(c) | 39931 | ··-·NIST-800-53-AU-12(c) |
| 39932 | ··-·NIST-800-53-AU-2(d) | 39932 | ··-·NIST-800-53-AU-2(d) |
| 39933 | ··-·NIST-800-53-CM-6(a) | 39933 | ··-·NIST-800-53-CM-6(a) |
| 39934 | ··-·audit_rules_etc_group_open_by_handle_at | 39934 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 40055, 31 lines modified | Offset 40055, 31 lines modified | ||
| 40055 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 40055 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 40056 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 40056 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 40057 | ······create:·true | 40057 | ······create:·true |
| 40058 | ······mode:·o-rwx | 40058 | ······mode:·o-rwx |
| 40059 | ······state:·present | 40059 | ······state:·present |
| 40060 | ····when:·syscalls_found·|·length·==·0 | 40060 | ····when:·syscalls_found·|·length·==·0 |
| 40061 | ··when: | 40061 | ··when: |
| 40062 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 40063 | ··-·'"audit"·in·ansible_facts.packages' | 40062 | ··-·'"audit"·in·ansible_facts.packages' |
| 40063 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 40064 | ··-·audit_arch·==·"b64" | 40064 | ··-·audit_arch·==·"b64" |
| 40065 | ··tags: | 40065 | ··tags: |
| 40066 | ··-·NIST-800-53-AC-2(4) | 40066 | ··-·NIST-800-53-AC-2(4) |
| 40067 | ··-·NIST-800-53-AC-6(9) | 40067 | ··-·NIST-800-53-AC-6(9) |
| 40068 | ··-·NIST-800-53-AU-12(c) | 40068 | ··-·NIST-800-53-AU-12(c) |
| 40069 | ··-·NIST-800-53-AU-2(d) | 40069 | ··-·NIST-800-53-AU-2(d) |
| 40070 | ··-·NIST-800-53-CM-6(a) | 40070 | ··-·NIST-800-53-CM-6(a) |
| 40071 | ··-·audit_rules_etc_group_open_by_handle_at | 40071 | ··-·audit_rules_etc_group_open_by_handle_at |
| 40072 | ··-·low_complexity | 40072 | ··-·low_complexity |
| 40073 | ··-·low_disruption | 40073 | ··-·low_disruption |
| 40074 | ··-·medium_severity | 40074 | ··-·medium_severity |
| 40075 | ··-·reboot_required | 40075 | ··-·reboot_required |
| Max diff block lines reached; 459837/465701 bytes (98.74%) of diff not shown. | |||
| Offset 39087, 16 lines modified | Offset 39087, 16 lines modified | ||
| 39087 | ··-·reboot_required | 39087 | ··-·reboot_required |
| 39088 | ··-·restrict_strategy | 39088 | ··-·restrict_strategy |
| 39089 | -·name:·Set·architecture·for·audit·open·tasks | 39089 | -·name:·Set·architecture·for·audit·open·tasks |
| 39090 | ··set_fact: | 39090 | ··set_fact: |
| 39091 | ····audit_arch:·b64 | 39091 | ····audit_arch:·b64 |
| 39092 | ··when: | 39092 | ··when: |
| 39093 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39094 | ··-·'"audit"·in·ansible_facts.packages' | 39093 | ··-·'"audit"·in·ansible_facts.packages' |
| 39094 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39095 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 39095 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 39096 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 39096 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 39097 | ··tags: | 39097 | ··tags: |
| 39098 | ··-·NIST-800-53-AC-2(4) | 39098 | ··-·NIST-800-53-AC-2(4) |
| 39099 | ··-·NIST-800-53-AC-6(9) | 39099 | ··-·NIST-800-53-AC-6(9) |
| 39100 | ··-·NIST-800-53-AU-12(c) | 39100 | ··-·NIST-800-53-AU-12(c) |
| 39101 | ··-·NIST-800-53-AU-2(d) | 39101 | ··-·NIST-800-53-AU-2(d) |
| Offset 39225, 16 lines modified | Offset 39225, 16 lines modified | ||
| 39225 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 39225 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 39226 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39226 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39227 | ······create:·true | 39227 | ······create:·true |
| 39228 | ······mode:·o-rwx | 39228 | ······mode:·o-rwx |
| 39229 | ······state:·present | 39229 | ······state:·present |
| 39230 | ····when:·syscalls_found·|·length·==·0 | 39230 | ····when:·syscalls_found·|·length·==·0 |
| 39231 | ··when: | 39231 | ··when: |
| 39232 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39233 | ··-·'"audit"·in·ansible_facts.packages' | 39232 | ··-·'"audit"·in·ansible_facts.packages' |
| 39233 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39234 | ··tags: | 39234 | ··tags: |
| 39235 | ··-·NIST-800-53-AC-2(4) | 39235 | ··-·NIST-800-53-AC-2(4) |
| 39236 | ··-·NIST-800-53-AC-6(9) | 39236 | ··-·NIST-800-53-AC-6(9) |
| 39237 | ··-·NIST-800-53-AU-12(c) | 39237 | ··-·NIST-800-53-AU-12(c) |
| 39238 | ··-·NIST-800-53-AU-2(d) | 39238 | ··-·NIST-800-53-AU-2(d) |
| 39239 | ··-·NIST-800-53-CM-6(a) | 39239 | ··-·NIST-800-53-CM-6(a) |
| 39240 | ··-·audit_rules_etc_group_open | 39240 | ··-·audit_rules_etc_group_open |
| Offset 39361, 31 lines modified | Offset 39361, 31 lines modified | ||
| 39361 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 39361 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 39362 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39362 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39363 | ······create:·true | 39363 | ······create:·true |
| 39364 | ······mode:·o-rwx | 39364 | ······mode:·o-rwx |
| 39365 | ······state:·present | 39365 | ······state:·present |
| 39366 | ····when:·syscalls_found·|·length·==·0 | 39366 | ····when:·syscalls_found·|·length·==·0 |
| 39367 | ··when: | 39367 | ··when: |
| 39368 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39369 | ··-·'"audit"·in·ansible_facts.packages' | 39368 | ··-·'"audit"·in·ansible_facts.packages' |
| 39369 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39370 | ··-·audit_arch·==·"b64" | 39370 | ··-·audit_arch·==·"b64" |
| 39371 | ··tags: | 39371 | ··tags: |
| 39372 | ··-·NIST-800-53-AC-2(4) | 39372 | ··-·NIST-800-53-AC-2(4) |
| 39373 | ··-·NIST-800-53-AC-6(9) | 39373 | ··-·NIST-800-53-AC-6(9) |
| 39374 | ··-·NIST-800-53-AU-12(c) | 39374 | ··-·NIST-800-53-AU-12(c) |
| 39375 | ··-·NIST-800-53-AU-2(d) | 39375 | ··-·NIST-800-53-AU-2(d) |
| 39376 | ··-·NIST-800-53-CM-6(a) | 39376 | ··-·NIST-800-53-CM-6(a) |
| 39377 | ··-·audit_rules_etc_group_open | 39377 | ··-·audit_rules_etc_group_open |
| 39378 | ··-·low_complexity | 39378 | ··-·low_complexity |
| 39379 | ··-·low_disruption | 39379 | ··-·low_disruption |
| 39380 | ··-·medium_severity | 39380 | ··-·medium_severity |
| 39381 | ··-·reboot_required | 39381 | ··-·reboot_required |
| 39382 | ··-·restrict_strategy</xccdf-1.2:fix> | 39382 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 39383 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 39383 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 39384 | if· | 39384 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 39385 | #·First·perform·the·remediation·of·the·syscall·rule | 39385 | #·First·perform·the·remediation·of·the·syscall·rule |
| 39386 | #·Retrieve·hardware·architecture·of·the·underlying·system | 39386 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 39387 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 39387 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 39388 | for·ARCH·in·"${RULE_ARCHS[@]}" | 39388 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 39389 | do | 39389 | do |
| Offset 39781, 16 lines modified | Offset 39781, 16 lines modified | ||
| 39781 | ··-·reboot_required | 39781 | ··-·reboot_required |
| 39782 | ··-·restrict_strategy | 39782 | ··-·restrict_strategy |
| 39783 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 39783 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 39784 | ··set_fact: | 39784 | ··set_fact: |
| 39785 | ····audit_arch:·b64 | 39785 | ····audit_arch:·b64 |
| 39786 | ··when: | 39786 | ··when: |
| 39787 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39788 | ··-·'"audit"·in·ansible_facts.packages' | 39787 | ··-·'"audit"·in·ansible_facts.packages' |
| 39788 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39789 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 39789 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 39790 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 39790 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 39791 | ··tags: | 39791 | ··tags: |
| 39792 | ··-·NIST-800-53-AC-2(4) | 39792 | ··-·NIST-800-53-AC-2(4) |
| 39793 | ··-·NIST-800-53-AC-6(9) | 39793 | ··-·NIST-800-53-AC-6(9) |
| 39794 | ··-·NIST-800-53-AU-12(c) | 39794 | ··-·NIST-800-53-AU-12(c) |
| 39795 | ··-·NIST-800-53-AU-2(d) | 39795 | ··-·NIST-800-53-AU-2(d) |
| Offset 39919, 16 lines modified | Offset 39919, 16 lines modified | ||
| 39919 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 39919 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 39920 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39920 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39921 | ······create:·true | 39921 | ······create:·true |
| 39922 | ······mode:·o-rwx | 39922 | ······mode:·o-rwx |
| 39923 | ······state:·present | 39923 | ······state:·present |
| 39924 | ····when:·syscalls_found·|·length·==·0 | 39924 | ····when:·syscalls_found·|·length·==·0 |
| 39925 | ··when: | 39925 | ··when: |
| 39926 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39927 | ··-·'"audit"·in·ansible_facts.packages' | 39926 | ··-·'"audit"·in·ansible_facts.packages' |
| 39927 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39928 | ··tags: | 39928 | ··tags: |
| 39929 | ··-·NIST-800-53-AC-2(4) | 39929 | ··-·NIST-800-53-AC-2(4) |
| 39930 | ··-·NIST-800-53-AC-6(9) | 39930 | ··-·NIST-800-53-AC-6(9) |
| 39931 | ··-·NIST-800-53-AU-12(c) | 39931 | ··-·NIST-800-53-AU-12(c) |
| 39932 | ··-·NIST-800-53-AU-2(d) | 39932 | ··-·NIST-800-53-AU-2(d) |
| 39933 | ··-·NIST-800-53-CM-6(a) | 39933 | ··-·NIST-800-53-CM-6(a) |
| 39934 | ··-·audit_rules_etc_group_open_by_handle_at | 39934 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 40055, 31 lines modified | Offset 40055, 31 lines modified | ||
| 40055 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 40055 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 40056 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 40056 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 40057 | ······create:·true | 40057 | ······create:·true |
| 40058 | ······mode:·o-rwx | 40058 | ······mode:·o-rwx |
| 40059 | ······state:·present | 40059 | ······state:·present |
| 40060 | ····when:·syscalls_found·|·length·==·0 | 40060 | ····when:·syscalls_found·|·length·==·0 |
| 40061 | ··when: | 40061 | ··when: |
| 40062 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 40063 | ··-·'"audit"·in·ansible_facts.packages' | 40062 | ··-·'"audit"·in·ansible_facts.packages' |
| 40063 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 40064 | ··-·audit_arch·==·"b64" | 40064 | ··-·audit_arch·==·"b64" |
| 40065 | ··tags: | 40065 | ··tags: |
| 40066 | ··-·NIST-800-53-AC-2(4) | 40066 | ··-·NIST-800-53-AC-2(4) |
| 40067 | ··-·NIST-800-53-AC-6(9) | 40067 | ··-·NIST-800-53-AC-6(9) |
| 40068 | ··-·NIST-800-53-AU-12(c) | 40068 | ··-·NIST-800-53-AU-12(c) |
| 40069 | ··-·NIST-800-53-AU-2(d) | 40069 | ··-·NIST-800-53-AU-2(d) |
| 40070 | ··-·NIST-800-53-CM-6(a) | 40070 | ··-·NIST-800-53-CM-6(a) |
| 40071 | ··-·audit_rules_etc_group_open_by_handle_at | 40071 | ··-·audit_rules_etc_group_open_by_handle_at |
| 40072 | ··-·low_complexity | 40072 | ··-·low_complexity |
| 40073 | ··-·low_disruption | 40073 | ··-·low_disruption |
| 40074 | ··-·medium_severity | 40074 | ··-·medium_severity |
| 40075 | ··-·reboot_required | 40075 | ··-·reboot_required |
| Max diff block lines reached; 459837/465701 bytes (98.74%) of diff not shown. | |||
| Offset 38939, 16 lines modified | Offset 38939, 16 lines modified | ||
| 38939 | ··-·reboot_required | 38939 | ··-·reboot_required |
| 38940 | ··-·restrict_strategy | 38940 | ··-·restrict_strategy |
| 38941 | -·name:·Set·architecture·for·audit·open·tasks | 38941 | -·name:·Set·architecture·for·audit·open·tasks |
| 38942 | ··set_fact: | 38942 | ··set_fact: |
| 38943 | ····audit_arch:·b64 | 38943 | ····audit_arch:·b64 |
| 38944 | ··when: | 38944 | ··when: |
| 38945 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 38946 | ··-·'"audit"·in·ansible_facts.packages' | 38945 | ··-·'"audit"·in·ansible_facts.packages' |
| 38946 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 38947 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 38947 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 38948 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 38948 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 38949 | ··tags: | 38949 | ··tags: |
| 38950 | ··-·NIST-800-53-AC-2(4) | 38950 | ··-·NIST-800-53-AC-2(4) |
| 38951 | ··-·NIST-800-53-AC-6(9) | 38951 | ··-·NIST-800-53-AC-6(9) |
| 38952 | ··-·NIST-800-53-AU-12(c) | 38952 | ··-·NIST-800-53-AU-12(c) |
| 38953 | ··-·NIST-800-53-AU-2(d) | 38953 | ··-·NIST-800-53-AU-2(d) |
| Offset 39077, 16 lines modified | Offset 39077, 16 lines modified | ||
| 39077 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 39077 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 39078 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39078 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39079 | ······create:·true | 39079 | ······create:·true |
| 39080 | ······mode:·o-rwx | 39080 | ······mode:·o-rwx |
| 39081 | ······state:·present | 39081 | ······state:·present |
| 39082 | ····when:·syscalls_found·|·length·==·0 | 39082 | ····when:·syscalls_found·|·length·==·0 |
| 39083 | ··when: | 39083 | ··when: |
| 39084 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39085 | ··-·'"audit"·in·ansible_facts.packages' | 39084 | ··-·'"audit"·in·ansible_facts.packages' |
| 39085 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39086 | ··tags: | 39086 | ··tags: |
| 39087 | ··-·NIST-800-53-AC-2(4) | 39087 | ··-·NIST-800-53-AC-2(4) |
| 39088 | ··-·NIST-800-53-AC-6(9) | 39088 | ··-·NIST-800-53-AC-6(9) |
| 39089 | ··-·NIST-800-53-AU-12(c) | 39089 | ··-·NIST-800-53-AU-12(c) |
| 39090 | ··-·NIST-800-53-AU-2(d) | 39090 | ··-·NIST-800-53-AU-2(d) |
| 39091 | ··-·NIST-800-53-CM-6(a) | 39091 | ··-·NIST-800-53-CM-6(a) |
| 39092 | ··-·audit_rules_etc_group_open | 39092 | ··-·audit_rules_etc_group_open |
| Offset 39213, 31 lines modified | Offset 39213, 31 lines modified | ||
| 39213 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 39213 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 39214 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39214 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39215 | ······create:·true | 39215 | ······create:·true |
| 39216 | ······mode:·o-rwx | 39216 | ······mode:·o-rwx |
| 39217 | ······state:·present | 39217 | ······state:·present |
| 39218 | ····when:·syscalls_found·|·length·==·0 | 39218 | ····when:·syscalls_found·|·length·==·0 |
| 39219 | ··when: | 39219 | ··when: |
| 39220 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39221 | ··-·'"audit"·in·ansible_facts.packages' | 39220 | ··-·'"audit"·in·ansible_facts.packages' |
| 39221 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39222 | ··-·audit_arch·==·"b64" | 39222 | ··-·audit_arch·==·"b64" |
| 39223 | ··tags: | 39223 | ··tags: |
| 39224 | ··-·NIST-800-53-AC-2(4) | 39224 | ··-·NIST-800-53-AC-2(4) |
| 39225 | ··-·NIST-800-53-AC-6(9) | 39225 | ··-·NIST-800-53-AC-6(9) |
| 39226 | ··-·NIST-800-53-AU-12(c) | 39226 | ··-·NIST-800-53-AU-12(c) |
| 39227 | ··-·NIST-800-53-AU-2(d) | 39227 | ··-·NIST-800-53-AU-2(d) |
| 39228 | ··-·NIST-800-53-CM-6(a) | 39228 | ··-·NIST-800-53-CM-6(a) |
| 39229 | ··-·audit_rules_etc_group_open | 39229 | ··-·audit_rules_etc_group_open |
| 39230 | ··-·low_complexity | 39230 | ··-·low_complexity |
| 39231 | ··-·low_disruption | 39231 | ··-·low_disruption |
| 39232 | ··-·medium_severity | 39232 | ··-·medium_severity |
| 39233 | ··-·reboot_required | 39233 | ··-·reboot_required |
| 39234 | ··-·restrict_strategy</xccdf-1.2:fix> | 39234 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 39235 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 39235 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 39236 | if· | 39236 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 39237 | #·First·perform·the·remediation·of·the·syscall·rule | 39237 | #·First·perform·the·remediation·of·the·syscall·rule |
| 39238 | #·Retrieve·hardware·architecture·of·the·underlying·system | 39238 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 39239 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 39239 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 39240 | for·ARCH·in·"${RULE_ARCHS[@]}" | 39240 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 39241 | do | 39241 | do |
| Offset 39633, 16 lines modified | Offset 39633, 16 lines modified | ||
| 39633 | ··-·reboot_required | 39633 | ··-·reboot_required |
| 39634 | ··-·restrict_strategy | 39634 | ··-·restrict_strategy |
| 39635 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 39635 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 39636 | ··set_fact: | 39636 | ··set_fact: |
| 39637 | ····audit_arch:·b64 | 39637 | ····audit_arch:·b64 |
| 39638 | ··when: | 39638 | ··when: |
| 39639 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39640 | ··-·'"audit"·in·ansible_facts.packages' | 39639 | ··-·'"audit"·in·ansible_facts.packages' |
| 39640 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39641 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 39641 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 39642 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 39642 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 39643 | ··tags: | 39643 | ··tags: |
| 39644 | ··-·NIST-800-53-AC-2(4) | 39644 | ··-·NIST-800-53-AC-2(4) |
| 39645 | ··-·NIST-800-53-AC-6(9) | 39645 | ··-·NIST-800-53-AC-6(9) |
| 39646 | ··-·NIST-800-53-AU-12(c) | 39646 | ··-·NIST-800-53-AU-12(c) |
| 39647 | ··-·NIST-800-53-AU-2(d) | 39647 | ··-·NIST-800-53-AU-2(d) |
| Offset 39771, 16 lines modified | Offset 39771, 16 lines modified | ||
| 39771 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 39771 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 39772 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39772 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39773 | ······create:·true | 39773 | ······create:·true |
| 39774 | ······mode:·o-rwx | 39774 | ······mode:·o-rwx |
| 39775 | ······state:·present | 39775 | ······state:·present |
| 39776 | ····when:·syscalls_found·|·length·==·0 | 39776 | ····when:·syscalls_found·|·length·==·0 |
| 39777 | ··when: | 39777 | ··when: |
| 39778 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39779 | ··-·'"audit"·in·ansible_facts.packages' | 39778 | ··-·'"audit"·in·ansible_facts.packages' |
| 39779 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39780 | ··tags: | 39780 | ··tags: |
| 39781 | ··-·NIST-800-53-AC-2(4) | 39781 | ··-·NIST-800-53-AC-2(4) |
| 39782 | ··-·NIST-800-53-AC-6(9) | 39782 | ··-·NIST-800-53-AC-6(9) |
| 39783 | ··-·NIST-800-53-AU-12(c) | 39783 | ··-·NIST-800-53-AU-12(c) |
| 39784 | ··-·NIST-800-53-AU-2(d) | 39784 | ··-·NIST-800-53-AU-2(d) |
| 39785 | ··-·NIST-800-53-CM-6(a) | 39785 | ··-·NIST-800-53-CM-6(a) |
| 39786 | ··-·audit_rules_etc_group_open_by_handle_at | 39786 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 39907, 31 lines modified | Offset 39907, 31 lines modified | ||
| 39907 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 39907 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 39908 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 39908 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 39909 | ······create:·true | 39909 | ······create:·true |
| 39910 | ······mode:·o-rwx | 39910 | ······mode:·o-rwx |
| 39911 | ······state:·present | 39911 | ······state:·present |
| 39912 | ····when:·syscalls_found·|·length·==·0 | 39912 | ····when:·syscalls_found·|·length·==·0 |
| 39913 | ··when: | 39913 | ··when: |
| 39914 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39915 | ··-·'"audit"·in·ansible_facts.packages' | 39914 | ··-·'"audit"·in·ansible_facts.packages' |
| 39915 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 39916 | ··-·audit_arch·==·"b64" | 39916 | ··-·audit_arch·==·"b64" |
| 39917 | ··tags: | 39917 | ··tags: |
| 39918 | ··-·NIST-800-53-AC-2(4) | 39918 | ··-·NIST-800-53-AC-2(4) |
| 39919 | ··-·NIST-800-53-AC-6(9) | 39919 | ··-·NIST-800-53-AC-6(9) |
| 39920 | ··-·NIST-800-53-AU-12(c) | 39920 | ··-·NIST-800-53-AU-12(c) |
| 39921 | ··-·NIST-800-53-AU-2(d) | 39921 | ··-·NIST-800-53-AU-2(d) |
| 39922 | ··-·NIST-800-53-CM-6(a) | 39922 | ··-·NIST-800-53-CM-6(a) |
| 39923 | ··-·audit_rules_etc_group_open_by_handle_at | 39923 | ··-·audit_rules_etc_group_open_by_handle_at |
| 39924 | ··-·low_complexity | 39924 | ··-·low_complexity |
| 39925 | ··-·low_disruption | 39925 | ··-·low_disruption |
| 39926 | ··-·medium_severity | 39926 | ··-·medium_severity |
| 39927 | ··-·reboot_required | 39927 | ··-·reboot_required |
| Max diff block lines reached; 459055/464915 bytes (98.74%) of diff not shown. | |||
| Offset 2742, 27 lines modified | Offset 2742, 27 lines modified | ||
| 2742 | ······<ind:subexpression·datatype="string"·operation="pattern·match">^s390x$</ind:subexpression> | 2742 | ······<ind:subexpression·datatype="string"·operation="pattern·match">^s390x$</ind:subexpression> |
| 2743 | ····</ind:textfilecontent54_state> | 2743 | ····</ind:textfilecontent54_state> |
| 2744 | ····<unix:uname_state·comment="64·bit·architecture"·id="oval:ssg-state_system_info_architecture_ppcle_64:ste:1"·version="1"> | 2744 | ····<unix:uname_state·comment="64·bit·architecture"·id="oval:ssg-state_system_info_architecture_ppcle_64:ste:1"·version="1"> |
| 2745 | ······<unix:processor_type·operation="equals">ppc64le</unix:processor_type> | 2745 | ······<unix:processor_type·operation="equals">ppc64le</unix:processor_type> |
| 2746 | ····</unix:uname_state> | 2746 | ····</unix:uname_state> |
| 2747 | ··</oval-def:states> | 2747 | ··</oval-def:states> |
| 2748 | ··<oval-def:variables> | 2748 | ··<oval-def:variables> |
| 2749 | ····<oval-def:local_variable·id="oval:ssg-ocp4_infra_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·infra·file·to·scan."·version="1"> | ||
| 2750 | ······<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/infrastructures/cluster</oval-def:literal_component> | ||
| 2751 | ····</oval-def:local_variable> | ||
| 2752 | ····<oval-def:local_variable·id="oval:ssg-ocp4_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | ||
| 2753 | ······<oval-def:literal_component>/kubernetes-api-resources/ocp/version</oval-def:literal_component> | ||
| 2754 | ····</oval-def:local_variable> | ||
| 2755 | ····<oval-def:local_variable·id="oval:ssg-ocp4_node_network_file_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | ||
| 2756 | ······<oval-def:literal_component>/etc/kubernetes/cni/net.d/00-multus.conf</oval-def:literal_component> | ||
| 2757 | ····</oval-def:local_variable> | ||
| 2758 | ····<oval-def:local_variable·id="oval:ssg-ocp4_network_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | 2749 | ····<oval-def:local_variable·id="oval:ssg-ocp4_network_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> |
| 2759 | ······<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/networks/cluster</oval-def:literal_component> | 2750 | ······<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/networks/cluster</oval-def:literal_component> |
| 2760 | ····</oval-def:local_variable> | 2751 | ····</oval-def:local_variable> |
| 2761 | ····<oval-def:local_variable·id="oval:ssg-ocp4_hypershift_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | 2752 | ····<oval-def:local_variable·id="oval:ssg-ocp4_hypershift_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> |
| 2762 | ······<oval-def:literal_component>/kubernetes-api-resources/hypershift/version</oval-def:literal_component> | 2753 | ······<oval-def:literal_component>/kubernetes-api-resources/hypershift/version</oval-def:literal_component> |
| 2763 | ····</oval-def:local_variable> | 2754 | ····</oval-def:local_variable> |
| 2764 | ····<oval-def:local_variable·id="oval:ssg-hypershift_hosted_cluster_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | 2755 | ····<oval-def:local_variable·id="oval:ssg-hypershift_hosted_cluster_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> |
| 2765 | ······<oval-def:literal_component>/kubernetes-api-resources/apis/apiextensions.k8s.io/v1/customresourcedefinitions/hostedclusters.hypershift.openshift.io</oval-def:literal_component> | 2756 | ······<oval-def:literal_component>/kubernetes-api-resources/apis/apiextensions.k8s.io/v1/customresourcedefinitions/hostedclusters.hypershift.openshift.io</oval-def:literal_component> |
| 2766 | ····</oval-def:local_variable> | 2757 | ····</oval-def:local_variable> |
| 2758 | ····<oval-def:local_variable·id="oval:ssg-ocp4_infra_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·infra·file·to·scan."·version="1"> | ||
| 2759 | ······<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/infrastructures/cluster</oval-def:literal_component> | ||
| 2760 | ····</oval-def:local_variable> | ||
| 2761 | ····<oval-def:local_variable·id="oval:ssg-ocp4_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | ||
| 2762 | ······<oval-def:literal_component>/kubernetes-api-resources/ocp/version</oval-def:literal_component> | ||
| 2763 | ····</oval-def:local_variable> | ||
| 2764 | ····<oval-def:local_variable·id="oval:ssg-ocp4_node_network_file_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | ||
| 2765 | ······<oval-def:literal_component>/etc/kubernetes/cni/net.d/00-multus.conf</oval-def:literal_component> | ||
| 2766 | ····</oval-def:local_variable> | ||
| 2767 | ··</oval-def:variables> | 2767 | ··</oval-def:variables> |
| 2768 | </oval-def:oval_definitions> | 2768 | </oval-def:oval_definitions> |
| Offset 48529, 29 lines modified | Offset 48529, 29 lines modified | ||
| 48529 | ··········<ind:subexpression·datatype="string"·operation="pattern·match">^s390x$</ind:subexpression> | 48529 | ··········<ind:subexpression·datatype="string"·operation="pattern·match">^s390x$</ind:subexpression> |
| 48530 | ········</ind:textfilecontent54_state> | 48530 | ········</ind:textfilecontent54_state> |
| 48531 | ········<unix:uname_state·comment="64·bit·architecture"·id="oval:ssg-state_system_info_architecture_ppcle_64:ste:1"·version="1"> | 48531 | ········<unix:uname_state·comment="64·bit·architecture"·id="oval:ssg-state_system_info_architecture_ppcle_64:ste:1"·version="1"> |
| 48532 | ··········<unix:processor_type·operation="equals">ppc64le</unix:processor_type> | 48532 | ··········<unix:processor_type·operation="equals">ppc64le</unix:processor_type> |
| 48533 | ········</unix:uname_state> | 48533 | ········</unix:uname_state> |
| 48534 | ······</oval-def:states> | 48534 | ······</oval-def:states> |
| 48535 | ······<oval-def:variables> | 48535 | ······<oval-def:variables> |
| 48536 | ········<oval-def:local_variable·id="oval:ssg-ocp4_infra_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·infra·file·to·scan."·version="1"> | ||
| 48537 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/infrastructures/cluster</oval-def:literal_component> | ||
| 48538 | ········</oval-def:local_variable> | ||
| 48539 | ········<oval-def:local_variable·id="oval:ssg-ocp4_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | ||
| 48540 | ··········<oval-def:literal_component>/kubernetes-api-resources/ocp/version</oval-def:literal_component> | ||
| 48541 | ········</oval-def:local_variable> | ||
| 48542 | ········<oval-def:local_variable·id="oval:ssg-ocp4_node_network_file_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | ||
| 48543 | ··········<oval-def:literal_component>/etc/kubernetes/cni/net.d/00-multus.conf</oval-def:literal_component> | ||
| 48544 | ········</oval-def:local_variable> | ||
| 48545 | ········<oval-def:local_variable·id="oval:ssg-ocp4_network_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | 48536 | ········<oval-def:local_variable·id="oval:ssg-ocp4_network_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> |
| 48546 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/networks/cluster</oval-def:literal_component> | 48537 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/networks/cluster</oval-def:literal_component> |
| 48547 | ········</oval-def:local_variable> | 48538 | ········</oval-def:local_variable> |
| 48548 | ········<oval-def:local_variable·id="oval:ssg-ocp4_hypershift_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | 48539 | ········<oval-def:local_variable·id="oval:ssg-ocp4_hypershift_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> |
| 48549 | ··········<oval-def:literal_component>/kubernetes-api-resources/hypershift/version</oval-def:literal_component> | 48540 | ··········<oval-def:literal_component>/kubernetes-api-resources/hypershift/version</oval-def:literal_component> |
| 48550 | ········</oval-def:local_variable> | 48541 | ········</oval-def:local_variable> |
| 48551 | ········<oval-def:local_variable·id="oval:ssg-hypershift_hosted_cluster_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | 48542 | ········<oval-def:local_variable·id="oval:ssg-hypershift_hosted_cluster_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> |
| 48552 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/apiextensions.k8s.io/v1/customresourcedefinitions/hostedclusters.hypershift.openshift.io</oval-def:literal_component> | 48543 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/apiextensions.k8s.io/v1/customresourcedefinitions/hostedclusters.hypershift.openshift.io</oval-def:literal_component> |
| 48553 | ········</oval-def:local_variable> | 48544 | ········</oval-def:local_variable> |
| 48545 | ········<oval-def:local_variable·id="oval:ssg-ocp4_infra_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·infra·file·to·scan."·version="1"> | ||
| 48546 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/infrastructures/cluster</oval-def:literal_component> | ||
| 48547 | ········</oval-def:local_variable> | ||
| 48548 | ········<oval-def:local_variable·id="oval:ssg-ocp4_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | ||
| 48549 | ··········<oval-def:literal_component>/kubernetes-api-resources/ocp/version</oval-def:literal_component> | ||
| 48550 | ········</oval-def:local_variable> | ||
| 48551 | ········<oval-def:local_variable·id="oval:ssg-ocp4_node_network_file_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | ||
| 48552 | ··········<oval-def:literal_component>/etc/kubernetes/cni/net.d/00-multus.conf</oval-def:literal_component> | ||
| 48553 | ········</oval-def:local_variable> | ||
| 48554 | ······</oval-def:variables> | 48554 | ······</oval-def:variables> |
| 48555 | ····</oval-def:oval_definitions> | 48555 | ····</oval-def:oval_definitions> |
| 48556 | ··</ds:component> | 48556 | ··</ds:component> |
| 48557 | </ds:data-stream-collection> | 48557 | </ds:data-stream-collection> |
| Offset 48529, 29 lines modified | Offset 48529, 29 lines modified | ||
| 48529 | ··········<ind:subexpression·datatype="string"·operation="pattern·match">^s390x$</ind:subexpression> | 48529 | ··········<ind:subexpression·datatype="string"·operation="pattern·match">^s390x$</ind:subexpression> |
| 48530 | ········</ind:textfilecontent54_state> | 48530 | ········</ind:textfilecontent54_state> |
| 48531 | ········<unix:uname_state·comment="64·bit·architecture"·id="oval:ssg-state_system_info_architecture_ppcle_64:ste:1"·version="1"> | 48531 | ········<unix:uname_state·comment="64·bit·architecture"·id="oval:ssg-state_system_info_architecture_ppcle_64:ste:1"·version="1"> |
| 48532 | ··········<unix:processor_type·operation="equals">ppc64le</unix:processor_type> | 48532 | ··········<unix:processor_type·operation="equals">ppc64le</unix:processor_type> |
| 48533 | ········</unix:uname_state> | 48533 | ········</unix:uname_state> |
| 48534 | ······</oval-def:states> | 48534 | ······</oval-def:states> |
| 48535 | ······<oval-def:variables> | 48535 | ······<oval-def:variables> |
| 48536 | ········<oval-def:local_variable·id="oval:ssg-ocp4_infra_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·infra·file·to·scan."·version="1"> | ||
| 48537 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/infrastructures/cluster</oval-def:literal_component> | ||
| 48538 | ········</oval-def:local_variable> | ||
| 48539 | ········<oval-def:local_variable·id="oval:ssg-ocp4_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | ||
| 48540 | ··········<oval-def:literal_component>/kubernetes-api-resources/ocp/version</oval-def:literal_component> | ||
| 48541 | ········</oval-def:local_variable> | ||
| 48542 | ········<oval-def:local_variable·id="oval:ssg-ocp4_node_network_file_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | ||
| 48543 | ··········<oval-def:literal_component>/etc/kubernetes/cni/net.d/00-multus.conf</oval-def:literal_component> | ||
| 48544 | ········</oval-def:local_variable> | ||
| 48545 | ········<oval-def:local_variable·id="oval:ssg-ocp4_network_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | 48536 | ········<oval-def:local_variable·id="oval:ssg-ocp4_network_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> |
| 48546 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/networks/cluster</oval-def:literal_component> | 48537 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/networks/cluster</oval-def:literal_component> |
| 48547 | ········</oval-def:local_variable> | 48538 | ········</oval-def:local_variable> |
| 48548 | ········<oval-def:local_variable·id="oval:ssg-ocp4_hypershift_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | 48539 | ········<oval-def:local_variable·id="oval:ssg-ocp4_hypershift_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> |
| 48549 | ··········<oval-def:literal_component>/kubernetes-api-resources/hypershift/version</oval-def:literal_component> | 48540 | ··········<oval-def:literal_component>/kubernetes-api-resources/hypershift/version</oval-def:literal_component> |
| 48550 | ········</oval-def:local_variable> | 48541 | ········</oval-def:local_variable> |
| 48551 | ········<oval-def:local_variable·id="oval:ssg-hypershift_hosted_cluster_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | 48542 | ········<oval-def:local_variable·id="oval:ssg-hypershift_hosted_cluster_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> |
| 48552 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/apiextensions.k8s.io/v1/customresourcedefinitions/hostedclusters.hypershift.openshift.io</oval-def:literal_component> | 48543 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/apiextensions.k8s.io/v1/customresourcedefinitions/hostedclusters.hypershift.openshift.io</oval-def:literal_component> |
| 48553 | ········</oval-def:local_variable> | 48544 | ········</oval-def:local_variable> |
| 48545 | ········<oval-def:local_variable·id="oval:ssg-ocp4_infra_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·infra·file·to·scan."·version="1"> | ||
| 48546 | ··········<oval-def:literal_component>/kubernetes-api-resources/apis/config.openshift.io/v1/infrastructures/cluster</oval-def:literal_component> | ||
| 48547 | ········</oval-def:local_variable> | ||
| 48548 | ········<oval-def:local_variable·id="oval:ssg-ocp4_dump_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·file·to·scan."·version="1"> | ||
| 48549 | ··········<oval-def:literal_component>/kubernetes-api-resources/ocp/version</oval-def:literal_component> | ||
| 48550 | ········</oval-def:local_variable> | ||
| 48551 | ········<oval-def:local_variable·id="oval:ssg-ocp4_node_network_file_location:var:1"·datatype="string"·comment="The·actual·filepath·of·the·network·file·to·scan."·version="1"> | ||
| 48552 | ··········<oval-def:literal_component>/etc/kubernetes/cni/net.d/00-multus.conf</oval-def:literal_component> | ||
| 48553 | ········</oval-def:local_variable> | ||
| 48554 | ······</oval-def:variables> | 48554 | ······</oval-def:variables> |
| 48555 | ····</oval-def:oval_definitions> | 48555 | ····</oval-def:oval_definitions> |
| 48556 | ··</ds:component> | 48556 | ··</ds:component> |
| 48557 | </ds:data-stream-collection> | 48557 | </ds:data-stream-collection> |
| Offset 43146, 16 lines modified | Offset 43146, 16 lines modified | ||
| 43146 | ··-·reboot_required | 43146 | ··-·reboot_required |
| 43147 | ··-·restrict_strategy | 43147 | ··-·restrict_strategy |
| 43148 | -·name:·Set·architecture·for·audit·open·tasks | 43148 | -·name:·Set·architecture·for·audit·open·tasks |
| 43149 | ··set_fact: | 43149 | ··set_fact: |
| 43150 | ····audit_arch:·b64 | 43150 | ····audit_arch:·b64 |
| 43151 | ··when: | 43151 | ··when: |
| 43152 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43153 | ··-·'"audit"·in·ansible_facts.packages' | 43152 | ··-·'"audit"·in·ansible_facts.packages' |
| 43153 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43154 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 43154 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 43155 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 43155 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 43156 | ··tags: | 43156 | ··tags: |
| 43157 | ··-·NIST-800-53-AC-2(4) | 43157 | ··-·NIST-800-53-AC-2(4) |
| 43158 | ··-·NIST-800-53-AC-6(9) | 43158 | ··-·NIST-800-53-AC-6(9) |
| 43159 | ··-·NIST-800-53-AU-12(c) | 43159 | ··-·NIST-800-53-AU-12(c) |
| 43160 | ··-·NIST-800-53-AU-2(d) | 43160 | ··-·NIST-800-53-AU-2(d) |
| Offset 43284, 16 lines modified | Offset 43284, 16 lines modified | ||
| 43284 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 43284 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 43285 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43285 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43286 | ······create:·true | 43286 | ······create:·true |
| 43287 | ······mode:·o-rwx | 43287 | ······mode:·o-rwx |
| 43288 | ······state:·present | 43288 | ······state:·present |
| 43289 | ····when:·syscalls_found·|·length·==·0 | 43289 | ····when:·syscalls_found·|·length·==·0 |
| 43290 | ··when: | 43290 | ··when: |
| 43291 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43292 | ··-·'"audit"·in·ansible_facts.packages' | 43291 | ··-·'"audit"·in·ansible_facts.packages' |
| 43292 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43293 | ··tags: | 43293 | ··tags: |
| 43294 | ··-·NIST-800-53-AC-2(4) | 43294 | ··-·NIST-800-53-AC-2(4) |
| 43295 | ··-·NIST-800-53-AC-6(9) | 43295 | ··-·NIST-800-53-AC-6(9) |
| 43296 | ··-·NIST-800-53-AU-12(c) | 43296 | ··-·NIST-800-53-AU-12(c) |
| 43297 | ··-·NIST-800-53-AU-2(d) | 43297 | ··-·NIST-800-53-AU-2(d) |
| 43298 | ··-·NIST-800-53-CM-6(a) | 43298 | ··-·NIST-800-53-CM-6(a) |
| 43299 | ··-·audit_rules_etc_group_open | 43299 | ··-·audit_rules_etc_group_open |
| Offset 43420, 31 lines modified | Offset 43420, 31 lines modified | ||
| 43420 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 43420 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 43421 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43421 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43422 | ······create:·true | 43422 | ······create:·true |
| 43423 | ······mode:·o-rwx | 43423 | ······mode:·o-rwx |
| 43424 | ······state:·present | 43424 | ······state:·present |
| 43425 | ····when:·syscalls_found·|·length·==·0 | 43425 | ····when:·syscalls_found·|·length·==·0 |
| 43426 | ··when: | 43426 | ··when: |
| 43427 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43428 | ··-·'"audit"·in·ansible_facts.packages' | 43427 | ··-·'"audit"·in·ansible_facts.packages' |
| 43428 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43429 | ··-·audit_arch·==·"b64" | 43429 | ··-·audit_arch·==·"b64" |
| 43430 | ··tags: | 43430 | ··tags: |
| 43431 | ··-·NIST-800-53-AC-2(4) | 43431 | ··-·NIST-800-53-AC-2(4) |
| 43432 | ··-·NIST-800-53-AC-6(9) | 43432 | ··-·NIST-800-53-AC-6(9) |
| 43433 | ··-·NIST-800-53-AU-12(c) | 43433 | ··-·NIST-800-53-AU-12(c) |
| 43434 | ··-·NIST-800-53-AU-2(d) | 43434 | ··-·NIST-800-53-AU-2(d) |
| 43435 | ··-·NIST-800-53-CM-6(a) | 43435 | ··-·NIST-800-53-CM-6(a) |
| 43436 | ··-·audit_rules_etc_group_open | 43436 | ··-·audit_rules_etc_group_open |
| 43437 | ··-·low_complexity | 43437 | ··-·low_complexity |
| 43438 | ··-·low_disruption | 43438 | ··-·low_disruption |
| 43439 | ··-·medium_severity | 43439 | ··-·medium_severity |
| 43440 | ··-·reboot_required | 43440 | ··-·reboot_required |
| 43441 | ··-·restrict_strategy</xccdf-1.2:fix> | 43441 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 43442 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 43442 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 43443 | if· | 43443 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 43444 | #·First·perform·the·remediation·of·the·syscall·rule | 43444 | #·First·perform·the·remediation·of·the·syscall·rule |
| 43445 | #·Retrieve·hardware·architecture·of·the·underlying·system | 43445 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 43446 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 43446 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 43447 | for·ARCH·in·"${RULE_ARCHS[@]}" | 43447 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 43448 | do | 43448 | do |
| Offset 43840, 16 lines modified | Offset 43840, 16 lines modified | ||
| 43840 | ··-·reboot_required | 43840 | ··-·reboot_required |
| 43841 | ··-·restrict_strategy | 43841 | ··-·restrict_strategy |
| 43842 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 43842 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 43843 | ··set_fact: | 43843 | ··set_fact: |
| 43844 | ····audit_arch:·b64 | 43844 | ····audit_arch:·b64 |
| 43845 | ··when: | 43845 | ··when: |
| 43846 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43847 | ··-·'"audit"·in·ansible_facts.packages' | 43846 | ··-·'"audit"·in·ansible_facts.packages' |
| 43847 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43848 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 43848 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 43849 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 43849 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 43850 | ··tags: | 43850 | ··tags: |
| 43851 | ··-·NIST-800-53-AC-2(4) | 43851 | ··-·NIST-800-53-AC-2(4) |
| 43852 | ··-·NIST-800-53-AC-6(9) | 43852 | ··-·NIST-800-53-AC-6(9) |
| 43853 | ··-·NIST-800-53-AU-12(c) | 43853 | ··-·NIST-800-53-AU-12(c) |
| 43854 | ··-·NIST-800-53-AU-2(d) | 43854 | ··-·NIST-800-53-AU-2(d) |
| Offset 43978, 16 lines modified | Offset 43978, 16 lines modified | ||
| 43978 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 43978 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 43979 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43979 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43980 | ······create:·true | 43980 | ······create:·true |
| 43981 | ······mode:·o-rwx | 43981 | ······mode:·o-rwx |
| 43982 | ······state:·present | 43982 | ······state:·present |
| 43983 | ····when:·syscalls_found·|·length·==·0 | 43983 | ····when:·syscalls_found·|·length·==·0 |
| 43984 | ··when: | 43984 | ··when: |
| 43985 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43986 | ··-·'"audit"·in·ansible_facts.packages' | 43985 | ··-·'"audit"·in·ansible_facts.packages' |
| 43986 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43987 | ··tags: | 43987 | ··tags: |
| 43988 | ··-·NIST-800-53-AC-2(4) | 43988 | ··-·NIST-800-53-AC-2(4) |
| 43989 | ··-·NIST-800-53-AC-6(9) | 43989 | ··-·NIST-800-53-AC-6(9) |
| 43990 | ··-·NIST-800-53-AU-12(c) | 43990 | ··-·NIST-800-53-AU-12(c) |
| 43991 | ··-·NIST-800-53-AU-2(d) | 43991 | ··-·NIST-800-53-AU-2(d) |
| 43992 | ··-·NIST-800-53-CM-6(a) | 43992 | ··-·NIST-800-53-CM-6(a) |
| 43993 | ··-·audit_rules_etc_group_open_by_handle_at | 43993 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 44114, 31 lines modified | Offset 44114, 31 lines modified | ||
| 44114 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 44114 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 44115 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 44115 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 44116 | ······create:·true | 44116 | ······create:·true |
| 44117 | ······mode:·o-rwx | 44117 | ······mode:·o-rwx |
| 44118 | ······state:·present | 44118 | ······state:·present |
| 44119 | ····when:·syscalls_found·|·length·==·0 | 44119 | ····when:·syscalls_found·|·length·==·0 |
| 44120 | ··when: | 44120 | ··when: |
| 44121 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 44122 | ··-·'"audit"·in·ansible_facts.packages' | 44121 | ··-·'"audit"·in·ansible_facts.packages' |
| 44122 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 44123 | ··-·audit_arch·==·"b64" | 44123 | ··-·audit_arch·==·"b64" |
| 44124 | ··tags: | 44124 | ··tags: |
| 44125 | ··-·NIST-800-53-AC-2(4) | 44125 | ··-·NIST-800-53-AC-2(4) |
| 44126 | ··-·NIST-800-53-AC-6(9) | 44126 | ··-·NIST-800-53-AC-6(9) |
| 44127 | ··-·NIST-800-53-AU-12(c) | 44127 | ··-·NIST-800-53-AU-12(c) |
| 44128 | ··-·NIST-800-53-AU-2(d) | 44128 | ··-·NIST-800-53-AU-2(d) |
| 44129 | ··-·NIST-800-53-CM-6(a) | 44129 | ··-·NIST-800-53-CM-6(a) |
| 44130 | ··-·audit_rules_etc_group_open_by_handle_at | 44130 | ··-·audit_rules_etc_group_open_by_handle_at |
| 44131 | ··-·low_complexity | 44131 | ··-·low_complexity |
| 44132 | ··-·low_disruption | 44132 | ··-·low_disruption |
| 44133 | ··-·medium_severity | 44133 | ··-·medium_severity |
| 44134 | ··-·reboot_required | 44134 | ··-·reboot_required |
| Max diff block lines reached; 519179/525043 bytes (98.88%) of diff not shown. | |||
| Offset 43148, 16 lines modified | Offset 43148, 16 lines modified | ||
| 43148 | ··-·reboot_required | 43148 | ··-·reboot_required |
| 43149 | ··-·restrict_strategy | 43149 | ··-·restrict_strategy |
| 43150 | -·name:·Set·architecture·for·audit·open·tasks | 43150 | -·name:·Set·architecture·for·audit·open·tasks |
| 43151 | ··set_fact: | 43151 | ··set_fact: |
| 43152 | ····audit_arch:·b64 | 43152 | ····audit_arch:·b64 |
| 43153 | ··when: | 43153 | ··when: |
| 43154 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43155 | ··-·'"audit"·in·ansible_facts.packages' | 43154 | ··-·'"audit"·in·ansible_facts.packages' |
| 43155 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43156 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 43156 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 43157 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 43157 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 43158 | ··tags: | 43158 | ··tags: |
| 43159 | ··-·NIST-800-53-AC-2(4) | 43159 | ··-·NIST-800-53-AC-2(4) |
| 43160 | ··-·NIST-800-53-AC-6(9) | 43160 | ··-·NIST-800-53-AC-6(9) |
| 43161 | ··-·NIST-800-53-AU-12(c) | 43161 | ··-·NIST-800-53-AU-12(c) |
| 43162 | ··-·NIST-800-53-AU-2(d) | 43162 | ··-·NIST-800-53-AU-2(d) |
| Offset 43286, 16 lines modified | Offset 43286, 16 lines modified | ||
| 43286 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 43286 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 43287 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43287 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43288 | ······create:·true | 43288 | ······create:·true |
| 43289 | ······mode:·o-rwx | 43289 | ······mode:·o-rwx |
| 43290 | ······state:·present | 43290 | ······state:·present |
| 43291 | ····when:·syscalls_found·|·length·==·0 | 43291 | ····when:·syscalls_found·|·length·==·0 |
| 43292 | ··when: | 43292 | ··when: |
| 43293 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43294 | ··-·'"audit"·in·ansible_facts.packages' | 43293 | ··-·'"audit"·in·ansible_facts.packages' |
| 43294 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43295 | ··tags: | 43295 | ··tags: |
| 43296 | ··-·NIST-800-53-AC-2(4) | 43296 | ··-·NIST-800-53-AC-2(4) |
| 43297 | ··-·NIST-800-53-AC-6(9) | 43297 | ··-·NIST-800-53-AC-6(9) |
| 43298 | ··-·NIST-800-53-AU-12(c) | 43298 | ··-·NIST-800-53-AU-12(c) |
| 43299 | ··-·NIST-800-53-AU-2(d) | 43299 | ··-·NIST-800-53-AU-2(d) |
| 43300 | ··-·NIST-800-53-CM-6(a) | 43300 | ··-·NIST-800-53-CM-6(a) |
| 43301 | ··-·audit_rules_etc_group_open | 43301 | ··-·audit_rules_etc_group_open |
| Offset 43422, 31 lines modified | Offset 43422, 31 lines modified | ||
| 43422 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 43422 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 43423 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43423 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43424 | ······create:·true | 43424 | ······create:·true |
| 43425 | ······mode:·o-rwx | 43425 | ······mode:·o-rwx |
| 43426 | ······state:·present | 43426 | ······state:·present |
| 43427 | ····when:·syscalls_found·|·length·==·0 | 43427 | ····when:·syscalls_found·|·length·==·0 |
| 43428 | ··when: | 43428 | ··when: |
| 43429 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43430 | ··-·'"audit"·in·ansible_facts.packages' | 43429 | ··-·'"audit"·in·ansible_facts.packages' |
| 43430 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43431 | ··-·audit_arch·==·"b64" | 43431 | ··-·audit_arch·==·"b64" |
| 43432 | ··tags: | 43432 | ··tags: |
| 43433 | ··-·NIST-800-53-AC-2(4) | 43433 | ··-·NIST-800-53-AC-2(4) |
| 43434 | ··-·NIST-800-53-AC-6(9) | 43434 | ··-·NIST-800-53-AC-6(9) |
| 43435 | ··-·NIST-800-53-AU-12(c) | 43435 | ··-·NIST-800-53-AU-12(c) |
| 43436 | ··-·NIST-800-53-AU-2(d) | 43436 | ··-·NIST-800-53-AU-2(d) |
| 43437 | ··-·NIST-800-53-CM-6(a) | 43437 | ··-·NIST-800-53-CM-6(a) |
| 43438 | ··-·audit_rules_etc_group_open | 43438 | ··-·audit_rules_etc_group_open |
| 43439 | ··-·low_complexity | 43439 | ··-·low_complexity |
| 43440 | ··-·low_disruption | 43440 | ··-·low_disruption |
| 43441 | ··-·medium_severity | 43441 | ··-·medium_severity |
| 43442 | ··-·reboot_required | 43442 | ··-·reboot_required |
| 43443 | ··-·restrict_strategy</xccdf-1.2:fix> | 43443 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 43444 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 43444 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 43445 | if· | 43445 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 43446 | #·First·perform·the·remediation·of·the·syscall·rule | 43446 | #·First·perform·the·remediation·of·the·syscall·rule |
| 43447 | #·Retrieve·hardware·architecture·of·the·underlying·system | 43447 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 43448 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 43448 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 43449 | for·ARCH·in·"${RULE_ARCHS[@]}" | 43449 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 43450 | do | 43450 | do |
| Offset 43842, 16 lines modified | Offset 43842, 16 lines modified | ||
| 43842 | ··-·reboot_required | 43842 | ··-·reboot_required |
| 43843 | ··-·restrict_strategy | 43843 | ··-·restrict_strategy |
| 43844 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 43844 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 43845 | ··set_fact: | 43845 | ··set_fact: |
| 43846 | ····audit_arch:·b64 | 43846 | ····audit_arch:·b64 |
| 43847 | ··when: | 43847 | ··when: |
| 43848 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43849 | ··-·'"audit"·in·ansible_facts.packages' | 43848 | ··-·'"audit"·in·ansible_facts.packages' |
| 43849 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43850 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 43850 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 43851 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 43851 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 43852 | ··tags: | 43852 | ··tags: |
| 43853 | ··-·NIST-800-53-AC-2(4) | 43853 | ··-·NIST-800-53-AC-2(4) |
| 43854 | ··-·NIST-800-53-AC-6(9) | 43854 | ··-·NIST-800-53-AC-6(9) |
| 43855 | ··-·NIST-800-53-AU-12(c) | 43855 | ··-·NIST-800-53-AU-12(c) |
| 43856 | ··-·NIST-800-53-AU-2(d) | 43856 | ··-·NIST-800-53-AU-2(d) |
| Offset 43980, 16 lines modified | Offset 43980, 16 lines modified | ||
| 43980 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 43980 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 43981 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43981 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43982 | ······create:·true | 43982 | ······create:·true |
| 43983 | ······mode:·o-rwx | 43983 | ······mode:·o-rwx |
| 43984 | ······state:·present | 43984 | ······state:·present |
| 43985 | ····when:·syscalls_found·|·length·==·0 | 43985 | ····when:·syscalls_found·|·length·==·0 |
| 43986 | ··when: | 43986 | ··when: |
| 43987 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43988 | ··-·'"audit"·in·ansible_facts.packages' | 43987 | ··-·'"audit"·in·ansible_facts.packages' |
| 43988 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43989 | ··tags: | 43989 | ··tags: |
| 43990 | ··-·NIST-800-53-AC-2(4) | 43990 | ··-·NIST-800-53-AC-2(4) |
| 43991 | ··-·NIST-800-53-AC-6(9) | 43991 | ··-·NIST-800-53-AC-6(9) |
| 43992 | ··-·NIST-800-53-AU-12(c) | 43992 | ··-·NIST-800-53-AU-12(c) |
| 43993 | ··-·NIST-800-53-AU-2(d) | 43993 | ··-·NIST-800-53-AU-2(d) |
| 43994 | ··-·NIST-800-53-CM-6(a) | 43994 | ··-·NIST-800-53-CM-6(a) |
| 43995 | ··-·audit_rules_etc_group_open_by_handle_at | 43995 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 44116, 31 lines modified | Offset 44116, 31 lines modified | ||
| 44116 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 44116 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 44117 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 44117 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 44118 | ······create:·true | 44118 | ······create:·true |
| 44119 | ······mode:·o-rwx | 44119 | ······mode:·o-rwx |
| 44120 | ······state:·present | 44120 | ······state:·present |
| 44121 | ····when:·syscalls_found·|·length·==·0 | 44121 | ····when:·syscalls_found·|·length·==·0 |
| 44122 | ··when: | 44122 | ··when: |
| 44123 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 44124 | ··-·'"audit"·in·ansible_facts.packages' | 44123 | ··-·'"audit"·in·ansible_facts.packages' |
| 44124 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 44125 | ··-·audit_arch·==·"b64" | 44125 | ··-·audit_arch·==·"b64" |
| 44126 | ··tags: | 44126 | ··tags: |
| 44127 | ··-·NIST-800-53-AC-2(4) | 44127 | ··-·NIST-800-53-AC-2(4) |
| 44128 | ··-·NIST-800-53-AC-6(9) | 44128 | ··-·NIST-800-53-AC-6(9) |
| 44129 | ··-·NIST-800-53-AU-12(c) | 44129 | ··-·NIST-800-53-AU-12(c) |
| 44130 | ··-·NIST-800-53-AU-2(d) | 44130 | ··-·NIST-800-53-AU-2(d) |
| 44131 | ··-·NIST-800-53-CM-6(a) | 44131 | ··-·NIST-800-53-CM-6(a) |
| 44132 | ··-·audit_rules_etc_group_open_by_handle_at | 44132 | ··-·audit_rules_etc_group_open_by_handle_at |
| 44133 | ··-·low_complexity | 44133 | ··-·low_complexity |
| 44134 | ··-·low_disruption | 44134 | ··-·low_disruption |
| 44135 | ··-·medium_severity | 44135 | ··-·medium_severity |
| 44136 | ··-·reboot_required | 44136 | ··-·reboot_required |
| Max diff block lines reached; 519179/525043 bytes (98.88%) of diff not shown. | |||
| Offset 43002, 16 lines modified | Offset 43002, 16 lines modified | ||
| 43002 | ··-·reboot_required | 43002 | ··-·reboot_required |
| 43003 | ··-·restrict_strategy | 43003 | ··-·restrict_strategy |
| 43004 | -·name:·Set·architecture·for·audit·open·tasks | 43004 | -·name:·Set·architecture·for·audit·open·tasks |
| 43005 | ··set_fact: | 43005 | ··set_fact: |
| 43006 | ····audit_arch:·b64 | 43006 | ····audit_arch:·b64 |
| 43007 | ··when: | 43007 | ··when: |
| 43008 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43009 | ··-·'"audit"·in·ansible_facts.packages' | 43008 | ··-·'"audit"·in·ansible_facts.packages' |
| 43009 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43010 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 43010 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 43011 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 43011 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 43012 | ··tags: | 43012 | ··tags: |
| 43013 | ··-·NIST-800-53-AC-2(4) | 43013 | ··-·NIST-800-53-AC-2(4) |
| 43014 | ··-·NIST-800-53-AC-6(9) | 43014 | ··-·NIST-800-53-AC-6(9) |
| 43015 | ··-·NIST-800-53-AU-12(c) | 43015 | ··-·NIST-800-53-AU-12(c) |
| 43016 | ··-·NIST-800-53-AU-2(d) | 43016 | ··-·NIST-800-53-AU-2(d) |
| Offset 43140, 16 lines modified | Offset 43140, 16 lines modified | ||
| 43140 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 43140 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 43141 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43141 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43142 | ······create:·true | 43142 | ······create:·true |
| 43143 | ······mode:·o-rwx | 43143 | ······mode:·o-rwx |
| 43144 | ······state:·present | 43144 | ······state:·present |
| 43145 | ····when:·syscalls_found·|·length·==·0 | 43145 | ····when:·syscalls_found·|·length·==·0 |
| 43146 | ··when: | 43146 | ··when: |
| 43147 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43148 | ··-·'"audit"·in·ansible_facts.packages' | 43147 | ··-·'"audit"·in·ansible_facts.packages' |
| 43148 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43149 | ··tags: | 43149 | ··tags: |
| 43150 | ··-·NIST-800-53-AC-2(4) | 43150 | ··-·NIST-800-53-AC-2(4) |
| 43151 | ··-·NIST-800-53-AC-6(9) | 43151 | ··-·NIST-800-53-AC-6(9) |
| 43152 | ··-·NIST-800-53-AU-12(c) | 43152 | ··-·NIST-800-53-AU-12(c) |
| 43153 | ··-·NIST-800-53-AU-2(d) | 43153 | ··-·NIST-800-53-AU-2(d) |
| 43154 | ··-·NIST-800-53-CM-6(a) | 43154 | ··-·NIST-800-53-CM-6(a) |
| 43155 | ··-·audit_rules_etc_group_open | 43155 | ··-·audit_rules_etc_group_open |
| Offset 43276, 31 lines modified | Offset 43276, 31 lines modified | ||
| 43276 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 43276 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 43277 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43277 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43278 | ······create:·true | 43278 | ······create:·true |
| 43279 | ······mode:·o-rwx | 43279 | ······mode:·o-rwx |
| 43280 | ······state:·present | 43280 | ······state:·present |
| 43281 | ····when:·syscalls_found·|·length·==·0 | 43281 | ····when:·syscalls_found·|·length·==·0 |
| 43282 | ··when: | 43282 | ··when: |
| 43283 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43284 | ··-·'"audit"·in·ansible_facts.packages' | 43283 | ··-·'"audit"·in·ansible_facts.packages' |
| 43284 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43285 | ··-·audit_arch·==·"b64" | 43285 | ··-·audit_arch·==·"b64" |
| 43286 | ··tags: | 43286 | ··tags: |
| 43287 | ··-·NIST-800-53-AC-2(4) | 43287 | ··-·NIST-800-53-AC-2(4) |
| 43288 | ··-·NIST-800-53-AC-6(9) | 43288 | ··-·NIST-800-53-AC-6(9) |
| 43289 | ··-·NIST-800-53-AU-12(c) | 43289 | ··-·NIST-800-53-AU-12(c) |
| 43290 | ··-·NIST-800-53-AU-2(d) | 43290 | ··-·NIST-800-53-AU-2(d) |
| 43291 | ··-·NIST-800-53-CM-6(a) | 43291 | ··-·NIST-800-53-CM-6(a) |
| 43292 | ··-·audit_rules_etc_group_open | 43292 | ··-·audit_rules_etc_group_open |
| 43293 | ··-·low_complexity | 43293 | ··-·low_complexity |
| 43294 | ··-·low_disruption | 43294 | ··-·low_disruption |
| 43295 | ··-·medium_severity | 43295 | ··-·medium_severity |
| 43296 | ··-·reboot_required | 43296 | ··-·reboot_required |
| 43297 | ··-·restrict_strategy</xccdf-1.2:fix> | 43297 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 43298 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 43298 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 43299 | if· | 43299 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 43300 | #·First·perform·the·remediation·of·the·syscall·rule | 43300 | #·First·perform·the·remediation·of·the·syscall·rule |
| 43301 | #·Retrieve·hardware·architecture·of·the·underlying·system | 43301 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 43302 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 43302 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 43303 | for·ARCH·in·"${RULE_ARCHS[@]}" | 43303 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 43304 | do | 43304 | do |
| Offset 43696, 16 lines modified | Offset 43696, 16 lines modified | ||
| 43696 | ··-·reboot_required | 43696 | ··-·reboot_required |
| 43697 | ··-·restrict_strategy | 43697 | ··-·restrict_strategy |
| 43698 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 43698 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 43699 | ··set_fact: | 43699 | ··set_fact: |
| 43700 | ····audit_arch:·b64 | 43700 | ····audit_arch:·b64 |
| 43701 | ··when: | 43701 | ··when: |
| 43702 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43703 | ··-·'"audit"·in·ansible_facts.packages' | 43702 | ··-·'"audit"·in·ansible_facts.packages' |
| 43703 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43704 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 43704 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 43705 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 43705 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 43706 | ··tags: | 43706 | ··tags: |
| 43707 | ··-·NIST-800-53-AC-2(4) | 43707 | ··-·NIST-800-53-AC-2(4) |
| 43708 | ··-·NIST-800-53-AC-6(9) | 43708 | ··-·NIST-800-53-AC-6(9) |
| 43709 | ··-·NIST-800-53-AU-12(c) | 43709 | ··-·NIST-800-53-AU-12(c) |
| 43710 | ··-·NIST-800-53-AU-2(d) | 43710 | ··-·NIST-800-53-AU-2(d) |
| Offset 43834, 16 lines modified | Offset 43834, 16 lines modified | ||
| 43834 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 43834 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 43835 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43835 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43836 | ······create:·true | 43836 | ······create:·true |
| 43837 | ······mode:·o-rwx | 43837 | ······mode:·o-rwx |
| 43838 | ······state:·present | 43838 | ······state:·present |
| 43839 | ····when:·syscalls_found·|·length·==·0 | 43839 | ····when:·syscalls_found·|·length·==·0 |
| 43840 | ··when: | 43840 | ··when: |
| 43841 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43842 | ··-·'"audit"·in·ansible_facts.packages' | 43841 | ··-·'"audit"·in·ansible_facts.packages' |
| 43842 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43843 | ··tags: | 43843 | ··tags: |
| 43844 | ··-·NIST-800-53-AC-2(4) | 43844 | ··-·NIST-800-53-AC-2(4) |
| 43845 | ··-·NIST-800-53-AC-6(9) | 43845 | ··-·NIST-800-53-AC-6(9) |
| 43846 | ··-·NIST-800-53-AU-12(c) | 43846 | ··-·NIST-800-53-AU-12(c) |
| 43847 | ··-·NIST-800-53-AU-2(d) | 43847 | ··-·NIST-800-53-AU-2(d) |
| 43848 | ··-·NIST-800-53-CM-6(a) | 43848 | ··-·NIST-800-53-CM-6(a) |
| 43849 | ··-·audit_rules_etc_group_open_by_handle_at | 43849 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 43970, 31 lines modified | Offset 43970, 31 lines modified | ||
| 43970 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 43970 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 43971 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 43971 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 43972 | ······create:·true | 43972 | ······create:·true |
| 43973 | ······mode:·o-rwx | 43973 | ······mode:·o-rwx |
| 43974 | ······state:·present | 43974 | ······state:·present |
| 43975 | ····when:·syscalls_found·|·length·==·0 | 43975 | ····when:·syscalls_found·|·length·==·0 |
| 43976 | ··when: | 43976 | ··when: |
| 43977 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43978 | ··-·'"audit"·in·ansible_facts.packages' | 43977 | ··-·'"audit"·in·ansible_facts.packages' |
| 43978 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 43979 | ··-·audit_arch·==·"b64" | 43979 | ··-·audit_arch·==·"b64" |
| 43980 | ··tags: | 43980 | ··tags: |
| 43981 | ··-·NIST-800-53-AC-2(4) | 43981 | ··-·NIST-800-53-AC-2(4) |
| 43982 | ··-·NIST-800-53-AC-6(9) | 43982 | ··-·NIST-800-53-AC-6(9) |
| 43983 | ··-·NIST-800-53-AU-12(c) | 43983 | ··-·NIST-800-53-AU-12(c) |
| 43984 | ··-·NIST-800-53-AU-2(d) | 43984 | ··-·NIST-800-53-AU-2(d) |
| 43985 | ··-·NIST-800-53-CM-6(a) | 43985 | ··-·NIST-800-53-CM-6(a) |
| 43986 | ··-·audit_rules_etc_group_open_by_handle_at | 43986 | ··-·audit_rules_etc_group_open_by_handle_at |
| 43987 | ··-·low_complexity | 43987 | ··-·low_complexity |
| 43988 | ··-·low_disruption | 43988 | ··-·low_disruption |
| 43989 | ··-·medium_severity | 43989 | ··-·medium_severity |
| 43990 | ··-·reboot_required | 43990 | ··-·reboot_required |
| Max diff block lines reached; 518043/523903 bytes (98.88%) of diff not shown. | |||
| Offset 48609, 16 lines modified | Offset 48609, 16 lines modified | ||
| 48609 | ··-·reboot_required | 48609 | ··-·reboot_required |
| 48610 | ··-·restrict_strategy | 48610 | ··-·restrict_strategy |
| 48611 | -·name:·Set·architecture·for·audit·open·tasks | 48611 | -·name:·Set·architecture·for·audit·open·tasks |
| 48612 | ··set_fact: | 48612 | ··set_fact: |
| 48613 | ····audit_arch:·b64 | 48613 | ····audit_arch:·b64 |
| 48614 | ··when: | 48614 | ··when: |
| 48615 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48616 | ··-·'"audit"·in·ansible_facts.packages' | 48615 | ··-·'"audit"·in·ansible_facts.packages' |
| 48616 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48617 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 48617 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 48618 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 48618 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 48619 | ··tags: | 48619 | ··tags: |
| 48620 | ··-·NIST-800-53-AC-2(4) | 48620 | ··-·NIST-800-53-AC-2(4) |
| 48621 | ··-·NIST-800-53-AC-6(9) | 48621 | ··-·NIST-800-53-AC-6(9) |
| 48622 | ··-·NIST-800-53-AU-12(c) | 48622 | ··-·NIST-800-53-AU-12(c) |
| 48623 | ··-·NIST-800-53-AU-2(d) | 48623 | ··-·NIST-800-53-AU-2(d) |
| Offset 48747, 16 lines modified | Offset 48747, 16 lines modified | ||
| 48747 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 48747 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 48748 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 48748 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 48749 | ······create:·true | 48749 | ······create:·true |
| 48750 | ······mode:·o-rwx | 48750 | ······mode:·o-rwx |
| 48751 | ······state:·present | 48751 | ······state:·present |
| 48752 | ····when:·syscalls_found·|·length·==·0 | 48752 | ····when:·syscalls_found·|·length·==·0 |
| 48753 | ··when: | 48753 | ··when: |
| 48754 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48755 | ··-·'"audit"·in·ansible_facts.packages' | 48754 | ··-·'"audit"·in·ansible_facts.packages' |
| 48755 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48756 | ··tags: | 48756 | ··tags: |
| 48757 | ··-·NIST-800-53-AC-2(4) | 48757 | ··-·NIST-800-53-AC-2(4) |
| 48758 | ··-·NIST-800-53-AC-6(9) | 48758 | ··-·NIST-800-53-AC-6(9) |
| 48759 | ··-·NIST-800-53-AU-12(c) | 48759 | ··-·NIST-800-53-AU-12(c) |
| 48760 | ··-·NIST-800-53-AU-2(d) | 48760 | ··-·NIST-800-53-AU-2(d) |
| 48761 | ··-·NIST-800-53-CM-6(a) | 48761 | ··-·NIST-800-53-CM-6(a) |
| 48762 | ··-·audit_rules_etc_group_open | 48762 | ··-·audit_rules_etc_group_open |
| Offset 48883, 31 lines modified | Offset 48883, 31 lines modified | ||
| 48883 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 48883 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 48884 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 48884 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 48885 | ······create:·true | 48885 | ······create:·true |
| 48886 | ······mode:·o-rwx | 48886 | ······mode:·o-rwx |
| 48887 | ······state:·present | 48887 | ······state:·present |
| 48888 | ····when:·syscalls_found·|·length·==·0 | 48888 | ····when:·syscalls_found·|·length·==·0 |
| 48889 | ··when: | 48889 | ··when: |
| 48890 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48891 | ··-·'"audit"·in·ansible_facts.packages' | 48890 | ··-·'"audit"·in·ansible_facts.packages' |
| 48891 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48892 | ··-·audit_arch·==·"b64" | 48892 | ··-·audit_arch·==·"b64" |
| 48893 | ··tags: | 48893 | ··tags: |
| 48894 | ··-·NIST-800-53-AC-2(4) | 48894 | ··-·NIST-800-53-AC-2(4) |
| 48895 | ··-·NIST-800-53-AC-6(9) | 48895 | ··-·NIST-800-53-AC-6(9) |
| 48896 | ··-·NIST-800-53-AU-12(c) | 48896 | ··-·NIST-800-53-AU-12(c) |
| 48897 | ··-·NIST-800-53-AU-2(d) | 48897 | ··-·NIST-800-53-AU-2(d) |
| 48898 | ··-·NIST-800-53-CM-6(a) | 48898 | ··-·NIST-800-53-CM-6(a) |
| 48899 | ··-·audit_rules_etc_group_open | 48899 | ··-·audit_rules_etc_group_open |
| 48900 | ··-·low_complexity | 48900 | ··-·low_complexity |
| 48901 | ··-·low_disruption | 48901 | ··-·low_disruption |
| 48902 | ··-·medium_severity | 48902 | ··-·medium_severity |
| 48903 | ··-·reboot_required | 48903 | ··-·reboot_required |
| 48904 | ··-·restrict_strategy</xccdf-1.2:fix> | 48904 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 48905 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 48905 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 48906 | if· | 48906 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 48907 | #·First·perform·the·remediation·of·the·syscall·rule | 48907 | #·First·perform·the·remediation·of·the·syscall·rule |
| 48908 | #·Retrieve·hardware·architecture·of·the·underlying·system | 48908 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 48909 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 48909 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 48910 | for·ARCH·in·"${RULE_ARCHS[@]}" | 48910 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 48911 | do | 48911 | do |
| Offset 49303, 16 lines modified | Offset 49303, 16 lines modified | ||
| 49303 | ··-·reboot_required | 49303 | ··-·reboot_required |
| 49304 | ··-·restrict_strategy | 49304 | ··-·restrict_strategy |
| 49305 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 49305 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 49306 | ··set_fact: | 49306 | ··set_fact: |
| 49307 | ····audit_arch:·b64 | 49307 | ····audit_arch:·b64 |
| 49308 | ··when: | 49308 | ··when: |
| 49309 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49310 | ··-·'"audit"·in·ansible_facts.packages' | 49309 | ··-·'"audit"·in·ansible_facts.packages' |
| 49310 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49311 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 49311 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 49312 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 49312 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 49313 | ··tags: | 49313 | ··tags: |
| 49314 | ··-·NIST-800-53-AC-2(4) | 49314 | ··-·NIST-800-53-AC-2(4) |
| 49315 | ··-·NIST-800-53-AC-6(9) | 49315 | ··-·NIST-800-53-AC-6(9) |
| 49316 | ··-·NIST-800-53-AU-12(c) | 49316 | ··-·NIST-800-53-AU-12(c) |
| 49317 | ··-·NIST-800-53-AU-2(d) | 49317 | ··-·NIST-800-53-AU-2(d) |
| Offset 49441, 16 lines modified | Offset 49441, 16 lines modified | ||
| 49441 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 49441 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 49442 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 49442 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 49443 | ······create:·true | 49443 | ······create:·true |
| 49444 | ······mode:·o-rwx | 49444 | ······mode:·o-rwx |
| 49445 | ······state:·present | 49445 | ······state:·present |
| 49446 | ····when:·syscalls_found·|·length·==·0 | 49446 | ····when:·syscalls_found·|·length·==·0 |
| 49447 | ··when: | 49447 | ··when: |
| 49448 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49449 | ··-·'"audit"·in·ansible_facts.packages' | 49448 | ··-·'"audit"·in·ansible_facts.packages' |
| 49449 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49450 | ··tags: | 49450 | ··tags: |
| 49451 | ··-·NIST-800-53-AC-2(4) | 49451 | ··-·NIST-800-53-AC-2(4) |
| 49452 | ··-·NIST-800-53-AC-6(9) | 49452 | ··-·NIST-800-53-AC-6(9) |
| 49453 | ··-·NIST-800-53-AU-12(c) | 49453 | ··-·NIST-800-53-AU-12(c) |
| 49454 | ··-·NIST-800-53-AU-2(d) | 49454 | ··-·NIST-800-53-AU-2(d) |
| 49455 | ··-·NIST-800-53-CM-6(a) | 49455 | ··-·NIST-800-53-CM-6(a) |
| 49456 | ··-·audit_rules_etc_group_open_by_handle_at | 49456 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 49577, 31 lines modified | Offset 49577, 31 lines modified | ||
| 49577 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 49577 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 49578 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 49578 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 49579 | ······create:·true | 49579 | ······create:·true |
| 49580 | ······mode:·o-rwx | 49580 | ······mode:·o-rwx |
| 49581 | ······state:·present | 49581 | ······state:·present |
| 49582 | ····when:·syscalls_found·|·length·==·0 | 49582 | ····when:·syscalls_found·|·length·==·0 |
| 49583 | ··when: | 49583 | ··when: |
| 49584 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49585 | ··-·'"audit"·in·ansible_facts.packages' | 49584 | ··-·'"audit"·in·ansible_facts.packages' |
| 49585 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49586 | ··-·audit_arch·==·"b64" | 49586 | ··-·audit_arch·==·"b64" |
| 49587 | ··tags: | 49587 | ··tags: |
| 49588 | ··-·NIST-800-53-AC-2(4) | 49588 | ··-·NIST-800-53-AC-2(4) |
| 49589 | ··-·NIST-800-53-AC-6(9) | 49589 | ··-·NIST-800-53-AC-6(9) |
| 49590 | ··-·NIST-800-53-AU-12(c) | 49590 | ··-·NIST-800-53-AU-12(c) |
| 49591 | ··-·NIST-800-53-AU-2(d) | 49591 | ··-·NIST-800-53-AU-2(d) |
| 49592 | ··-·NIST-800-53-CM-6(a) | 49592 | ··-·NIST-800-53-CM-6(a) |
| 49593 | ··-·audit_rules_etc_group_open_by_handle_at | 49593 | ··-·audit_rules_etc_group_open_by_handle_at |
| 49594 | ··-·low_complexity | 49594 | ··-·low_complexity |
| 49595 | ··-·low_disruption | 49595 | ··-·low_disruption |
| 49596 | ··-·medium_severity | 49596 | ··-·medium_severity |
| 49597 | ··-·reboot_required | 49597 | ··-·reboot_required |
| Max diff block lines reached; 537557/543421 bytes (98.92%) of diff not shown. | |||
| Offset 48611, 16 lines modified | Offset 48611, 16 lines modified | ||
| 48611 | ··-·reboot_required | 48611 | ··-·reboot_required |
| 48612 | ··-·restrict_strategy | 48612 | ··-·restrict_strategy |
| 48613 | -·name:·Set·architecture·for·audit·open·tasks | 48613 | -·name:·Set·architecture·for·audit·open·tasks |
| 48614 | ··set_fact: | 48614 | ··set_fact: |
| 48615 | ····audit_arch:·b64 | 48615 | ····audit_arch:·b64 |
| 48616 | ··when: | 48616 | ··when: |
| 48617 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48618 | ··-·'"audit"·in·ansible_facts.packages' | 48617 | ··-·'"audit"·in·ansible_facts.packages' |
| 48618 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48619 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 48619 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 48620 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 48620 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 48621 | ··tags: | 48621 | ··tags: |
| 48622 | ··-·NIST-800-53-AC-2(4) | 48622 | ··-·NIST-800-53-AC-2(4) |
| 48623 | ··-·NIST-800-53-AC-6(9) | 48623 | ··-·NIST-800-53-AC-6(9) |
| 48624 | ··-·NIST-800-53-AU-12(c) | 48624 | ··-·NIST-800-53-AU-12(c) |
| 48625 | ··-·NIST-800-53-AU-2(d) | 48625 | ··-·NIST-800-53-AU-2(d) |
| Offset 48749, 16 lines modified | Offset 48749, 16 lines modified | ||
| 48749 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 48749 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 48750 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 48750 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 48751 | ······create:·true | 48751 | ······create:·true |
| 48752 | ······mode:·o-rwx | 48752 | ······mode:·o-rwx |
| 48753 | ······state:·present | 48753 | ······state:·present |
| 48754 | ····when:·syscalls_found·|·length·==·0 | 48754 | ····when:·syscalls_found·|·length·==·0 |
| 48755 | ··when: | 48755 | ··when: |
| 48756 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48757 | ··-·'"audit"·in·ansible_facts.packages' | 48756 | ··-·'"audit"·in·ansible_facts.packages' |
| 48757 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48758 | ··tags: | 48758 | ··tags: |
| 48759 | ··-·NIST-800-53-AC-2(4) | 48759 | ··-·NIST-800-53-AC-2(4) |
| 48760 | ··-·NIST-800-53-AC-6(9) | 48760 | ··-·NIST-800-53-AC-6(9) |
| 48761 | ··-·NIST-800-53-AU-12(c) | 48761 | ··-·NIST-800-53-AU-12(c) |
| 48762 | ··-·NIST-800-53-AU-2(d) | 48762 | ··-·NIST-800-53-AU-2(d) |
| 48763 | ··-·NIST-800-53-CM-6(a) | 48763 | ··-·NIST-800-53-CM-6(a) |
| 48764 | ··-·audit_rules_etc_group_open | 48764 | ··-·audit_rules_etc_group_open |
| Offset 48885, 31 lines modified | Offset 48885, 31 lines modified | ||
| 48885 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 48885 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 48886 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 48886 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 48887 | ······create:·true | 48887 | ······create:·true |
| 48888 | ······mode:·o-rwx | 48888 | ······mode:·o-rwx |
| 48889 | ······state:·present | 48889 | ······state:·present |
| 48890 | ····when:·syscalls_found·|·length·==·0 | 48890 | ····when:·syscalls_found·|·length·==·0 |
| 48891 | ··when: | 48891 | ··when: |
| 48892 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48893 | ··-·'"audit"·in·ansible_facts.packages' | 48892 | ··-·'"audit"·in·ansible_facts.packages' |
| 48893 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48894 | ··-·audit_arch·==·"b64" | 48894 | ··-·audit_arch·==·"b64" |
| 48895 | ··tags: | 48895 | ··tags: |
| 48896 | ··-·NIST-800-53-AC-2(4) | 48896 | ··-·NIST-800-53-AC-2(4) |
| 48897 | ··-·NIST-800-53-AC-6(9) | 48897 | ··-·NIST-800-53-AC-6(9) |
| 48898 | ··-·NIST-800-53-AU-12(c) | 48898 | ··-·NIST-800-53-AU-12(c) |
| 48899 | ··-·NIST-800-53-AU-2(d) | 48899 | ··-·NIST-800-53-AU-2(d) |
| 48900 | ··-·NIST-800-53-CM-6(a) | 48900 | ··-·NIST-800-53-CM-6(a) |
| 48901 | ··-·audit_rules_etc_group_open | 48901 | ··-·audit_rules_etc_group_open |
| 48902 | ··-·low_complexity | 48902 | ··-·low_complexity |
| 48903 | ··-·low_disruption | 48903 | ··-·low_disruption |
| 48904 | ··-·medium_severity | 48904 | ··-·medium_severity |
| 48905 | ··-·reboot_required | 48905 | ··-·reboot_required |
| 48906 | ··-·restrict_strategy</xccdf-1.2:fix> | 48906 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 48907 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 48907 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 48908 | if· | 48908 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 48909 | #·First·perform·the·remediation·of·the·syscall·rule | 48909 | #·First·perform·the·remediation·of·the·syscall·rule |
| 48910 | #·Retrieve·hardware·architecture·of·the·underlying·system | 48910 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 48911 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 48911 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 48912 | for·ARCH·in·"${RULE_ARCHS[@]}" | 48912 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 48913 | do | 48913 | do |
| Offset 49305, 16 lines modified | Offset 49305, 16 lines modified | ||
| 49305 | ··-·reboot_required | 49305 | ··-·reboot_required |
| 49306 | ··-·restrict_strategy | 49306 | ··-·restrict_strategy |
| 49307 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 49307 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 49308 | ··set_fact: | 49308 | ··set_fact: |
| 49309 | ····audit_arch:·b64 | 49309 | ····audit_arch:·b64 |
| 49310 | ··when: | 49310 | ··when: |
| 49311 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49312 | ··-·'"audit"·in·ansible_facts.packages' | 49311 | ··-·'"audit"·in·ansible_facts.packages' |
| 49312 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49313 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 49313 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 49314 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 49314 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 49315 | ··tags: | 49315 | ··tags: |
| 49316 | ··-·NIST-800-53-AC-2(4) | 49316 | ··-·NIST-800-53-AC-2(4) |
| 49317 | ··-·NIST-800-53-AC-6(9) | 49317 | ··-·NIST-800-53-AC-6(9) |
| 49318 | ··-·NIST-800-53-AU-12(c) | 49318 | ··-·NIST-800-53-AU-12(c) |
| 49319 | ··-·NIST-800-53-AU-2(d) | 49319 | ··-·NIST-800-53-AU-2(d) |
| Offset 49443, 16 lines modified | Offset 49443, 16 lines modified | ||
| 49443 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 49443 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 49444 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 49444 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 49445 | ······create:·true | 49445 | ······create:·true |
| 49446 | ······mode:·o-rwx | 49446 | ······mode:·o-rwx |
| 49447 | ······state:·present | 49447 | ······state:·present |
| 49448 | ····when:·syscalls_found·|·length·==·0 | 49448 | ····when:·syscalls_found·|·length·==·0 |
| 49449 | ··when: | 49449 | ··when: |
| 49450 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49451 | ··-·'"audit"·in·ansible_facts.packages' | 49450 | ··-·'"audit"·in·ansible_facts.packages' |
| 49451 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49452 | ··tags: | 49452 | ··tags: |
| 49453 | ··-·NIST-800-53-AC-2(4) | 49453 | ··-·NIST-800-53-AC-2(4) |
| 49454 | ··-·NIST-800-53-AC-6(9) | 49454 | ··-·NIST-800-53-AC-6(9) |
| 49455 | ··-·NIST-800-53-AU-12(c) | 49455 | ··-·NIST-800-53-AU-12(c) |
| 49456 | ··-·NIST-800-53-AU-2(d) | 49456 | ··-·NIST-800-53-AU-2(d) |
| 49457 | ··-·NIST-800-53-CM-6(a) | 49457 | ··-·NIST-800-53-CM-6(a) |
| 49458 | ··-·audit_rules_etc_group_open_by_handle_at | 49458 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 49579, 31 lines modified | Offset 49579, 31 lines modified | ||
| 49579 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 49579 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 49580 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 49580 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 49581 | ······create:·true | 49581 | ······create:·true |
| 49582 | ······mode:·o-rwx | 49582 | ······mode:·o-rwx |
| 49583 | ······state:·present | 49583 | ······state:·present |
| 49584 | ····when:·syscalls_found·|·length·==·0 | 49584 | ····when:·syscalls_found·|·length·==·0 |
| 49585 | ··when: | 49585 | ··when: |
| 49586 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49587 | ··-·'"audit"·in·ansible_facts.packages' | 49586 | ··-·'"audit"·in·ansible_facts.packages' |
| 49587 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49588 | ··-·audit_arch·==·"b64" | 49588 | ··-·audit_arch·==·"b64" |
| 49589 | ··tags: | 49589 | ··tags: |
| 49590 | ··-·NIST-800-53-AC-2(4) | 49590 | ··-·NIST-800-53-AC-2(4) |
| 49591 | ··-·NIST-800-53-AC-6(9) | 49591 | ··-·NIST-800-53-AC-6(9) |
| 49592 | ··-·NIST-800-53-AU-12(c) | 49592 | ··-·NIST-800-53-AU-12(c) |
| 49593 | ··-·NIST-800-53-AU-2(d) | 49593 | ··-·NIST-800-53-AU-2(d) |
| 49594 | ··-·NIST-800-53-CM-6(a) | 49594 | ··-·NIST-800-53-CM-6(a) |
| 49595 | ··-·audit_rules_etc_group_open_by_handle_at | 49595 | ··-·audit_rules_etc_group_open_by_handle_at |
| 49596 | ··-·low_complexity | 49596 | ··-·low_complexity |
| 49597 | ··-·low_disruption | 49597 | ··-·low_disruption |
| 49598 | ··-·medium_severity | 49598 | ··-·medium_severity |
| 49599 | ··-·reboot_required | 49599 | ··-·reboot_required |
| Max diff block lines reached; 537557/543421 bytes (98.92%) of diff not shown. | |||
| Offset 48457, 16 lines modified | Offset 48457, 16 lines modified | ||
| 48457 | ··-·reboot_required | 48457 | ··-·reboot_required |
| 48458 | ··-·restrict_strategy | 48458 | ··-·restrict_strategy |
| 48459 | -·name:·Set·architecture·for·audit·open·tasks | 48459 | -·name:·Set·architecture·for·audit·open·tasks |
| 48460 | ··set_fact: | 48460 | ··set_fact: |
| 48461 | ····audit_arch:·b64 | 48461 | ····audit_arch:·b64 |
| 48462 | ··when: | 48462 | ··when: |
| 48463 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48464 | ··-·'"audit"·in·ansible_facts.packages' | 48463 | ··-·'"audit"·in·ansible_facts.packages' |
| 48464 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48465 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 48465 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 48466 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 48466 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 48467 | ··tags: | 48467 | ··tags: |
| 48468 | ··-·NIST-800-53-AC-2(4) | 48468 | ··-·NIST-800-53-AC-2(4) |
| 48469 | ··-·NIST-800-53-AC-6(9) | 48469 | ··-·NIST-800-53-AC-6(9) |
| 48470 | ··-·NIST-800-53-AU-12(c) | 48470 | ··-·NIST-800-53-AU-12(c) |
| 48471 | ··-·NIST-800-53-AU-2(d) | 48471 | ··-·NIST-800-53-AU-2(d) |
| Offset 48595, 16 lines modified | Offset 48595, 16 lines modified | ||
| 48595 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 48595 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 48596 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 48596 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 48597 | ······create:·true | 48597 | ······create:·true |
| 48598 | ······mode:·o-rwx | 48598 | ······mode:·o-rwx |
| 48599 | ······state:·present | 48599 | ······state:·present |
| 48600 | ····when:·syscalls_found·|·length·==·0 | 48600 | ····when:·syscalls_found·|·length·==·0 |
| 48601 | ··when: | 48601 | ··when: |
| 48602 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48603 | ··-·'"audit"·in·ansible_facts.packages' | 48602 | ··-·'"audit"·in·ansible_facts.packages' |
| 48603 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48604 | ··tags: | 48604 | ··tags: |
| 48605 | ··-·NIST-800-53-AC-2(4) | 48605 | ··-·NIST-800-53-AC-2(4) |
| 48606 | ··-·NIST-800-53-AC-6(9) | 48606 | ··-·NIST-800-53-AC-6(9) |
| 48607 | ··-·NIST-800-53-AU-12(c) | 48607 | ··-·NIST-800-53-AU-12(c) |
| 48608 | ··-·NIST-800-53-AU-2(d) | 48608 | ··-·NIST-800-53-AU-2(d) |
| 48609 | ··-·NIST-800-53-CM-6(a) | 48609 | ··-·NIST-800-53-CM-6(a) |
| 48610 | ··-·audit_rules_etc_group_open | 48610 | ··-·audit_rules_etc_group_open |
| Offset 48731, 31 lines modified | Offset 48731, 31 lines modified | ||
| 48731 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group | 48731 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a1&03·-F·path=/etc/group |
| 48732 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 48732 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 48733 | ······create:·true | 48733 | ······create:·true |
| 48734 | ······mode:·o-rwx | 48734 | ······mode:·o-rwx |
| 48735 | ······state:·present | 48735 | ······state:·present |
| 48736 | ····when:·syscalls_found·|·length·==·0 | 48736 | ····when:·syscalls_found·|·length·==·0 |
| 48737 | ··when: | 48737 | ··when: |
| 48738 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48739 | ··-·'"audit"·in·ansible_facts.packages' | 48738 | ··-·'"audit"·in·ansible_facts.packages' |
| 48739 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 48740 | ··-·audit_arch·==·"b64" | 48740 | ··-·audit_arch·==·"b64" |
| 48741 | ··tags: | 48741 | ··tags: |
| 48742 | ··-·NIST-800-53-AC-2(4) | 48742 | ··-·NIST-800-53-AC-2(4) |
| 48743 | ··-·NIST-800-53-AC-6(9) | 48743 | ··-·NIST-800-53-AC-6(9) |
| 48744 | ··-·NIST-800-53-AU-12(c) | 48744 | ··-·NIST-800-53-AU-12(c) |
| 48745 | ··-·NIST-800-53-AU-2(d) | 48745 | ··-·NIST-800-53-AU-2(d) |
| 48746 | ··-·NIST-800-53-CM-6(a) | 48746 | ··-·NIST-800-53-CM-6(a) |
| 48747 | ··-·audit_rules_etc_group_open | 48747 | ··-·audit_rules_etc_group_open |
| 48748 | ··-·low_complexity | 48748 | ··-·low_complexity |
| 48749 | ··-·low_disruption | 48749 | ··-·low_disruption |
| 48750 | ··-·medium_severity | 48750 | ··-·medium_severity |
| 48751 | ··-·reboot_required | 48751 | ··-·reboot_required |
| 48752 | ··-·restrict_strategy</xccdf-1.2:fix> | 48752 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 48753 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms | 48753 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="audit_rules_etc_group_open">#·Remediation·is·applicable·only·in·certain·platforms |
| 48754 | if· | 48754 | if·rpm·--quiet·-q·audit·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 48755 | #·First·perform·the·remediation·of·the·syscall·rule | 48755 | #·First·perform·the·remediation·of·the·syscall·rule |
| 48756 | #·Retrieve·hardware·architecture·of·the·underlying·system | 48756 | #·Retrieve·hardware·architecture·of·the·underlying·system |
| 48757 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") | 48757 | [·"$(getconf·LONG_BIT)"·=·"32"·]·&&·RULE_ARCHS=("b32")·||·RULE_ARCHS=("b32"·"b64") |
| 48758 | for·ARCH·in·"${RULE_ARCHS[@]}" | 48758 | for·ARCH·in·"${RULE_ARCHS[@]}" |
| 48759 | do | 48759 | do |
| Offset 49151, 16 lines modified | Offset 49151, 16 lines modified | ||
| 49151 | ··-·reboot_required | 49151 | ··-·reboot_required |
| 49152 | ··-·restrict_strategy | 49152 | ··-·restrict_strategy |
| 49153 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks | 49153 | -·name:·Set·architecture·for·audit·open_by_handle_at·tasks |
| 49154 | ··set_fact: | 49154 | ··set_fact: |
| 49155 | ····audit_arch:·b64 | 49155 | ····audit_arch:·b64 |
| 49156 | ··when: | 49156 | ··when: |
| 49157 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49158 | ··-·'"audit"·in·ansible_facts.packages' | 49157 | ··-·'"audit"·in·ansible_facts.packages' |
| 49158 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49159 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture | 49159 | ··-·ansible_architecture·==·"aarch64"·or·ansible_architecture·==·"ppc64"·or·ansible_architecture |
| 49160 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" | 49160 | ····==·"ppc64le"·or·ansible_architecture·==·"s390x"·or·ansible_architecture·==·"x86_64" |
| 49161 | ··tags: | 49161 | ··tags: |
| 49162 | ··-·NIST-800-53-AC-2(4) | 49162 | ··-·NIST-800-53-AC-2(4) |
| 49163 | ··-·NIST-800-53-AC-6(9) | 49163 | ··-·NIST-800-53-AC-6(9) |
| 49164 | ··-·NIST-800-53-AU-12(c) | 49164 | ··-·NIST-800-53-AU-12(c) |
| 49165 | ··-·NIST-800-53-AU-2(d) | 49165 | ··-·NIST-800-53-AU-2(d) |
| Offset 49289, 16 lines modified | Offset 49289, 16 lines modified | ||
| 49289 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 49289 | ······line:·-a·always,exit·-F·arch=b32·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 49290 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 49290 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 49291 | ······create:·true | 49291 | ······create:·true |
| 49292 | ······mode:·o-rwx | 49292 | ······mode:·o-rwx |
| 49293 | ······state:·present | 49293 | ······state:·present |
| 49294 | ····when:·syscalls_found·|·length·==·0 | 49294 | ····when:·syscalls_found·|·length·==·0 |
| 49295 | ··when: | 49295 | ··when: |
| 49296 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49297 | ··-·'"audit"·in·ansible_facts.packages' | 49296 | ··-·'"audit"·in·ansible_facts.packages' |
| 49297 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49298 | ··tags: | 49298 | ··tags: |
| 49299 | ··-·NIST-800-53-AC-2(4) | 49299 | ··-·NIST-800-53-AC-2(4) |
| 49300 | ··-·NIST-800-53-AC-6(9) | 49300 | ··-·NIST-800-53-AC-6(9) |
| 49301 | ··-·NIST-800-53-AU-12(c) | 49301 | ··-·NIST-800-53-AU-12(c) |
| 49302 | ··-·NIST-800-53-AU-2(d) | 49302 | ··-·NIST-800-53-AU-2(d) |
| 49303 | ··-·NIST-800-53-CM-6(a) | 49303 | ··-·NIST-800-53-CM-6(a) |
| 49304 | ··-·audit_rules_etc_group_open_by_handle_at | 49304 | ··-·audit_rules_etc_group_open_by_handle_at |
| Offset 49425, 31 lines modified | Offset 49425, 31 lines modified | ||
| 49425 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group | 49425 | ······line:·-a·always,exit·-F·arch=b64·-S·{{·syscalls·|·join(',')·}}·-F·a2&03·-F·path=/etc/group |
| 49426 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify | 49426 | ········-F·auid>=1000·-F·auid!=unset·-F·key=modify |
| 49427 | ······create:·true | 49427 | ······create:·true |
| 49428 | ······mode:·o-rwx | 49428 | ······mode:·o-rwx |
| 49429 | ······state:·present | 49429 | ······state:·present |
| 49430 | ····when:·syscalls_found·|·length·==·0 | 49430 | ····when:·syscalls_found·|·length·==·0 |
| 49431 | ··when: | 49431 | ··when: |
| 49432 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49433 | ··-·'"audit"·in·ansible_facts.packages' | 49432 | ··-·'"audit"·in·ansible_facts.packages' |
| 49433 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 49434 | ··-·audit_arch·==·"b64" | 49434 | ··-·audit_arch·==·"b64" |
| 49435 | ··tags: | 49435 | ··tags: |
| 49436 | ··-·NIST-800-53-AC-2(4) | 49436 | ··-·NIST-800-53-AC-2(4) |
| 49437 | ··-·NIST-800-53-AC-6(9) | 49437 | ··-·NIST-800-53-AC-6(9) |
| 49438 | ··-·NIST-800-53-AU-12(c) | 49438 | ··-·NIST-800-53-AU-12(c) |
| 49439 | ··-·NIST-800-53-AU-2(d) | 49439 | ··-·NIST-800-53-AU-2(d) |
| 49440 | ··-·NIST-800-53-CM-6(a) | 49440 | ··-·NIST-800-53-CM-6(a) |
| 49441 | ··-·audit_rules_etc_group_open_by_handle_at | 49441 | ··-·audit_rules_etc_group_open_by_handle_at |
| 49442 | ··-·low_complexity | 49442 | ··-·low_complexity |
| 49443 | ··-·low_disruption | 49443 | ··-·low_disruption |
| 49444 | ··-·medium_severity | 49444 | ··-·medium_severity |
| 49445 | ··-·reboot_required | 49445 | ··-·reboot_required |
| Max diff block lines reached; 536259/542119 bytes (98.92%) of diff not shown. | |||
| Offset 115243, 16 lines modified | Offset 115243, 16 lines modified | ||
| 115243 | ··-·no_reboot_needed | 115243 | ··-·no_reboot_needed |
| 115244 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 115244 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 115245 | ··stat: | 115245 | ··stat: |
| 115246 | ····path:·/boot/grub2/user.cfg | 115246 | ····path:·/boot/grub2/user.cfg |
| 115247 | ··register:·file_exists | 115247 | ··register:·file_exists |
| 115248 | ··when: | 115248 | ··when: |
| 115249 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115250 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 115249 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 115250 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115251 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 115251 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 115252 | ··tags: | 115252 | ··tags: |
| 115253 | ··-·CJIS-5.5.2.2 | 115253 | ··-·CJIS-5.5.2.2 |
| 115254 | ··-·NIST-800-171-3.4.5 | 115254 | ··-·NIST-800-171-3.4.5 |
| 115255 | ··-·NIST-800-53-AC-6(1) | 115255 | ··-·NIST-800-53-AC-6(1) |
| 115256 | ··-·NIST-800-53-CM-6(a) | 115256 | ··-·NIST-800-53-CM-6(a) |
| 115257 | ··-·PCI-DSS-Req-7.1 | 115257 | ··-·PCI-DSS-Req-7.1 |
| Offset 115264, 16 lines modified | Offset 115264, 16 lines modified | ||
| 115264 | ··-·no_reboot_needed | 115264 | ··-·no_reboot_needed |
| 115265 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 115265 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 115266 | ··file: | 115266 | ··file: |
| 115267 | ····path:·/boot/grub2/user.cfg | 115267 | ····path:·/boot/grub2/user.cfg |
| 115268 | ····group:·'0' | 115268 | ····group:·'0' |
| 115269 | ··when: | 115269 | ··when: |
| 115270 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115271 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 115270 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 115271 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115272 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 115272 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 115273 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 115273 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 115274 | ··tags: | 115274 | ··tags: |
| 115275 | ··-·CJIS-5.5.2.2 | 115275 | ··-·CJIS-5.5.2.2 |
| 115276 | ··-·NIST-800-171-3.4.5 | 115276 | ··-·NIST-800-171-3.4.5 |
| 115277 | ··-·NIST-800-53-AC-6(1) | 115277 | ··-·NIST-800-53-AC-6(1) |
| 115278 | ··-·NIST-800-53-CM-6(a) | 115278 | ··-·NIST-800-53-CM-6(a) |
| Offset 115281, 15 lines modified | Offset 115281, 15 lines modified | ||
| 115281 | ··-·configure_strategy | 115281 | ··-·configure_strategy |
| 115282 | ··-·file_groupowner_efi_user_cfg | 115282 | ··-·file_groupowner_efi_user_cfg |
| 115283 | ··-·low_complexity | 115283 | ··-·low_complexity |
| 115284 | ··-·low_disruption | 115284 | ··-·low_disruption |
| 115285 | ··-·medium_severity | 115285 | ··-·medium_severity |
| 115286 | ··-·no_reboot_needed</xccdf-1.2:fix> | 115286 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 115287 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 115287 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 115288 | if· | 115288 | if·[·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 115289 | chgrp·0·/boot/grub2/user.cfg | 115289 | chgrp·0·/boot/grub2/user.cfg |
| 115290 | else | 115290 | else |
| 115291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 115291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 115292 | fi</xccdf-1.2:fix> | 115292 | fi</xccdf-1.2:fix> |
| 115293 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 115293 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 158759, 25 lines modified | Offset 158759, 25 lines modified | ||
| 158759 | ····lineinfile: | 158759 | ····lineinfile: |
| 158760 | ······path:·/etc/postfix/main.cf | 158760 | ······path:·/etc/postfix/main.cf |
| 158761 | ······create:·true | 158761 | ······create:·true |
| 158762 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 158762 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 158763 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 158763 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 158764 | ······state:·present | 158764 | ······state:·present |
| 158765 | ··when: | 158765 | ··when: |
| 158766 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 158767 | ··-·'"postfix"·in·ansible_facts.packages' | 158766 | ··-·'"postfix"·in·ansible_facts.packages' |
| 158767 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 158768 | ··tags: | 158768 | ··tags: |
| 158769 | ··-·low_complexity | 158769 | ··-·low_complexity |
| 158770 | ··-·low_disruption | 158770 | ··-·low_disruption |
| 158771 | ··-·medium_severity | 158771 | ··-·medium_severity |
| 158772 | ··-·no_reboot_needed | 158772 | ··-·no_reboot_needed |
| 158773 | ··-·postfix_prevent_unrestricted_relay | 158773 | ··-·postfix_prevent_unrestricted_relay |
| 158774 | ··-·restrict_strategy</xccdf-1.2:fix> | 158774 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 158775 | ··················<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="postfix_prevent_unrestricted_relay">#·Remediation·is·applicable·only·in·certain·platforms | 158775 | ··················<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="postfix_prevent_unrestricted_relay">#·Remediation·is·applicable·only·in·certain·platforms |
| 158776 | if· | 158776 | if·rpm·--quiet·-q·postfix·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 158777 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 158777 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 158778 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 158778 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 158779 | else | 158779 | else |
| 158780 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 158780 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 158781 | fi | 158781 | fi |
| Offset 115245, 16 lines modified | Offset 115245, 16 lines modified | ||
| 115245 | ··-·no_reboot_needed | 115245 | ··-·no_reboot_needed |
| 115246 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 115246 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 115247 | ··stat: | 115247 | ··stat: |
| 115248 | ····path:·/boot/grub2/user.cfg | 115248 | ····path:·/boot/grub2/user.cfg |
| 115249 | ··register:·file_exists | 115249 | ··register:·file_exists |
| 115250 | ··when: | 115250 | ··when: |
| 115251 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115252 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 115251 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 115252 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 115253 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 115254 | ··tags: | 115254 | ··tags: |
| 115255 | ··-·CJIS-5.5.2.2 | 115255 | ··-·CJIS-5.5.2.2 |
| 115256 | ··-·NIST-800-171-3.4.5 | 115256 | ··-·NIST-800-171-3.4.5 |
| 115257 | ··-·NIST-800-53-AC-6(1) | 115257 | ··-·NIST-800-53-AC-6(1) |
| 115258 | ··-·NIST-800-53-CM-6(a) | 115258 | ··-·NIST-800-53-CM-6(a) |
| 115259 | ··-·PCI-DSS-Req-7.1 | 115259 | ··-·PCI-DSS-Req-7.1 |
| Offset 115266, 16 lines modified | Offset 115266, 16 lines modified | ||
| 115266 | ··-·no_reboot_needed | 115266 | ··-·no_reboot_needed |
| 115267 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 115267 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 115268 | ··file: | 115268 | ··file: |
| 115269 | ····path:·/boot/grub2/user.cfg | 115269 | ····path:·/boot/grub2/user.cfg |
| 115270 | ····group:·'0' | 115270 | ····group:·'0' |
| 115271 | ··when: | 115271 | ··when: |
| 115272 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115273 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 115272 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 115273 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115274 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 115274 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 115275 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 115275 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 115276 | ··tags: | 115276 | ··tags: |
| 115277 | ··-·CJIS-5.5.2.2 | 115277 | ··-·CJIS-5.5.2.2 |
| 115278 | ··-·NIST-800-171-3.4.5 | 115278 | ··-·NIST-800-171-3.4.5 |
| 115279 | ··-·NIST-800-53-AC-6(1) | 115279 | ··-·NIST-800-53-AC-6(1) |
| 115280 | ··-·NIST-800-53-CM-6(a) | 115280 | ··-·NIST-800-53-CM-6(a) |
| Offset 115283, 15 lines modified | Offset 115283, 15 lines modified | ||
| 115283 | ··-·configure_strategy | 115283 | ··-·configure_strategy |
| 115284 | ··-·file_groupowner_efi_user_cfg | 115284 | ··-·file_groupowner_efi_user_cfg |
| 115285 | ··-·low_complexity | 115285 | ··-·low_complexity |
| 115286 | ··-·low_disruption | 115286 | ··-·low_disruption |
| 115287 | ··-·medium_severity | 115287 | ··-·medium_severity |
| 115288 | ··-·no_reboot_needed</xccdf-1.2:fix> | 115288 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 115289 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 115289 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 115290 | if· | 115290 | if·[·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 115291 | chgrp·0·/boot/grub2/user.cfg | 115291 | chgrp·0·/boot/grub2/user.cfg |
| 115292 | else | 115292 | else |
| 115293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 115293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 115294 | fi</xccdf-1.2:fix> | 115294 | fi</xccdf-1.2:fix> |
| 115295 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 115295 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 158761, 25 lines modified | Offset 158761, 25 lines modified | ||
| 158761 | ····lineinfile: | 158761 | ····lineinfile: |
| 158762 | ······path:·/etc/postfix/main.cf | 158762 | ······path:·/etc/postfix/main.cf |
| 158763 | ······create:·true | 158763 | ······create:·true |
| 158764 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 158764 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 158765 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 158765 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 158766 | ······state:·present | 158766 | ······state:·present |
| 158767 | ··when: | 158767 | ··when: |
| 158768 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 158769 | ··-·'"postfix"·in·ansible_facts.packages' | 158768 | ··-·'"postfix"·in·ansible_facts.packages' |
| 158769 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 158770 | ··tags: | 158770 | ··tags: |
| 158771 | ··-·low_complexity | 158771 | ··-·low_complexity |
| 158772 | ··-·low_disruption | 158772 | ··-·low_disruption |
| 158773 | ··-·medium_severity | 158773 | ··-·medium_severity |
| 158774 | ··-·no_reboot_needed | 158774 | ··-·no_reboot_needed |
| 158775 | ··-·postfix_prevent_unrestricted_relay | 158775 | ··-·postfix_prevent_unrestricted_relay |
| 158776 | ··-·restrict_strategy</xccdf-1.2:fix> | 158776 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 158777 | ··················<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="postfix_prevent_unrestricted_relay">#·Remediation·is·applicable·only·in·certain·platforms | 158777 | ··················<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="postfix_prevent_unrestricted_relay">#·Remediation·is·applicable·only·in·certain·platforms |
| 158778 | if· | 158778 | if·rpm·--quiet·-q·postfix·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 158779 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 158779 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 158780 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 158780 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 158781 | else | 158781 | else |
| 158782 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 158782 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 158783 | fi | 158783 | fi |
| Offset 115107, 16 lines modified | Offset 115107, 16 lines modified | ||
| 115107 | ··-·no_reboot_needed | 115107 | ··-·no_reboot_needed |
| 115108 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 115108 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 115109 | ··stat: | 115109 | ··stat: |
| 115110 | ····path:·/boot/grub2/user.cfg | 115110 | ····path:·/boot/grub2/user.cfg |
| 115111 | ··register:·file_exists | 115111 | ··register:·file_exists |
| 115112 | ··when: | 115112 | ··when: |
| 115113 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115114 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 115113 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 115114 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115115 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 115115 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 115116 | ··tags: | 115116 | ··tags: |
| 115117 | ··-·CJIS-5.5.2.2 | 115117 | ··-·CJIS-5.5.2.2 |
| 115118 | ··-·NIST-800-171-3.4.5 | 115118 | ··-·NIST-800-171-3.4.5 |
| 115119 | ··-·NIST-800-53-AC-6(1) | 115119 | ··-·NIST-800-53-AC-6(1) |
| 115120 | ··-·NIST-800-53-CM-6(a) | 115120 | ··-·NIST-800-53-CM-6(a) |
| 115121 | ··-·PCI-DSS-Req-7.1 | 115121 | ··-·PCI-DSS-Req-7.1 |
| Offset 115128, 16 lines modified | Offset 115128, 16 lines modified | ||
| 115128 | ··-·no_reboot_needed | 115128 | ··-·no_reboot_needed |
| 115129 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 115129 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 115130 | ··file: | 115130 | ··file: |
| 115131 | ····path:·/boot/grub2/user.cfg | 115131 | ····path:·/boot/grub2/user.cfg |
| 115132 | ····group:·'0' | 115132 | ····group:·'0' |
| 115133 | ··when: | 115133 | ··when: |
| 115134 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115135 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | 115134 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 115135 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 115136 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 115136 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 115137 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 115137 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 115138 | ··tags: | 115138 | ··tags: |
| 115139 | ··-·CJIS-5.5.2.2 | 115139 | ··-·CJIS-5.5.2.2 |
| 115140 | ··-·NIST-800-171-3.4.5 | 115140 | ··-·NIST-800-171-3.4.5 |
| 115141 | ··-·NIST-800-53-AC-6(1) | 115141 | ··-·NIST-800-53-AC-6(1) |
| 115142 | ··-·NIST-800-53-CM-6(a) | 115142 | ··-·NIST-800-53-CM-6(a) |
| Offset 115145, 15 lines modified | Offset 115145, 15 lines modified | ||
| 115145 | ··-·configure_strategy | 115145 | ··-·configure_strategy |
| 115146 | ··-·file_groupowner_efi_user_cfg | 115146 | ··-·file_groupowner_efi_user_cfg |
| 115147 | ··-·low_complexity | 115147 | ··-·low_complexity |
| 115148 | ··-·low_disruption | 115148 | ··-·low_disruption |
| 115149 | ··-·medium_severity | 115149 | ··-·medium_severity |
| 115150 | ··-·no_reboot_needed</xccdf-1.2:fix> | 115150 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 115151 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 115151 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 115152 | if· | 115152 | if·[·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 115153 | chgrp·0·/boot/grub2/user.cfg | 115153 | chgrp·0·/boot/grub2/user.cfg |
| 115154 | else | 115154 | else |
| 115155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 115155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 115156 | fi</xccdf-1.2:fix> | 115156 | fi</xccdf-1.2:fix> |
| 115157 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 115157 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 158623, 25 lines modified | Offset 158623, 25 lines modified | ||
| 158623 | ····lineinfile: | 158623 | ····lineinfile: |
| 158624 | ······path:·/etc/postfix/main.cf | 158624 | ······path:·/etc/postfix/main.cf |
| 158625 | ······create:·true | 158625 | ······create:·true |
| 158626 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* | 158626 | ······regexp:·^[·\t]*smtpd_client_restrictions\s*=\s* |
| 158627 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject | 158627 | ······line:·smtpd_client_restrictions·=·permit_mynetworks,reject |
| 158628 | ······state:·present | 158628 | ······state:·present |
| 158629 | ··when: | 158629 | ··when: |
| 158630 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 158631 | ··-·'"postfix"·in·ansible_facts.packages' | 158630 | ··-·'"postfix"·in·ansible_facts.packages' |
| 158631 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 158632 | ··tags: | 158632 | ··tags: |
| 158633 | ··-·low_complexity | 158633 | ··-·low_complexity |
| 158634 | ··-·low_disruption | 158634 | ··-·low_disruption |
| 158635 | ··-·medium_severity | 158635 | ··-·medium_severity |
| 158636 | ··-·no_reboot_needed | 158636 | ··-·no_reboot_needed |
| 158637 | ··-·postfix_prevent_unrestricted_relay | 158637 | ··-·postfix_prevent_unrestricted_relay |
| 158638 | ··-·restrict_strategy</xccdf-1.2:fix> | 158638 | ··-·restrict_strategy</xccdf-1.2:fix> |
| 158639 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="postfix_prevent_unrestricted_relay">#·Remediation·is·applicable·only·in·certain·platforms | 158639 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="postfix_prevent_unrestricted_relay">#·Remediation·is·applicable·only·in·certain·platforms |
| 158640 | if· | 158640 | if·rpm·--quiet·-q·postfix·&&·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 158641 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then | 158641 | if·!·grep·-q·^smtpd_client_restrictions·/etc/postfix/main.cf;·then |
| 158642 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf | 158642 | » echo·"smtpd_client_restrictions·=·permit_mynetworks,reject"·>>·/etc/postfix/main.cf |
| 158643 | else | 158643 | else |
| 158644 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf | 158644 | » sed·-i·"s/^smtpd_client_restrictions.*/smtpd_client_restrictions·=·permit_mynetworks,reject/g"·/etc/postfix/main.cf |
| 158645 | fi | 158645 | fi |
| Offset 6906, 16 lines modified | Offset 6906, 16 lines modified | ||
| 6906 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 6906 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 6907 | ··find: | 6907 | ··find: |
| 6908 | ····paths:·/etc/audit/rules.d/ | 6908 | ····paths:·/etc/audit/rules.d/ |
| 6909 | ····patterns:·'*.rules' | 6909 | ····patterns:·'*.rules' |
| 6910 | ··register:·find_rules_d | 6910 | ··register:·find_rules_d |
| 6911 | ··when: | 6911 | ··when: |
| 6912 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6913 | ··-·'"audit"·in·ansible_facts.packages' | 6912 | ··-·'"audit"·in·ansible_facts.packages' |
| 6913 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6914 | ··tags: | 6914 | ··tags: |
| 6915 | ··-·CJIS-5.4.1.1 | 6915 | ··-·CJIS-5.4.1.1 |
| 6916 | ··-·NIST-800-171-3.3.1 | 6916 | ··-·NIST-800-171-3.3.1 |
| 6917 | ··-·NIST-800-171-3.4.3 | 6917 | ··-·NIST-800-171-3.4.3 |
| 6918 | ··-·NIST-800-53-AC-6(9) | 6918 | ··-·NIST-800-53-AC-6(9) |
| 6919 | ··-·NIST-800-53-CM-6(a) | 6919 | ··-·NIST-800-53-CM-6(a) |
| 6920 | ··-·PCI-DSS-Req-10.5.2 | 6920 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 6930, 16 lines modified | Offset 6930, 16 lines modified | ||
| 6930 | ··lineinfile: | 6930 | ··lineinfile: |
| 6931 | ····path:·'{{·item·}}' | 6931 | ····path:·'{{·item·}}' |
| 6932 | ····regexp:·^\s*(?:-e)\s+.*$ | 6932 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 6933 | ····state:·absent | 6933 | ····state:·absent |
| 6934 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 6934 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 6935 | ····}}' | 6935 | ····}}' |
| 6936 | ··when: | 6936 | ··when: |
| 6937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6938 | ··-·'"audit"·in·ansible_facts.packages' | 6937 | ··-·'"audit"·in·ansible_facts.packages' |
| 6938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6939 | ··tags: | 6939 | ··tags: |
| 6940 | ··-·CJIS-5.4.1.1 | 6940 | ··-·CJIS-5.4.1.1 |
| 6941 | ··-·NIST-800-171-3.3.1 | 6941 | ··-·NIST-800-171-3.3.1 |
| 6942 | ··-·NIST-800-171-3.4.3 | 6942 | ··-·NIST-800-171-3.4.3 |
| 6943 | ··-·NIST-800-53-AC-6(9) | 6943 | ··-·NIST-800-53-AC-6(9) |
| 6944 | ··-·NIST-800-53-CM-6(a) | 6944 | ··-·NIST-800-53-CM-6(a) |
| 6945 | ··-·PCI-DSS-Req-10.5.2 | 6945 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 6956, 16 lines modified | Offset 6956, 16 lines modified | ||
| 6956 | ····create:·true | 6956 | ····create:·true |
| 6957 | ····line:·-e·2 | 6957 | ····line:·-e·2 |
| 6958 | ····mode:·o-rwx | 6958 | ····mode:·o-rwx |
| 6959 | ··loop: | 6959 | ··loop: |
| 6960 | ··-·/etc/audit/audit.rules | 6960 | ··-·/etc/audit/audit.rules |
| 6961 | ··-·/etc/audit/rules.d/immutable.rules | 6961 | ··-·/etc/audit/rules.d/immutable.rules |
| 6962 | ··when: | 6962 | ··when: |
| 6963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6964 | ··-·'"audit"·in·ansible_facts.packages' | 6963 | ··-·'"audit"·in·ansible_facts.packages' |
| 6964 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6965 | ··tags: | 6965 | ··tags: |
| 6966 | ··-·CJIS-5.4.1.1 | 6966 | ··-·CJIS-5.4.1.1 |
| 6967 | ··-·NIST-800-171-3.3.1 | 6967 | ··-·NIST-800-171-3.3.1 |
| 6968 | ··-·NIST-800-171-3.4.3 | 6968 | ··-·NIST-800-171-3.4.3 |
| 6969 | ··-·NIST-800-53-AC-6(9) | 6969 | ··-·NIST-800-53-AC-6(9) |
| 6970 | ··-·NIST-800-53-CM-6(a) | 6970 | ··-·NIST-800-53-CM-6(a) |
| 6971 | ··-·PCI-DSS-Req-10.5.2 | 6971 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 7845, 16 lines modified | Offset 7845, 16 lines modified | ||
| 7845 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 7845 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 7846 | ··find: | 7846 | ··find: |
| 7847 | ····paths:·/etc/audit/rules.d | 7847 | ····paths:·/etc/audit/rules.d |
| 7848 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 7848 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 7849 | ····patterns:·'*.rules' | 7849 | ····patterns:·'*.rules' |
| 7850 | ··register:·find_existing_watch_rules_d | 7850 | ··register:·find_existing_watch_rules_d |
| 7851 | ··when: | 7851 | ··when: |
| 7852 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7853 | ··-·'"audit"·in·ansible_facts.packages' | 7852 | ··-·'"audit"·in·ansible_facts.packages' |
| 7853 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7854 | ··tags: | 7854 | ··tags: |
| 7855 | ··-·CJIS-5.4.1.1 | 7855 | ··-·CJIS-5.4.1.1 |
| 7856 | ··-·NIST-800-171-3.1.7 | 7856 | ··-·NIST-800-171-3.1.7 |
| 7857 | ··-·NIST-800-53-AC-2(7)(b) | 7857 | ··-·NIST-800-53-AC-2(7)(b) |
| 7858 | ··-·NIST-800-53-AC-6(9) | 7858 | ··-·NIST-800-53-AC-6(9) |
| 7859 | ··-·NIST-800-53-AU-12(c) | 7859 | ··-·NIST-800-53-AU-12(c) |
| 7860 | ··-·NIST-800-53-AU-2(d) | 7860 | ··-·NIST-800-53-AU-2(d) |
| Offset 7871, 16 lines modified | Offset 7871, 16 lines modified | ||
| 7871 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 7871 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 7872 | ··find: | 7872 | ··find: |
| 7873 | ····paths:·/etc/audit/rules.d | 7873 | ····paths:·/etc/audit/rules.d |
| 7874 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 7874 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 7875 | ····patterns:·'*.rules' | 7875 | ····patterns:·'*.rules' |
| 7876 | ··register:·find_watch_key | 7876 | ··register:·find_watch_key |
| 7877 | ··when: | 7877 | ··when: |
| 7878 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7879 | ··-·'"audit"·in·ansible_facts.packages' | 7878 | ··-·'"audit"·in·ansible_facts.packages' |
| 7879 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7880 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 7880 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 7881 | ····==·0 | 7881 | ····==·0 |
| 7882 | ··tags: | 7882 | ··tags: |
| 7883 | ··-·CJIS-5.4.1.1 | 7883 | ··-·CJIS-5.4.1.1 |
| 7884 | ··-·NIST-800-171-3.1.7 | 7884 | ··-·NIST-800-171-3.1.7 |
| 7885 | ··-·NIST-800-53-AC-2(7)(b) | 7885 | ··-·NIST-800-53-AC-2(7)(b) |
| 7886 | ··-·NIST-800-53-AC-6(9) | 7886 | ··-·NIST-800-53-AC-6(9) |
| Offset 7897, 16 lines modified | Offset 7897, 16 lines modified | ||
| 7897 | ··-·restrict_strategy | 7897 | ··-·restrict_strategy |
| 7898 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 7898 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 7899 | ··set_fact: | 7899 | ··set_fact: |
| 7900 | ····all_files: | 7900 | ····all_files: |
| 7901 | ····-·/etc/audit/rules.d/actions.rules | 7901 | ····-·/etc/audit/rules.d/actions.rules |
| 7902 | ··when: | 7902 | ··when: |
| 7903 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7904 | ··-·'"audit"·in·ansible_facts.packages' | 7903 | ··-·'"audit"·in·ansible_facts.packages' |
| 7904 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7905 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 7905 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 7906 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 7906 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 7907 | ··tags: | 7907 | ··tags: |
| 7908 | ··-·CJIS-5.4.1.1 | 7908 | ··-·CJIS-5.4.1.1 |
| 7909 | ··-·NIST-800-171-3.1.7 | 7909 | ··-·NIST-800-171-3.1.7 |
| 7910 | ··-·NIST-800-53-AC-2(7)(b) | 7910 | ··-·NIST-800-53-AC-2(7)(b) |
| 7911 | ··-·NIST-800-53-AC-6(9) | 7911 | ··-·NIST-800-53-AC-6(9) |
| Offset 7923, 16 lines modified | Offset 7923, 16 lines modified | ||
| 7923 | ··-·restrict_strategy | 7923 | ··-·restrict_strategy |
| 7924 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 7924 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 7925 | ··set_fact: | 7925 | ··set_fact: |
| 7926 | ····all_files: | 7926 | ····all_files: |
| 7927 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 7927 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 7928 | ··when: | 7928 | ··when: |
| 7929 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7930 | ··-·'"audit"·in·ansible_facts.packages' | 7929 | ··-·'"audit"·in·ansible_facts.packages' |
| 7930 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7931 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 7931 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 7932 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 7932 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 7933 | ··tags: | 7933 | ··tags: |
| 7934 | ··-·CJIS-5.4.1.1 | 7934 | ··-·CJIS-5.4.1.1 |
| 7935 | ··-·NIST-800-171-3.1.7 | 7935 | ··-·NIST-800-171-3.1.7 |
| 7936 | ··-·NIST-800-53-AC-2(7)(b) | 7936 | ··-·NIST-800-53-AC-2(7)(b) |
| 7937 | ··-·NIST-800-53-AC-6(9) | 7937 | ··-·NIST-800-53-AC-6(9) |
| Offset 7951, 16 lines modified | Offset 7951, 16 lines modified | ||
| 7951 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 7951 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 40159/45490 bytes (88.28%) of diff not shown. | |||
| Offset 6906, 16 lines modified | Offset 6906, 16 lines modified | ||
| 6906 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 6906 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 6907 | ··find: | 6907 | ··find: |
| 6908 | ····paths:·/etc/audit/rules.d/ | 6908 | ····paths:·/etc/audit/rules.d/ |
| 6909 | ····patterns:·'*.rules' | 6909 | ····patterns:·'*.rules' |
| 6910 | ··register:·find_rules_d | 6910 | ··register:·find_rules_d |
| 6911 | ··when: | 6911 | ··when: |
| 6912 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6913 | ··-·'"audit"·in·ansible_facts.packages' | 6912 | ··-·'"audit"·in·ansible_facts.packages' |
| 6913 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6914 | ··tags: | 6914 | ··tags: |
| 6915 | ··-·CJIS-5.4.1.1 | 6915 | ··-·CJIS-5.4.1.1 |
| 6916 | ··-·NIST-800-171-3.3.1 | 6916 | ··-·NIST-800-171-3.3.1 |
| 6917 | ··-·NIST-800-171-3.4.3 | 6917 | ··-·NIST-800-171-3.4.3 |
| 6918 | ··-·NIST-800-53-AC-6(9) | 6918 | ··-·NIST-800-53-AC-6(9) |
| 6919 | ··-·NIST-800-53-CM-6(a) | 6919 | ··-·NIST-800-53-CM-6(a) |
| 6920 | ··-·PCI-DSS-Req-10.5.2 | 6920 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 6930, 16 lines modified | Offset 6930, 16 lines modified | ||
| 6930 | ··lineinfile: | 6930 | ··lineinfile: |
| 6931 | ····path:·'{{·item·}}' | 6931 | ····path:·'{{·item·}}' |
| 6932 | ····regexp:·^\s*(?:-e)\s+.*$ | 6932 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 6933 | ····state:·absent | 6933 | ····state:·absent |
| 6934 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 6934 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 6935 | ····}}' | 6935 | ····}}' |
| 6936 | ··when: | 6936 | ··when: |
| 6937 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6938 | ··-·'"audit"·in·ansible_facts.packages' | 6937 | ··-·'"audit"·in·ansible_facts.packages' |
| 6938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6939 | ··tags: | 6939 | ··tags: |
| 6940 | ··-·CJIS-5.4.1.1 | 6940 | ··-·CJIS-5.4.1.1 |
| 6941 | ··-·NIST-800-171-3.3.1 | 6941 | ··-·NIST-800-171-3.3.1 |
| 6942 | ··-·NIST-800-171-3.4.3 | 6942 | ··-·NIST-800-171-3.4.3 |
| 6943 | ··-·NIST-800-53-AC-6(9) | 6943 | ··-·NIST-800-53-AC-6(9) |
| 6944 | ··-·NIST-800-53-CM-6(a) | 6944 | ··-·NIST-800-53-CM-6(a) |
| 6945 | ··-·PCI-DSS-Req-10.5.2 | 6945 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 6956, 16 lines modified | Offset 6956, 16 lines modified | ||
| 6956 | ····create:·true | 6956 | ····create:·true |
| 6957 | ····line:·-e·2 | 6957 | ····line:·-e·2 |
| 6958 | ····mode:·o-rwx | 6958 | ····mode:·o-rwx |
| 6959 | ··loop: | 6959 | ··loop: |
| 6960 | ··-·/etc/audit/audit.rules | 6960 | ··-·/etc/audit/audit.rules |
| 6961 | ··-·/etc/audit/rules.d/immutable.rules | 6961 | ··-·/etc/audit/rules.d/immutable.rules |
| 6962 | ··when: | 6962 | ··when: |
| 6963 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6964 | ··-·'"audit"·in·ansible_facts.packages' | 6963 | ··-·'"audit"·in·ansible_facts.packages' |
| 6964 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6965 | ··tags: | 6965 | ··tags: |
| 6966 | ··-·CJIS-5.4.1.1 | 6966 | ··-·CJIS-5.4.1.1 |
| 6967 | ··-·NIST-800-171-3.3.1 | 6967 | ··-·NIST-800-171-3.3.1 |
| 6968 | ··-·NIST-800-171-3.4.3 | 6968 | ··-·NIST-800-171-3.4.3 |
| 6969 | ··-·NIST-800-53-AC-6(9) | 6969 | ··-·NIST-800-53-AC-6(9) |
| 6970 | ··-·NIST-800-53-CM-6(a) | 6970 | ··-·NIST-800-53-CM-6(a) |
| 6971 | ··-·PCI-DSS-Req-10.5.2 | 6971 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 7845, 16 lines modified | Offset 7845, 16 lines modified | ||
| 7845 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 7845 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 7846 | ··find: | 7846 | ··find: |
| 7847 | ····paths:·/etc/audit/rules.d | 7847 | ····paths:·/etc/audit/rules.d |
| 7848 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 7848 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 7849 | ····patterns:·'*.rules' | 7849 | ····patterns:·'*.rules' |
| 7850 | ··register:·find_existing_watch_rules_d | 7850 | ··register:·find_existing_watch_rules_d |
| 7851 | ··when: | 7851 | ··when: |
| 7852 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7853 | ··-·'"audit"·in·ansible_facts.packages' | 7852 | ··-·'"audit"·in·ansible_facts.packages' |
| 7853 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7854 | ··tags: | 7854 | ··tags: |
| 7855 | ··-·CJIS-5.4.1.1 | 7855 | ··-·CJIS-5.4.1.1 |
| 7856 | ··-·NIST-800-171-3.1.7 | 7856 | ··-·NIST-800-171-3.1.7 |
| 7857 | ··-·NIST-800-53-AC-2(7)(b) | 7857 | ··-·NIST-800-53-AC-2(7)(b) |
| 7858 | ··-·NIST-800-53-AC-6(9) | 7858 | ··-·NIST-800-53-AC-6(9) |
| 7859 | ··-·NIST-800-53-AU-12(c) | 7859 | ··-·NIST-800-53-AU-12(c) |
| 7860 | ··-·NIST-800-53-AU-2(d) | 7860 | ··-·NIST-800-53-AU-2(d) |
| Offset 7871, 16 lines modified | Offset 7871, 16 lines modified | ||
| 7871 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 7871 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 7872 | ··find: | 7872 | ··find: |
| 7873 | ····paths:·/etc/audit/rules.d | 7873 | ····paths:·/etc/audit/rules.d |
| 7874 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 7874 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 7875 | ····patterns:·'*.rules' | 7875 | ····patterns:·'*.rules' |
| 7876 | ··register:·find_watch_key | 7876 | ··register:·find_watch_key |
| 7877 | ··when: | 7877 | ··when: |
| 7878 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7879 | ··-·'"audit"·in·ansible_facts.packages' | 7878 | ··-·'"audit"·in·ansible_facts.packages' |
| 7879 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7880 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 7880 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 7881 | ····==·0 | 7881 | ····==·0 |
| 7882 | ··tags: | 7882 | ··tags: |
| 7883 | ··-·CJIS-5.4.1.1 | 7883 | ··-·CJIS-5.4.1.1 |
| 7884 | ··-·NIST-800-171-3.1.7 | 7884 | ··-·NIST-800-171-3.1.7 |
| 7885 | ··-·NIST-800-53-AC-2(7)(b) | 7885 | ··-·NIST-800-53-AC-2(7)(b) |
| 7886 | ··-·NIST-800-53-AC-6(9) | 7886 | ··-·NIST-800-53-AC-6(9) |
| Offset 7897, 16 lines modified | Offset 7897, 16 lines modified | ||
| 7897 | ··-·restrict_strategy | 7897 | ··-·restrict_strategy |
| 7898 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 7898 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 7899 | ··set_fact: | 7899 | ··set_fact: |
| 7900 | ····all_files: | 7900 | ····all_files: |
| 7901 | ····-·/etc/audit/rules.d/actions.rules | 7901 | ····-·/etc/audit/rules.d/actions.rules |
| 7902 | ··when: | 7902 | ··when: |
| 7903 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7904 | ··-·'"audit"·in·ansible_facts.packages' | 7903 | ··-·'"audit"·in·ansible_facts.packages' |
| 7904 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7905 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 7905 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 7906 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 7906 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 7907 | ··tags: | 7907 | ··tags: |
| 7908 | ··-·CJIS-5.4.1.1 | 7908 | ··-·CJIS-5.4.1.1 |
| 7909 | ··-·NIST-800-171-3.1.7 | 7909 | ··-·NIST-800-171-3.1.7 |
| 7910 | ··-·NIST-800-53-AC-2(7)(b) | 7910 | ··-·NIST-800-53-AC-2(7)(b) |
| 7911 | ··-·NIST-800-53-AC-6(9) | 7911 | ··-·NIST-800-53-AC-6(9) |
| Offset 7923, 16 lines modified | Offset 7923, 16 lines modified | ||
| 7923 | ··-·restrict_strategy | 7923 | ··-·restrict_strategy |
| 7924 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 7924 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 7925 | ··set_fact: | 7925 | ··set_fact: |
| 7926 | ····all_files: | 7926 | ····all_files: |
| 7927 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 7927 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 7928 | ··when: | 7928 | ··when: |
| 7929 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7930 | ··-·'"audit"·in·ansible_facts.packages' | 7929 | ··-·'"audit"·in·ansible_facts.packages' |
| 7930 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7931 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 7931 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 7932 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 7932 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 7933 | ··tags: | 7933 | ··tags: |
| 7934 | ··-·CJIS-5.4.1.1 | 7934 | ··-·CJIS-5.4.1.1 |
| 7935 | ··-·NIST-800-171-3.1.7 | 7935 | ··-·NIST-800-171-3.1.7 |
| 7936 | ··-·NIST-800-53-AC-2(7)(b) | 7936 | ··-·NIST-800-53-AC-2(7)(b) |
| 7937 | ··-·NIST-800-53-AC-6(9) | 7937 | ··-·NIST-800-53-AC-6(9) |
| Offset 7951, 16 lines modified | Offset 7951, 16 lines modified | ||
| 7951 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 7951 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 40159/45490 bytes (88.28%) of diff not shown. | |||
| Offset 6798, 16 lines modified | Offset 6798, 16 lines modified | ||
| 6798 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension | 6798 | -·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension |
| 6799 | ··find: | 6799 | ··find: |
| 6800 | ····paths:·/etc/audit/rules.d/ | 6800 | ····paths:·/etc/audit/rules.d/ |
| 6801 | ····patterns:·'*.rules' | 6801 | ····patterns:·'*.rules' |
| 6802 | ··register:·find_rules_d | 6802 | ··register:·find_rules_d |
| 6803 | ··when: | 6803 | ··when: |
| 6804 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6805 | ··-·'"audit"·in·ansible_facts.packages' | 6804 | ··-·'"audit"·in·ansible_facts.packages' |
| 6805 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6806 | ··tags: | 6806 | ··tags: |
| 6807 | ··-·CJIS-5.4.1.1 | 6807 | ··-·CJIS-5.4.1.1 |
| 6808 | ··-·NIST-800-171-3.3.1 | 6808 | ··-·NIST-800-171-3.3.1 |
| 6809 | ··-·NIST-800-171-3.4.3 | 6809 | ··-·NIST-800-171-3.4.3 |
| 6810 | ··-·NIST-800-53-AC-6(9) | 6810 | ··-·NIST-800-53-AC-6(9) |
| 6811 | ··-·NIST-800-53-CM-6(a) | 6811 | ··-·NIST-800-53-CM-6(a) |
| 6812 | ··-·PCI-DSS-Req-10.5.2 | 6812 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 6822, 16 lines modified | Offset 6822, 16 lines modified | ||
| 6822 | ··lineinfile: | 6822 | ··lineinfile: |
| 6823 | ····path:·'{{·item·}}' | 6823 | ····path:·'{{·item·}}' |
| 6824 | ····regexp:·^\s*(?:-e)\s+.*$ | 6824 | ····regexp:·^\s*(?:-e)\s+.*$ |
| 6825 | ····state:·absent | 6825 | ····state:·absent |
| 6826 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] | 6826 | ··loop:·'{{·find_rules_d.files·|·map(attribute=''path'')·|·list·+·[''/etc/audit/audit.rules''] |
| 6827 | ····}}' | 6827 | ····}}' |
| 6828 | ··when: | 6828 | ··when: |
| 6829 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6830 | ··-·'"audit"·in·ansible_facts.packages' | 6829 | ··-·'"audit"·in·ansible_facts.packages' |
| 6830 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6831 | ··tags: | 6831 | ··tags: |
| 6832 | ··-·CJIS-5.4.1.1 | 6832 | ··-·CJIS-5.4.1.1 |
| 6833 | ··-·NIST-800-171-3.3.1 | 6833 | ··-·NIST-800-171-3.3.1 |
| 6834 | ··-·NIST-800-171-3.4.3 | 6834 | ··-·NIST-800-171-3.4.3 |
| 6835 | ··-·NIST-800-53-AC-6(9) | 6835 | ··-·NIST-800-53-AC-6(9) |
| 6836 | ··-·NIST-800-53-CM-6(a) | 6836 | ··-·NIST-800-53-CM-6(a) |
| 6837 | ··-·PCI-DSS-Req-10.5.2 | 6837 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 6848, 16 lines modified | Offset 6848, 16 lines modified | ||
| 6848 | ····create:·true | 6848 | ····create:·true |
| 6849 | ····line:·-e·2 | 6849 | ····line:·-e·2 |
| 6850 | ····mode:·o-rwx | 6850 | ····mode:·o-rwx |
| 6851 | ··loop: | 6851 | ··loop: |
| 6852 | ··-·/etc/audit/audit.rules | 6852 | ··-·/etc/audit/audit.rules |
| 6853 | ··-·/etc/audit/rules.d/immutable.rules | 6853 | ··-·/etc/audit/rules.d/immutable.rules |
| 6854 | ··when: | 6854 | ··when: |
| 6855 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6856 | ··-·'"audit"·in·ansible_facts.packages' | 6855 | ··-·'"audit"·in·ansible_facts.packages' |
| 6856 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 6857 | ··tags: | 6857 | ··tags: |
| 6858 | ··-·CJIS-5.4.1.1 | 6858 | ··-·CJIS-5.4.1.1 |
| 6859 | ··-·NIST-800-171-3.3.1 | 6859 | ··-·NIST-800-171-3.3.1 |
| 6860 | ··-·NIST-800-171-3.4.3 | 6860 | ··-·NIST-800-171-3.4.3 |
| 6861 | ··-·NIST-800-53-AC-6(9) | 6861 | ··-·NIST-800-53-AC-6(9) |
| 6862 | ··-·NIST-800-53-CM-6(a) | 6862 | ··-·NIST-800-53-CM-6(a) |
| 6863 | ··-·PCI-DSS-Req-10.5.2 | 6863 | ··-·PCI-DSS-Req-10.5.2 |
| Offset 7737, 16 lines modified | Offset 7737, 16 lines modified | ||
| 7737 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ | 7737 | -·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/ |
| 7738 | ··find: | 7738 | ··find: |
| 7739 | ····paths:·/etc/audit/rules.d | 7739 | ····paths:·/etc/audit/rules.d |
| 7740 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ | 7740 | ····contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s|$)+ |
| 7741 | ····patterns:·'*.rules' | 7741 | ····patterns:·'*.rules' |
| 7742 | ··register:·find_existing_watch_rules_d | 7742 | ··register:·find_existing_watch_rules_d |
| 7743 | ··when: | 7743 | ··when: |
| 7744 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7745 | ··-·'"audit"·in·ansible_facts.packages' | 7744 | ··-·'"audit"·in·ansible_facts.packages' |
| 7745 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7746 | ··tags: | 7746 | ··tags: |
| 7747 | ··-·CJIS-5.4.1.1 | 7747 | ··-·CJIS-5.4.1.1 |
| 7748 | ··-·NIST-800-171-3.1.7 | 7748 | ··-·NIST-800-171-3.1.7 |
| 7749 | ··-·NIST-800-53-AC-2(7)(b) | 7749 | ··-·NIST-800-53-AC-2(7)(b) |
| 7750 | ··-·NIST-800-53-AC-6(9) | 7750 | ··-·NIST-800-53-AC-6(9) |
| 7751 | ··-·NIST-800-53-AU-12(c) | 7751 | ··-·NIST-800-53-AU-12(c) |
| 7752 | ··-·NIST-800-53-AU-2(d) | 7752 | ··-·NIST-800-53-AU-2(d) |
| Offset 7763, 16 lines modified | Offset 7763, 16 lines modified | ||
| 7763 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions | 7763 | -·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions |
| 7764 | ··find: | 7764 | ··find: |
| 7765 | ····paths:·/etc/audit/rules.d | 7765 | ····paths:·/etc/audit/rules.d |
| 7766 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ | 7766 | ····contains:·^.*(?:-F·key=|-k\s+)actions$ |
| 7767 | ····patterns:·'*.rules' | 7767 | ····patterns:·'*.rules' |
| 7768 | ··register:·find_watch_key | 7768 | ··register:·find_watch_key |
| 7769 | ··when: | 7769 | ··when: |
| 7770 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7771 | ··-·'"audit"·in·ansible_facts.packages' | 7770 | ··-·'"audit"·in·ansible_facts.packages' |
| 7771 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7772 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched | 7772 | ··-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched |
| 7773 | ····==·0 | 7773 | ····==·0 |
| 7774 | ··tags: | 7774 | ··tags: |
| 7775 | ··-·CJIS-5.4.1.1 | 7775 | ··-·CJIS-5.4.1.1 |
| 7776 | ··-·NIST-800-171-3.1.7 | 7776 | ··-·NIST-800-171-3.1.7 |
| 7777 | ··-·NIST-800-53-AC-2(7)(b) | 7777 | ··-·NIST-800-53-AC-2(7)(b) |
| 7778 | ··-·NIST-800-53-AC-6(9) | 7778 | ··-·NIST-800-53-AC-6(9) |
| Offset 7789, 16 lines modified | Offset 7789, 16 lines modified | ||
| 7789 | ··-·restrict_strategy | 7789 | ··-·restrict_strategy |
| 7790 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule | 7790 | -·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule |
| 7791 | ··set_fact: | 7791 | ··set_fact: |
| 7792 | ····all_files: | 7792 | ····all_files: |
| 7793 | ····-·/etc/audit/rules.d/actions.rules | 7793 | ····-·/etc/audit/rules.d/actions.rules |
| 7794 | ··when: | 7794 | ··when: |
| 7795 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7796 | ··-·'"audit"·in·ansible_facts.packages' | 7795 | ··-·'"audit"·in·ansible_facts.packages' |
| 7796 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7797 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched | 7797 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched |
| 7798 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 7798 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 7799 | ··tags: | 7799 | ··tags: |
| 7800 | ··-·CJIS-5.4.1.1 | 7800 | ··-·CJIS-5.4.1.1 |
| 7801 | ··-·NIST-800-171-3.1.7 | 7801 | ··-·NIST-800-171-3.1.7 |
| 7802 | ··-·NIST-800-53-AC-2(7)(b) | 7802 | ··-·NIST-800-53-AC-2(7)(b) |
| 7803 | ··-·NIST-800-53-AC-6(9) | 7803 | ··-·NIST-800-53-AC-6(9) |
| Offset 7815, 16 lines modified | Offset 7815, 16 lines modified | ||
| 7815 | ··-·restrict_strategy | 7815 | ··-·restrict_strategy |
| 7816 | -·name:·Use·matched·file·as·the·recipient·for·the·rule | 7816 | -·name:·Use·matched·file·as·the·recipient·for·the·rule |
| 7817 | ··set_fact: | 7817 | ··set_fact: |
| 7818 | ····all_files: | 7818 | ····all_files: |
| 7819 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' | 7819 | ····-·'{{·find_watch_key.files·|·map(attribute=''path'')·|·list·|·first·}}' |
| 7820 | ··when: | 7820 | ··when: |
| 7821 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7822 | ··-·'"audit"·in·ansible_facts.packages' | 7821 | ··-·'"audit"·in·ansible_facts.packages' |
| 7822 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 7823 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched | 7823 | ··-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched |
| 7824 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 | 7824 | ····is·defined·and·find_existing_watch_rules_d.matched·==·0 |
| 7825 | ··tags: | 7825 | ··tags: |
| 7826 | ··-·CJIS-5.4.1.1 | 7826 | ··-·CJIS-5.4.1.1 |
| 7827 | ··-·NIST-800-171-3.1.7 | 7827 | ··-·NIST-800-171-3.1.7 |
| 7828 | ··-·NIST-800-53-AC-2(7)(b) | 7828 | ··-·NIST-800-53-AC-2(7)(b) |
| 7829 | ··-·NIST-800-53-AC-6(9) | 7829 | ··-·NIST-800-53-AC-6(9) |
| Offset 7843, 16 lines modified | Offset 7843, 16 lines modified | ||
| 7843 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ | 7843 | -·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/ |
| Max diff block lines reached; 40051/45382 bytes (88.25%) of diff not shown. | |||
| Offset 161207, 16 lines modified | Offset 161207, 16 lines modified | ||
| 161207 | ··-·no_reboot_needed | 161207 | ··-·no_reboot_needed |
| 161208 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 161208 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 161209 | ··stat: | 161209 | ··stat: |
| 161210 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161210 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161211 | ··register:·file_exists | 161211 | ··register:·file_exists |
| 161212 | ··when: | 161212 | ··when: |
| 161213 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161214 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161213 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161214 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161215 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161215 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161216 | ··tags: | 161216 | ··tags: |
| 161217 | ··-·CCE-83430-9 | 161217 | ··-·CCE-83430-9 |
| 161218 | ··-·CJIS-5.5.2.2 | 161218 | ··-·CJIS-5.5.2.2 |
| 161219 | ··-·NIST-800-171-3.4.5 | 161219 | ··-·NIST-800-171-3.4.5 |
| 161220 | ··-·NIST-800-53-AC-6(1) | 161220 | ··-·NIST-800-53-AC-6(1) |
| 161221 | ··-·NIST-800-53-CM-6(a) | 161221 | ··-·NIST-800-53-CM-6(a) |
| Offset 161229, 16 lines modified | Offset 161229, 16 lines modified | ||
| 161229 | ··-·no_reboot_needed | 161229 | ··-·no_reboot_needed |
| 161230 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 161230 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 161231 | ··file: | 161231 | ··file: |
| 161232 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161232 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161233 | ····group:·'0' | 161233 | ····group:·'0' |
| 161234 | ··when: | 161234 | ··when: |
| 161235 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161236 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161235 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161236 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161237 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161237 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161238 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 161238 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 161239 | ··tags: | 161239 | ··tags: |
| 161240 | ··-·CCE-83430-9 | 161240 | ··-·CCE-83430-9 |
| 161241 | ··-·CJIS-5.5.2.2 | 161241 | ··-·CJIS-5.5.2.2 |
| 161242 | ··-·NIST-800-171-3.4.5 | 161242 | ··-·NIST-800-171-3.4.5 |
| 161243 | ··-·NIST-800-53-AC-6(1) | 161243 | ··-·NIST-800-53-AC-6(1) |
| Offset 161247, 15 lines modified | Offset 161247, 15 lines modified | ||
| 161247 | ··-·configure_strategy | 161247 | ··-·configure_strategy |
| 161248 | ··-·file_groupowner_efi_grub2_cfg | 161248 | ··-·file_groupowner_efi_grub2_cfg |
| 161249 | ··-·low_complexity | 161249 | ··-·low_complexity |
| 161250 | ··-·low_disruption | 161250 | ··-·low_disruption |
| 161251 | ··-·medium_severity | 161251 | ··-·medium_severity |
| 161252 | ··-·no_reboot_needed</xccdf-1.2:fix> | 161252 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 161253 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 161253 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 161254 | if· | 161254 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 161255 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 161255 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 161256 | else | 161256 | else |
| 161257 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161257 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161258 | fi</xccdf-1.2:fix> | 161258 | fi</xccdf-1.2:fix> |
| 161259 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 161259 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 161353, 16 lines modified | Offset 161353, 16 lines modified | ||
| 161353 | ··-·no_reboot_needed | 161353 | ··-·no_reboot_needed |
| 161354 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 161354 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 161355 | ··stat: | 161355 | ··stat: |
| 161356 | ····path:·/boot/efi/EFI/redhat/user.cfg | 161356 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 161357 | ··register:·file_exists | 161357 | ··register:·file_exists |
| 161358 | ··when: | 161358 | ··when: |
| 161359 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161360 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161359 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161360 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161361 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161361 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161362 | ··tags: | 161362 | ··tags: |
| 161363 | ··-·CCE-86011-4 | 161363 | ··-·CCE-86011-4 |
| 161364 | ··-·CJIS-5.5.2.2 | 161364 | ··-·CJIS-5.5.2.2 |
| 161365 | ··-·NIST-800-171-3.4.5 | 161365 | ··-·NIST-800-171-3.4.5 |
| 161366 | ··-·NIST-800-53-AC-6(1) | 161366 | ··-·NIST-800-53-AC-6(1) |
| 161367 | ··-·NIST-800-53-CM-6(a) | 161367 | ··-·NIST-800-53-CM-6(a) |
| Offset 161375, 16 lines modified | Offset 161375, 16 lines modified | ||
| 161375 | ··-·no_reboot_needed | 161375 | ··-·no_reboot_needed |
| 161376 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 161376 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 161377 | ··file: | 161377 | ··file: |
| 161378 | ····path:·/boot/efi/EFI/redhat/user.cfg | 161378 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 161379 | ····group:·'0' | 161379 | ····group:·'0' |
| 161380 | ··when: | 161380 | ··when: |
| 161381 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161382 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161381 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161382 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161383 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161383 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161384 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 161384 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 161385 | ··tags: | 161385 | ··tags: |
| 161386 | ··-·CCE-86011-4 | 161386 | ··-·CCE-86011-4 |
| 161387 | ··-·CJIS-5.5.2.2 | 161387 | ··-·CJIS-5.5.2.2 |
| 161388 | ··-·NIST-800-171-3.4.5 | 161388 | ··-·NIST-800-171-3.4.5 |
| 161389 | ··-·NIST-800-53-AC-6(1) | 161389 | ··-·NIST-800-53-AC-6(1) |
| Offset 161393, 15 lines modified | Offset 161393, 15 lines modified | ||
| 161393 | ··-·configure_strategy | 161393 | ··-·configure_strategy |
| 161394 | ··-·file_groupowner_efi_user_cfg | 161394 | ··-·file_groupowner_efi_user_cfg |
| 161395 | ··-·low_complexity | 161395 | ··-·low_complexity |
| 161396 | ··-·low_disruption | 161396 | ··-·low_disruption |
| 161397 | ··-·medium_severity | 161397 | ··-·medium_severity |
| 161398 | ··-·no_reboot_needed</xccdf-1.2:fix> | 161398 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 161399 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 161399 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 161400 | if· | 161400 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 161401 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 161401 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 161402 | else | 161402 | else |
| 161403 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161403 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161404 | fi</xccdf-1.2:fix> | 161404 | fi</xccdf-1.2:fix> |
| 161405 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 161405 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 161495, 16 lines modified | Offset 161495, 16 lines modified | ||
| 161495 | ··-·no_reboot_needed | 161495 | ··-·no_reboot_needed |
| 161496 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 161496 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 161497 | ··stat: | 161497 | ··stat: |
| 161498 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161498 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161499 | ··register:·file_exists | 161499 | ··register:·file_exists |
| 161500 | ··when: | 161500 | ··when: |
| 161501 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161502 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161501 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161502 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161503 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161503 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161504 | ··tags: | 161504 | ··tags: |
| 161505 | ··-·CCE-83429-1 | 161505 | ··-·CCE-83429-1 |
| 161506 | ··-·CJIS-5.5.2.2 | 161506 | ··-·CJIS-5.5.2.2 |
| 161507 | ··-·NIST-800-171-3.4.5 | 161507 | ··-·NIST-800-171-3.4.5 |
| 161508 | ··-·NIST-800-53-AC-6(1) | 161508 | ··-·NIST-800-53-AC-6(1) |
| 161509 | ··-·NIST-800-53-CM-6(a) | 161509 | ··-·NIST-800-53-CM-6(a) |
| Offset 161517, 16 lines modified | Offset 161517, 16 lines modified | ||
| 161517 | ··-·no_reboot_needed | 161517 | ··-·no_reboot_needed |
| 161518 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 161518 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 161519 | ··file: | 161519 | ··file: |
| 161520 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161520 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9966/15530 bytes (64.17%) of diff not shown. | |||
| Offset 161209, 16 lines modified | Offset 161209, 16 lines modified | ||
| 161209 | ··-·no_reboot_needed | 161209 | ··-·no_reboot_needed |
| 161210 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 161210 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 161211 | ··stat: | 161211 | ··stat: |
| 161212 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161212 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161213 | ··register:·file_exists | 161213 | ··register:·file_exists |
| 161214 | ··when: | 161214 | ··when: |
| 161215 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161216 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161215 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161216 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161217 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161217 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161218 | ··tags: | 161218 | ··tags: |
| 161219 | ··-·CCE-83430-9 | 161219 | ··-·CCE-83430-9 |
| 161220 | ··-·CJIS-5.5.2.2 | 161220 | ··-·CJIS-5.5.2.2 |
| 161221 | ··-·NIST-800-171-3.4.5 | 161221 | ··-·NIST-800-171-3.4.5 |
| 161222 | ··-·NIST-800-53-AC-6(1) | 161222 | ··-·NIST-800-53-AC-6(1) |
| 161223 | ··-·NIST-800-53-CM-6(a) | 161223 | ··-·NIST-800-53-CM-6(a) |
| Offset 161231, 16 lines modified | Offset 161231, 16 lines modified | ||
| 161231 | ··-·no_reboot_needed | 161231 | ··-·no_reboot_needed |
| 161232 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 161232 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 161233 | ··file: | 161233 | ··file: |
| 161234 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161234 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161235 | ····group:·'0' | 161235 | ····group:·'0' |
| 161236 | ··when: | 161236 | ··when: |
| 161237 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161238 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161237 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161238 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161239 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161239 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161240 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 161240 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 161241 | ··tags: | 161241 | ··tags: |
| 161242 | ··-·CCE-83430-9 | 161242 | ··-·CCE-83430-9 |
| 161243 | ··-·CJIS-5.5.2.2 | 161243 | ··-·CJIS-5.5.2.2 |
| 161244 | ··-·NIST-800-171-3.4.5 | 161244 | ··-·NIST-800-171-3.4.5 |
| 161245 | ··-·NIST-800-53-AC-6(1) | 161245 | ··-·NIST-800-53-AC-6(1) |
| Offset 161249, 15 lines modified | Offset 161249, 15 lines modified | ||
| 161249 | ··-·configure_strategy | 161249 | ··-·configure_strategy |
| 161250 | ··-·file_groupowner_efi_grub2_cfg | 161250 | ··-·file_groupowner_efi_grub2_cfg |
| 161251 | ··-·low_complexity | 161251 | ··-·low_complexity |
| 161252 | ··-·low_disruption | 161252 | ··-·low_disruption |
| 161253 | ··-·medium_severity | 161253 | ··-·medium_severity |
| 161254 | ··-·no_reboot_needed</xccdf-1.2:fix> | 161254 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 161255 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 161255 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 161256 | if· | 161256 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 161257 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 161257 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 161258 | else | 161258 | else |
| 161259 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161259 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161260 | fi</xccdf-1.2:fix> | 161260 | fi</xccdf-1.2:fix> |
| 161261 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 161261 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 161355, 16 lines modified | Offset 161355, 16 lines modified | ||
| 161355 | ··-·no_reboot_needed | 161355 | ··-·no_reboot_needed |
| 161356 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 161356 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 161357 | ··stat: | 161357 | ··stat: |
| 161358 | ····path:·/boot/efi/EFI/redhat/user.cfg | 161358 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 161359 | ··register:·file_exists | 161359 | ··register:·file_exists |
| 161360 | ··when: | 161360 | ··when: |
| 161361 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161362 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161361 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161362 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161363 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161363 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161364 | ··tags: | 161364 | ··tags: |
| 161365 | ··-·CCE-86011-4 | 161365 | ··-·CCE-86011-4 |
| 161366 | ··-·CJIS-5.5.2.2 | 161366 | ··-·CJIS-5.5.2.2 |
| 161367 | ··-·NIST-800-171-3.4.5 | 161367 | ··-·NIST-800-171-3.4.5 |
| 161368 | ··-·NIST-800-53-AC-6(1) | 161368 | ··-·NIST-800-53-AC-6(1) |
| 161369 | ··-·NIST-800-53-CM-6(a) | 161369 | ··-·NIST-800-53-CM-6(a) |
| Offset 161377, 16 lines modified | Offset 161377, 16 lines modified | ||
| 161377 | ··-·no_reboot_needed | 161377 | ··-·no_reboot_needed |
| 161378 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 161378 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 161379 | ··file: | 161379 | ··file: |
| 161380 | ····path:·/boot/efi/EFI/redhat/user.cfg | 161380 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 161381 | ····group:·'0' | 161381 | ····group:·'0' |
| 161382 | ··when: | 161382 | ··when: |
| 161383 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161384 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161383 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161384 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161385 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161385 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161386 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 161386 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 161387 | ··tags: | 161387 | ··tags: |
| 161388 | ··-·CCE-86011-4 | 161388 | ··-·CCE-86011-4 |
| 161389 | ··-·CJIS-5.5.2.2 | 161389 | ··-·CJIS-5.5.2.2 |
| 161390 | ··-·NIST-800-171-3.4.5 | 161390 | ··-·NIST-800-171-3.4.5 |
| 161391 | ··-·NIST-800-53-AC-6(1) | 161391 | ··-·NIST-800-53-AC-6(1) |
| Offset 161395, 15 lines modified | Offset 161395, 15 lines modified | ||
| 161395 | ··-·configure_strategy | 161395 | ··-·configure_strategy |
| 161396 | ··-·file_groupowner_efi_user_cfg | 161396 | ··-·file_groupowner_efi_user_cfg |
| 161397 | ··-·low_complexity | 161397 | ··-·low_complexity |
| 161398 | ··-·low_disruption | 161398 | ··-·low_disruption |
| 161399 | ··-·medium_severity | 161399 | ··-·medium_severity |
| 161400 | ··-·no_reboot_needed</xccdf-1.2:fix> | 161400 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 161401 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 161401 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 161402 | if· | 161402 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 161403 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 161403 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 161404 | else | 161404 | else |
| 161405 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161405 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161406 | fi</xccdf-1.2:fix> | 161406 | fi</xccdf-1.2:fix> |
| 161407 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 161407 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 161497, 16 lines modified | Offset 161497, 16 lines modified | ||
| 161497 | ··-·no_reboot_needed | 161497 | ··-·no_reboot_needed |
| 161498 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 161498 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 161499 | ··stat: | 161499 | ··stat: |
| 161500 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161500 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161501 | ··register:·file_exists | 161501 | ··register:·file_exists |
| 161502 | ··when: | 161502 | ··when: |
| 161503 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161504 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161503 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161504 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161505 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161505 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161506 | ··tags: | 161506 | ··tags: |
| 161507 | ··-·CCE-83429-1 | 161507 | ··-·CCE-83429-1 |
| 161508 | ··-·CJIS-5.5.2.2 | 161508 | ··-·CJIS-5.5.2.2 |
| 161509 | ··-·NIST-800-171-3.4.5 | 161509 | ··-·NIST-800-171-3.4.5 |
| 161510 | ··-·NIST-800-53-AC-6(1) | 161510 | ··-·NIST-800-53-AC-6(1) |
| 161511 | ··-·NIST-800-53-CM-6(a) | 161511 | ··-·NIST-800-53-CM-6(a) |
| Offset 161519, 16 lines modified | Offset 161519, 16 lines modified | ||
| 161519 | ··-·no_reboot_needed | 161519 | ··-·no_reboot_needed |
| 161520 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 161520 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 161521 | ··file: | 161521 | ··file: |
| 161522 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161522 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9966/15530 bytes (64.17%) of diff not shown. | |||
| Offset 161039, 16 lines modified | Offset 161039, 16 lines modified | ||
| 161039 | ··-·no_reboot_needed | 161039 | ··-·no_reboot_needed |
| 161040 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 161040 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 161041 | ··stat: | 161041 | ··stat: |
| 161042 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161042 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161043 | ··register:·file_exists | 161043 | ··register:·file_exists |
| 161044 | ··when: | 161044 | ··when: |
| 161045 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161046 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161045 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161046 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161047 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161047 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161048 | ··tags: | 161048 | ··tags: |
| 161049 | ··-·CCE-83430-9 | 161049 | ··-·CCE-83430-9 |
| 161050 | ··-·CJIS-5.5.2.2 | 161050 | ··-·CJIS-5.5.2.2 |
| 161051 | ··-·NIST-800-171-3.4.5 | 161051 | ··-·NIST-800-171-3.4.5 |
| 161052 | ··-·NIST-800-53-AC-6(1) | 161052 | ··-·NIST-800-53-AC-6(1) |
| 161053 | ··-·NIST-800-53-CM-6(a) | 161053 | ··-·NIST-800-53-CM-6(a) |
| Offset 161061, 16 lines modified | Offset 161061, 16 lines modified | ||
| 161061 | ··-·no_reboot_needed | 161061 | ··-·no_reboot_needed |
| 161062 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 161062 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 161063 | ··file: | 161063 | ··file: |
| 161064 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161064 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161065 | ····group:·'0' | 161065 | ····group:·'0' |
| 161066 | ··when: | 161066 | ··when: |
| 161067 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161068 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161067 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161068 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161069 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161069 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161070 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 161070 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 161071 | ··tags: | 161071 | ··tags: |
| 161072 | ··-·CCE-83430-9 | 161072 | ··-·CCE-83430-9 |
| 161073 | ··-·CJIS-5.5.2.2 | 161073 | ··-·CJIS-5.5.2.2 |
| 161074 | ··-·NIST-800-171-3.4.5 | 161074 | ··-·NIST-800-171-3.4.5 |
| 161075 | ··-·NIST-800-53-AC-6(1) | 161075 | ··-·NIST-800-53-AC-6(1) |
| Offset 161079, 15 lines modified | Offset 161079, 15 lines modified | ||
| 161079 | ··-·configure_strategy | 161079 | ··-·configure_strategy |
| 161080 | ··-·file_groupowner_efi_grub2_cfg | 161080 | ··-·file_groupowner_efi_grub2_cfg |
| 161081 | ··-·low_complexity | 161081 | ··-·low_complexity |
| 161082 | ··-·low_disruption | 161082 | ··-·low_disruption |
| 161083 | ··-·medium_severity | 161083 | ··-·medium_severity |
| 161084 | ··-·no_reboot_needed</xccdf-1.2:fix> | 161084 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 161085 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 161085 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 161086 | if· | 161086 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 161087 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 161087 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 161088 | else | 161088 | else |
| 161089 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161089 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161090 | fi</xccdf-1.2:fix> | 161090 | fi</xccdf-1.2:fix> |
| 161091 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 161091 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 161185, 16 lines modified | Offset 161185, 16 lines modified | ||
| 161185 | ··-·no_reboot_needed | 161185 | ··-·no_reboot_needed |
| 161186 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 161186 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 161187 | ··stat: | 161187 | ··stat: |
| 161188 | ····path:·/boot/efi/EFI/redhat/user.cfg | 161188 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 161189 | ··register:·file_exists | 161189 | ··register:·file_exists |
| 161190 | ··when: | 161190 | ··when: |
| 161191 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161192 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161191 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161192 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161193 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161193 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161194 | ··tags: | 161194 | ··tags: |
| 161195 | ··-·CCE-86011-4 | 161195 | ··-·CCE-86011-4 |
| 161196 | ··-·CJIS-5.5.2.2 | 161196 | ··-·CJIS-5.5.2.2 |
| 161197 | ··-·NIST-800-171-3.4.5 | 161197 | ··-·NIST-800-171-3.4.5 |
| 161198 | ··-·NIST-800-53-AC-6(1) | 161198 | ··-·NIST-800-53-AC-6(1) |
| 161199 | ··-·NIST-800-53-CM-6(a) | 161199 | ··-·NIST-800-53-CM-6(a) |
| Offset 161207, 16 lines modified | Offset 161207, 16 lines modified | ||
| 161207 | ··-·no_reboot_needed | 161207 | ··-·no_reboot_needed |
| 161208 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 161208 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 161209 | ··file: | 161209 | ··file: |
| 161210 | ····path:·/boot/efi/EFI/redhat/user.cfg | 161210 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 161211 | ····group:·'0' | 161211 | ····group:·'0' |
| 161212 | ··when: | 161212 | ··when: |
| 161213 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161214 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161213 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161214 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161215 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161215 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161216 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 161216 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 161217 | ··tags: | 161217 | ··tags: |
| 161218 | ··-·CCE-86011-4 | 161218 | ··-·CCE-86011-4 |
| 161219 | ··-·CJIS-5.5.2.2 | 161219 | ··-·CJIS-5.5.2.2 |
| 161220 | ··-·NIST-800-171-3.4.5 | 161220 | ··-·NIST-800-171-3.4.5 |
| 161221 | ··-·NIST-800-53-AC-6(1) | 161221 | ··-·NIST-800-53-AC-6(1) |
| Offset 161225, 15 lines modified | Offset 161225, 15 lines modified | ||
| 161225 | ··-·configure_strategy | 161225 | ··-·configure_strategy |
| 161226 | ··-·file_groupowner_efi_user_cfg | 161226 | ··-·file_groupowner_efi_user_cfg |
| 161227 | ··-·low_complexity | 161227 | ··-·low_complexity |
| 161228 | ··-·low_disruption | 161228 | ··-·low_disruption |
| 161229 | ··-·medium_severity | 161229 | ··-·medium_severity |
| 161230 | ··-·no_reboot_needed</xccdf-1.2:fix> | 161230 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 161231 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 161231 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 161232 | if· | 161232 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 161233 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 161233 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 161234 | else | 161234 | else |
| 161235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161236 | fi</xccdf-1.2:fix> | 161236 | fi</xccdf-1.2:fix> |
| 161237 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 161237 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 161327, 16 lines modified | Offset 161327, 16 lines modified | ||
| 161327 | ··-·no_reboot_needed | 161327 | ··-·no_reboot_needed |
| 161328 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 161328 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 161329 | ··stat: | 161329 | ··stat: |
| 161330 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161330 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 161331 | ··register:·file_exists | 161331 | ··register:·file_exists |
| 161332 | ··when: | 161332 | ··when: |
| 161333 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161334 | ··-·'"grub2-common"·in·ansible_facts.packages' | 161333 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 161334 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 161335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 161335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 161336 | ··tags: | 161336 | ··tags: |
| 161337 | ··-·CCE-83429-1 | 161337 | ··-·CCE-83429-1 |
| 161338 | ··-·CJIS-5.5.2.2 | 161338 | ··-·CJIS-5.5.2.2 |
| 161339 | ··-·NIST-800-171-3.4.5 | 161339 | ··-·NIST-800-171-3.4.5 |
| 161340 | ··-·NIST-800-53-AC-6(1) | 161340 | ··-·NIST-800-53-AC-6(1) |
| 161341 | ··-·NIST-800-53-CM-6(a) | 161341 | ··-·NIST-800-53-CM-6(a) |
| Offset 161349, 16 lines modified | Offset 161349, 16 lines modified | ||
| 161349 | ··-·no_reboot_needed | 161349 | ··-·no_reboot_needed |
| 161350 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 161350 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 161351 | ··file: | 161351 | ··file: |
| 161352 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 161352 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9930/15478 bytes (64.16%) of diff not shown. | |||
| Offset 171047, 16 lines modified | Offset 171047, 16 lines modified | ||
| 171047 | ··-·no_reboot_needed | 171047 | ··-·no_reboot_needed |
| 171048 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 171048 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 171049 | ··stat: | 171049 | ··stat: |
| 171050 | ····path:·/boot/grub2/grub.cfg | 171050 | ····path:·/boot/grub2/grub.cfg |
| 171051 | ··register:·file_exists | 171051 | ··register:·file_exists |
| 171052 | ··when: | 171052 | ··when: |
| 171053 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171054 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171053 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171054 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171055 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171055 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171056 | ··tags: | 171056 | ··tags: |
| 171057 | ··-·CCE-80800-6 | 171057 | ··-·CCE-80800-6 |
| 171058 | ··-·CJIS-5.5.2.2 | 171058 | ··-·CJIS-5.5.2.2 |
| 171059 | ··-·NIST-800-171-3.4.5 | 171059 | ··-·NIST-800-171-3.4.5 |
| 171060 | ··-·NIST-800-53-AC-6(1) | 171060 | ··-·NIST-800-53-AC-6(1) |
| 171061 | ··-·NIST-800-53-CM-6(a) | 171061 | ··-·NIST-800-53-CM-6(a) |
| Offset 171069, 16 lines modified | Offset 171069, 16 lines modified | ||
| 171069 | ··-·no_reboot_needed | 171069 | ··-·no_reboot_needed |
| 171070 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 171070 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 171071 | ··file: | 171071 | ··file: |
| 171072 | ····path:·/boot/grub2/grub.cfg | 171072 | ····path:·/boot/grub2/grub.cfg |
| 171073 | ····group:·'0' | 171073 | ····group:·'0' |
| 171074 | ··when: | 171074 | ··when: |
| 171075 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171076 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171075 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171076 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171077 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171077 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171078 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 171078 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 171079 | ··tags: | 171079 | ··tags: |
| 171080 | ··-·CCE-80800-6 | 171080 | ··-·CCE-80800-6 |
| 171081 | ··-·CJIS-5.5.2.2 | 171081 | ··-·CJIS-5.5.2.2 |
| 171082 | ··-·NIST-800-171-3.4.5 | 171082 | ··-·NIST-800-171-3.4.5 |
| 171083 | ··-·NIST-800-53-AC-6(1) | 171083 | ··-·NIST-800-53-AC-6(1) |
| Offset 171087, 15 lines modified | Offset 171087, 15 lines modified | ||
| 171087 | ··-·configure_strategy | 171087 | ··-·configure_strategy |
| 171088 | ··-·file_groupowner_grub2_cfg | 171088 | ··-·file_groupowner_grub2_cfg |
| 171089 | ··-·low_complexity | 171089 | ··-·low_complexity |
| 171090 | ··-·low_disruption | 171090 | ··-·low_disruption |
| 171091 | ··-·medium_severity | 171091 | ··-·medium_severity |
| 171092 | ··-·no_reboot_needed</xccdf-1.2:fix> | 171092 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 171093 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 171093 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 171094 | if· | 171094 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 171095 | chgrp·0·/boot/grub2/grub.cfg | 171095 | chgrp·0·/boot/grub2/grub.cfg |
| 171096 | else | 171096 | else |
| 171097 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 171097 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171098 | fi</xccdf-1.2:fix> | 171098 | fi</xccdf-1.2:fix> |
| 171099 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 171099 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 171205, 16 lines modified | Offset 171205, 16 lines modified | ||
| 171205 | ··-·no_reboot_needed | 171205 | ··-·no_reboot_needed |
| 171206 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 171206 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 171207 | ··stat: | 171207 | ··stat: |
| 171208 | ····path:·/boot/grub2/user.cfg | 171208 | ····path:·/boot/grub2/user.cfg |
| 171209 | ··register:·file_exists | 171209 | ··register:·file_exists |
| 171210 | ··when: | 171210 | ··when: |
| 171211 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171212 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171211 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171212 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171213 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171213 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171214 | ··tags: | 171214 | ··tags: |
| 171215 | ··-·CCE-86009-8 | 171215 | ··-·CCE-86009-8 |
| 171216 | ··-·CJIS-5.5.2.2 | 171216 | ··-·CJIS-5.5.2.2 |
| 171217 | ··-·NIST-800-171-3.4.5 | 171217 | ··-·NIST-800-171-3.4.5 |
| 171218 | ··-·NIST-800-53-AC-6(1) | 171218 | ··-·NIST-800-53-AC-6(1) |
| 171219 | ··-·NIST-800-53-CM-6(a) | 171219 | ··-·NIST-800-53-CM-6(a) |
| Offset 171227, 16 lines modified | Offset 171227, 16 lines modified | ||
| 171227 | ··-·no_reboot_needed | 171227 | ··-·no_reboot_needed |
| 171228 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 171228 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 171229 | ··file: | 171229 | ··file: |
| 171230 | ····path:·/boot/grub2/user.cfg | 171230 | ····path:·/boot/grub2/user.cfg |
| 171231 | ····group:·'0' | 171231 | ····group:·'0' |
| 171232 | ··when: | 171232 | ··when: |
| 171233 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171234 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171233 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171234 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171235 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171235 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171236 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 171236 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 171237 | ··tags: | 171237 | ··tags: |
| 171238 | ··-·CCE-86009-8 | 171238 | ··-·CCE-86009-8 |
| 171239 | ··-·CJIS-5.5.2.2 | 171239 | ··-·CJIS-5.5.2.2 |
| 171240 | ··-·NIST-800-171-3.4.5 | 171240 | ··-·NIST-800-171-3.4.5 |
| 171241 | ··-·NIST-800-53-AC-6(1) | 171241 | ··-·NIST-800-53-AC-6(1) |
| Offset 171245, 15 lines modified | Offset 171245, 15 lines modified | ||
| 171245 | ··-·configure_strategy | 171245 | ··-·configure_strategy |
| 171246 | ··-·file_groupowner_user_cfg | 171246 | ··-·file_groupowner_user_cfg |
| 171247 | ··-·low_complexity | 171247 | ··-·low_complexity |
| 171248 | ··-·low_disruption | 171248 | ··-·low_disruption |
| 171249 | ··-·medium_severity | 171249 | ··-·medium_severity |
| 171250 | ··-·no_reboot_needed</xccdf-1.2:fix> | 171250 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 171251 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 171251 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 171252 | if· | 171252 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 171253 | chgrp·0·/boot/grub2/user.cfg | 171253 | chgrp·0·/boot/grub2/user.cfg |
| 171254 | else | 171254 | else |
| 171255 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 171255 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171256 | fi</xccdf-1.2:fix> | 171256 | fi</xccdf-1.2:fix> |
| 171257 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 171257 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 171358, 16 lines modified | Offset 171358, 16 lines modified | ||
| 171358 | ··-·no_reboot_needed | 171358 | ··-·no_reboot_needed |
| 171359 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 171359 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 171360 | ··stat: | 171360 | ··stat: |
| 171361 | ····path:·/boot/grub2/grub.cfg | 171361 | ····path:·/boot/grub2/grub.cfg |
| 171362 | ··register:·file_exists | 171362 | ··register:·file_exists |
| 171363 | ··when: | 171363 | ··when: |
| 171364 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171365 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171364 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171365 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171366 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171366 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171367 | ··tags: | 171367 | ··tags: |
| 171368 | ··-·CCE-80805-5 | 171368 | ··-·CCE-80805-5 |
| 171369 | ··-·CJIS-5.5.2.2 | 171369 | ··-·CJIS-5.5.2.2 |
| 171370 | ··-·NIST-800-171-3.4.5 | 171370 | ··-·NIST-800-171-3.4.5 |
| 171371 | ··-·NIST-800-53-AC-6(1) | 171371 | ··-·NIST-800-53-AC-6(1) |
| 171372 | ··-·NIST-800-53-CM-6(a) | 171372 | ··-·NIST-800-53-CM-6(a) |
| Offset 171380, 16 lines modified | Offset 171380, 16 lines modified | ||
| 171380 | ··-·no_reboot_needed | 171380 | ··-·no_reboot_needed |
| 171381 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 171381 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 171382 | ··file: | 171382 | ··file: |
| 171383 | ····path:·/boot/grub2/grub.cfg | 171383 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 23998/29468 bytes (81.44%) of diff not shown. | |||
| Offset 171049, 16 lines modified | Offset 171049, 16 lines modified | ||
| 171049 | ··-·no_reboot_needed | 171049 | ··-·no_reboot_needed |
| 171050 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 171050 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 171051 | ··stat: | 171051 | ··stat: |
| 171052 | ····path:·/boot/grub2/grub.cfg | 171052 | ····path:·/boot/grub2/grub.cfg |
| 171053 | ··register:·file_exists | 171053 | ··register:·file_exists |
| 171054 | ··when: | 171054 | ··when: |
| 171055 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171056 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171055 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171056 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171057 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171057 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171058 | ··tags: | 171058 | ··tags: |
| 171059 | ··-·CCE-80800-6 | 171059 | ··-·CCE-80800-6 |
| 171060 | ··-·CJIS-5.5.2.2 | 171060 | ··-·CJIS-5.5.2.2 |
| 171061 | ··-·NIST-800-171-3.4.5 | 171061 | ··-·NIST-800-171-3.4.5 |
| 171062 | ··-·NIST-800-53-AC-6(1) | 171062 | ··-·NIST-800-53-AC-6(1) |
| 171063 | ··-·NIST-800-53-CM-6(a) | 171063 | ··-·NIST-800-53-CM-6(a) |
| Offset 171071, 16 lines modified | Offset 171071, 16 lines modified | ||
| 171071 | ··-·no_reboot_needed | 171071 | ··-·no_reboot_needed |
| 171072 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 171072 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 171073 | ··file: | 171073 | ··file: |
| 171074 | ····path:·/boot/grub2/grub.cfg | 171074 | ····path:·/boot/grub2/grub.cfg |
| 171075 | ····group:·'0' | 171075 | ····group:·'0' |
| 171076 | ··when: | 171076 | ··when: |
| 171077 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171078 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171077 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171078 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171079 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171079 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171080 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 171080 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 171081 | ··tags: | 171081 | ··tags: |
| 171082 | ··-·CCE-80800-6 | 171082 | ··-·CCE-80800-6 |
| 171083 | ··-·CJIS-5.5.2.2 | 171083 | ··-·CJIS-5.5.2.2 |
| 171084 | ··-·NIST-800-171-3.4.5 | 171084 | ··-·NIST-800-171-3.4.5 |
| 171085 | ··-·NIST-800-53-AC-6(1) | 171085 | ··-·NIST-800-53-AC-6(1) |
| Offset 171089, 15 lines modified | Offset 171089, 15 lines modified | ||
| 171089 | ··-·configure_strategy | 171089 | ··-·configure_strategy |
| 171090 | ··-·file_groupowner_grub2_cfg | 171090 | ··-·file_groupowner_grub2_cfg |
| 171091 | ··-·low_complexity | 171091 | ··-·low_complexity |
| 171092 | ··-·low_disruption | 171092 | ··-·low_disruption |
| 171093 | ··-·medium_severity | 171093 | ··-·medium_severity |
| 171094 | ··-·no_reboot_needed</xccdf-1.2:fix> | 171094 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 171095 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 171095 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 171096 | if· | 171096 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 171097 | chgrp·0·/boot/grub2/grub.cfg | 171097 | chgrp·0·/boot/grub2/grub.cfg |
| 171098 | else | 171098 | else |
| 171099 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 171099 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171100 | fi</xccdf-1.2:fix> | 171100 | fi</xccdf-1.2:fix> |
| 171101 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 171101 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 171207, 16 lines modified | Offset 171207, 16 lines modified | ||
| 171207 | ··-·no_reboot_needed | 171207 | ··-·no_reboot_needed |
| 171208 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 171208 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 171209 | ··stat: | 171209 | ··stat: |
| 171210 | ····path:·/boot/grub2/user.cfg | 171210 | ····path:·/boot/grub2/user.cfg |
| 171211 | ··register:·file_exists | 171211 | ··register:·file_exists |
| 171212 | ··when: | 171212 | ··when: |
| 171213 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171214 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171213 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171214 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171215 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171215 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171216 | ··tags: | 171216 | ··tags: |
| 171217 | ··-·CCE-86009-8 | 171217 | ··-·CCE-86009-8 |
| 171218 | ··-·CJIS-5.5.2.2 | 171218 | ··-·CJIS-5.5.2.2 |
| 171219 | ··-·NIST-800-171-3.4.5 | 171219 | ··-·NIST-800-171-3.4.5 |
| 171220 | ··-·NIST-800-53-AC-6(1) | 171220 | ··-·NIST-800-53-AC-6(1) |
| 171221 | ··-·NIST-800-53-CM-6(a) | 171221 | ··-·NIST-800-53-CM-6(a) |
| Offset 171229, 16 lines modified | Offset 171229, 16 lines modified | ||
| 171229 | ··-·no_reboot_needed | 171229 | ··-·no_reboot_needed |
| 171230 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 171230 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 171231 | ··file: | 171231 | ··file: |
| 171232 | ····path:·/boot/grub2/user.cfg | 171232 | ····path:·/boot/grub2/user.cfg |
| 171233 | ····group:·'0' | 171233 | ····group:·'0' |
| 171234 | ··when: | 171234 | ··when: |
| 171235 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171236 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171235 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171236 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171237 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171237 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171238 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 171238 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 171239 | ··tags: | 171239 | ··tags: |
| 171240 | ··-·CCE-86009-8 | 171240 | ··-·CCE-86009-8 |
| 171241 | ··-·CJIS-5.5.2.2 | 171241 | ··-·CJIS-5.5.2.2 |
| 171242 | ··-·NIST-800-171-3.4.5 | 171242 | ··-·NIST-800-171-3.4.5 |
| 171243 | ··-·NIST-800-53-AC-6(1) | 171243 | ··-·NIST-800-53-AC-6(1) |
| Offset 171247, 15 lines modified | Offset 171247, 15 lines modified | ||
| 171247 | ··-·configure_strategy | 171247 | ··-·configure_strategy |
| 171248 | ··-·file_groupowner_user_cfg | 171248 | ··-·file_groupowner_user_cfg |
| 171249 | ··-·low_complexity | 171249 | ··-·low_complexity |
| 171250 | ··-·low_disruption | 171250 | ··-·low_disruption |
| 171251 | ··-·medium_severity | 171251 | ··-·medium_severity |
| 171252 | ··-·no_reboot_needed</xccdf-1.2:fix> | 171252 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 171253 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 171253 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 171254 | if· | 171254 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 171255 | chgrp·0·/boot/grub2/user.cfg | 171255 | chgrp·0·/boot/grub2/user.cfg |
| 171256 | else | 171256 | else |
| 171257 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 171257 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171258 | fi</xccdf-1.2:fix> | 171258 | fi</xccdf-1.2:fix> |
| 171259 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 171259 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 171360, 16 lines modified | Offset 171360, 16 lines modified | ||
| 171360 | ··-·no_reboot_needed | 171360 | ··-·no_reboot_needed |
| 171361 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 171361 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 171362 | ··stat: | 171362 | ··stat: |
| 171363 | ····path:·/boot/grub2/grub.cfg | 171363 | ····path:·/boot/grub2/grub.cfg |
| 171364 | ··register:·file_exists | 171364 | ··register:·file_exists |
| 171365 | ··when: | 171365 | ··when: |
| 171366 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171367 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171366 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171367 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171368 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171368 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171369 | ··tags: | 171369 | ··tags: |
| 171370 | ··-·CCE-80805-5 | 171370 | ··-·CCE-80805-5 |
| 171371 | ··-·CJIS-5.5.2.2 | 171371 | ··-·CJIS-5.5.2.2 |
| 171372 | ··-·NIST-800-171-3.4.5 | 171372 | ··-·NIST-800-171-3.4.5 |
| 171373 | ··-·NIST-800-53-AC-6(1) | 171373 | ··-·NIST-800-53-AC-6(1) |
| 171374 | ··-·NIST-800-53-CM-6(a) | 171374 | ··-·NIST-800-53-CM-6(a) |
| Offset 171382, 16 lines modified | Offset 171382, 16 lines modified | ||
| 171382 | ··-·no_reboot_needed | 171382 | ··-·no_reboot_needed |
| 171383 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 171383 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 171384 | ··file: | 171384 | ··file: |
| 171385 | ····path:·/boot/grub2/grub.cfg | 171385 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 23998/29468 bytes (81.44%) of diff not shown. | |||
| Offset 170843, 16 lines modified | Offset 170843, 16 lines modified | ||
| 170843 | ··-·no_reboot_needed | 170843 | ··-·no_reboot_needed |
| 170844 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 170844 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 170845 | ··stat: | 170845 | ··stat: |
| 170846 | ····path:·/boot/grub2/grub.cfg | 170846 | ····path:·/boot/grub2/grub.cfg |
| 170847 | ··register:·file_exists | 170847 | ··register:·file_exists |
| 170848 | ··when: | 170848 | ··when: |
| 170849 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 170850 | ··-·'"grub2-common"·in·ansible_facts.packages' | 170849 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 170850 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 170851 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 170851 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 170852 | ··tags: | 170852 | ··tags: |
| 170853 | ··-·CCE-80800-6 | 170853 | ··-·CCE-80800-6 |
| 170854 | ··-·CJIS-5.5.2.2 | 170854 | ··-·CJIS-5.5.2.2 |
| 170855 | ··-·NIST-800-171-3.4.5 | 170855 | ··-·NIST-800-171-3.4.5 |
| 170856 | ··-·NIST-800-53-AC-6(1) | 170856 | ··-·NIST-800-53-AC-6(1) |
| 170857 | ··-·NIST-800-53-CM-6(a) | 170857 | ··-·NIST-800-53-CM-6(a) |
| Offset 170865, 16 lines modified | Offset 170865, 16 lines modified | ||
| 170865 | ··-·no_reboot_needed | 170865 | ··-·no_reboot_needed |
| 170866 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 170866 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 170867 | ··file: | 170867 | ··file: |
| 170868 | ····path:·/boot/grub2/grub.cfg | 170868 | ····path:·/boot/grub2/grub.cfg |
| 170869 | ····group:·'0' | 170869 | ····group:·'0' |
| 170870 | ··when: | 170870 | ··when: |
| 170871 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 170872 | ··-·'"grub2-common"·in·ansible_facts.packages' | 170871 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 170872 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 170873 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 170873 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 170874 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 170874 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 170875 | ··tags: | 170875 | ··tags: |
| 170876 | ··-·CCE-80800-6 | 170876 | ··-·CCE-80800-6 |
| 170877 | ··-·CJIS-5.5.2.2 | 170877 | ··-·CJIS-5.5.2.2 |
| 170878 | ··-·NIST-800-171-3.4.5 | 170878 | ··-·NIST-800-171-3.4.5 |
| 170879 | ··-·NIST-800-53-AC-6(1) | 170879 | ··-·NIST-800-53-AC-6(1) |
| Offset 170883, 15 lines modified | Offset 170883, 15 lines modified | ||
| 170883 | ··-·configure_strategy | 170883 | ··-·configure_strategy |
| 170884 | ··-·file_groupowner_grub2_cfg | 170884 | ··-·file_groupowner_grub2_cfg |
| 170885 | ··-·low_complexity | 170885 | ··-·low_complexity |
| 170886 | ··-·low_disruption | 170886 | ··-·low_disruption |
| 170887 | ··-·medium_severity | 170887 | ··-·medium_severity |
| 170888 | ··-·no_reboot_needed</xccdf-1.2:fix> | 170888 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 170889 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 170889 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 170890 | if· | 170890 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 170891 | chgrp·0·/boot/grub2/grub.cfg | 170891 | chgrp·0·/boot/grub2/grub.cfg |
| 170892 | else | 170892 | else |
| 170893 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 170893 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 170894 | fi</xccdf-1.2:fix> | 170894 | fi</xccdf-1.2:fix> |
| 170895 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 170895 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 171001, 16 lines modified | Offset 171001, 16 lines modified | ||
| 171001 | ··-·no_reboot_needed | 171001 | ··-·no_reboot_needed |
| 171002 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 171002 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 171003 | ··stat: | 171003 | ··stat: |
| 171004 | ····path:·/boot/grub2/user.cfg | 171004 | ····path:·/boot/grub2/user.cfg |
| 171005 | ··register:·file_exists | 171005 | ··register:·file_exists |
| 171006 | ··when: | 171006 | ··when: |
| 171007 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171008 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171007 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171008 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171009 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171009 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171010 | ··tags: | 171010 | ··tags: |
| 171011 | ··-·CCE-86009-8 | 171011 | ··-·CCE-86009-8 |
| 171012 | ··-·CJIS-5.5.2.2 | 171012 | ··-·CJIS-5.5.2.2 |
| 171013 | ··-·NIST-800-171-3.4.5 | 171013 | ··-·NIST-800-171-3.4.5 |
| 171014 | ··-·NIST-800-53-AC-6(1) | 171014 | ··-·NIST-800-53-AC-6(1) |
| 171015 | ··-·NIST-800-53-CM-6(a) | 171015 | ··-·NIST-800-53-CM-6(a) |
| Offset 171023, 16 lines modified | Offset 171023, 16 lines modified | ||
| 171023 | ··-·no_reboot_needed | 171023 | ··-·no_reboot_needed |
| 171024 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 171024 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 171025 | ··file: | 171025 | ··file: |
| 171026 | ····path:·/boot/grub2/user.cfg | 171026 | ····path:·/boot/grub2/user.cfg |
| 171027 | ····group:·'0' | 171027 | ····group:·'0' |
| 171028 | ··when: | 171028 | ··when: |
| 171029 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171030 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171029 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171030 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171031 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171031 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171032 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 171032 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 171033 | ··tags: | 171033 | ··tags: |
| 171034 | ··-·CCE-86009-8 | 171034 | ··-·CCE-86009-8 |
| 171035 | ··-·CJIS-5.5.2.2 | 171035 | ··-·CJIS-5.5.2.2 |
| 171036 | ··-·NIST-800-171-3.4.5 | 171036 | ··-·NIST-800-171-3.4.5 |
| 171037 | ··-·NIST-800-53-AC-6(1) | 171037 | ··-·NIST-800-53-AC-6(1) |
| Offset 171041, 15 lines modified | Offset 171041, 15 lines modified | ||
| 171041 | ··-·configure_strategy | 171041 | ··-·configure_strategy |
| 171042 | ··-·file_groupowner_user_cfg | 171042 | ··-·file_groupowner_user_cfg |
| 171043 | ··-·low_complexity | 171043 | ··-·low_complexity |
| 171044 | ··-·low_disruption | 171044 | ··-·low_disruption |
| 171045 | ··-·medium_severity | 171045 | ··-·medium_severity |
| 171046 | ··-·no_reboot_needed</xccdf-1.2:fix> | 171046 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 171047 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 171047 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 171048 | if· | 171048 | if·rpm·--quiet·-q·grub2-common·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 171049 | chgrp·0·/boot/grub2/user.cfg | 171049 | chgrp·0·/boot/grub2/user.cfg |
| 171050 | else | 171050 | else |
| 171051 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 171051 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171052 | fi</xccdf-1.2:fix> | 171052 | fi</xccdf-1.2:fix> |
| 171053 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 171053 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 171154, 16 lines modified | Offset 171154, 16 lines modified | ||
| 171154 | ··-·no_reboot_needed | 171154 | ··-·no_reboot_needed |
| 171155 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 171155 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 171156 | ··stat: | 171156 | ··stat: |
| 171157 | ····path:·/boot/grub2/grub.cfg | 171157 | ····path:·/boot/grub2/grub.cfg |
| 171158 | ··register:·file_exists | 171158 | ··register:·file_exists |
| 171159 | ··when: | 171159 | ··when: |
| 171160 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171161 | ··-·'"grub2-common"·in·ansible_facts.packages' | 171160 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 171161 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 171162 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 171162 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 171163 | ··tags: | 171163 | ··tags: |
| 171164 | ··-·CCE-80805-5 | 171164 | ··-·CCE-80805-5 |
| 171165 | ··-·CJIS-5.5.2.2 | 171165 | ··-·CJIS-5.5.2.2 |
| 171166 | ··-·NIST-800-171-3.4.5 | 171166 | ··-·NIST-800-171-3.4.5 |
| 171167 | ··-·NIST-800-53-AC-6(1) | 171167 | ··-·NIST-800-53-AC-6(1) |
| 171168 | ··-·NIST-800-53-CM-6(a) | 171168 | ··-·NIST-800-53-CM-6(a) |
| Offset 171176, 16 lines modified | Offset 171176, 16 lines modified | ||
| 171176 | ··-·no_reboot_needed | 171176 | ··-·no_reboot_needed |
| 171177 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 171177 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 171178 | ··file: | 171178 | ··file: |
| 171179 | ····path:·/boot/grub2/grub.cfg | 171179 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 23914/29368 bytes (81.43%) of diff not shown. | |||
| Offset 169324, 16 lines modified | Offset 169324, 16 lines modified | ||
| 169324 | ··-·no_reboot_needed | 169324 | ··-·no_reboot_needed |
| 169325 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169325 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169326 | ··stat: | 169326 | ··stat: |
| 169327 | ····path:·/boot/grub2/user.cfg | 169327 | ····path:·/boot/grub2/user.cfg |
| 169328 | ··register:·file_exists | 169328 | ··register:·file_exists |
| 169329 | ··when: | 169329 | ··when: |
| 169330 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169331 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169330 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169331 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169332 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169332 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169333 | ··tags: | 169333 | ··tags: |
| 169334 | ··-·CCE-86013-0 | 169334 | ··-·CCE-86013-0 |
| 169335 | ··-·CJIS-5.5.2.2 | 169335 | ··-·CJIS-5.5.2.2 |
| 169336 | ··-·NIST-800-171-3.4.5 | 169336 | ··-·NIST-800-171-3.4.5 |
| 169337 | ··-·NIST-800-53-AC-6(1) | 169337 | ··-·NIST-800-53-AC-6(1) |
| 169338 | ··-·NIST-800-53-CM-6(a) | 169338 | ··-·NIST-800-53-CM-6(a) |
| Offset 169346, 16 lines modified | Offset 169346, 16 lines modified | ||
| 169346 | ··-·no_reboot_needed | 169346 | ··-·no_reboot_needed |
| 169347 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 169347 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 169348 | ··file: | 169348 | ··file: |
| 169349 | ····path:·/boot/grub2/user.cfg | 169349 | ····path:·/boot/grub2/user.cfg |
| 169350 | ····group:·'0' | 169350 | ····group:·'0' |
| 169351 | ··when: | 169351 | ··when: |
| 169352 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169353 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169352 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169353 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169354 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169354 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169355 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169355 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169356 | ··tags: | 169356 | ··tags: |
| 169357 | ··-·CCE-86013-0 | 169357 | ··-·CCE-86013-0 |
| 169358 | ··-·CJIS-5.5.2.2 | 169358 | ··-·CJIS-5.5.2.2 |
| 169359 | ··-·NIST-800-171-3.4.5 | 169359 | ··-·NIST-800-171-3.4.5 |
| 169360 | ··-·NIST-800-53-AC-6(1) | 169360 | ··-·NIST-800-53-AC-6(1) |
| Offset 169364, 15 lines modified | Offset 169364, 15 lines modified | ||
| 169364 | ··-·configure_strategy | 169364 | ··-·configure_strategy |
| 169365 | ··-·file_groupowner_efi_user_cfg | 169365 | ··-·file_groupowner_efi_user_cfg |
| 169366 | ··-·low_complexity | 169366 | ··-·low_complexity |
| 169367 | ··-·low_disruption | 169367 | ··-·low_disruption |
| 169368 | ··-·medium_severity | 169368 | ··-·medium_severity |
| 169369 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169369 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169370 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169370 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169371 | if· | 169371 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169372 | chgrp·0·/boot/grub2/user.cfg | 169372 | chgrp·0·/boot/grub2/user.cfg |
| 169373 | else | 169373 | else |
| 169374 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169374 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169375 | fi</xccdf-1.2:fix> | 169375 | fi</xccdf-1.2:fix> |
| 169376 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169376 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169465, 16 lines modified | Offset 169465, 16 lines modified | ||
| 169465 | ··-·no_reboot_needed | 169465 | ··-·no_reboot_needed |
| 169466 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169466 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169467 | ··stat: | 169467 | ··stat: |
| 169468 | ····path:·/boot/grub2/user.cfg | 169468 | ····path:·/boot/grub2/user.cfg |
| 169469 | ··register:·file_exists | 169469 | ··register:·file_exists |
| 169470 | ··when: | 169470 | ··when: |
| 169471 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169472 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169471 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169472 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169473 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169473 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169474 | ··tags: | 169474 | ··tags: |
| 169475 | ··-·CCE-86022-1 | 169475 | ··-·CCE-86022-1 |
| 169476 | ··-·CJIS-5.5.2.2 | 169476 | ··-·CJIS-5.5.2.2 |
| 169477 | ··-·NIST-800-171-3.4.5 | 169477 | ··-·NIST-800-171-3.4.5 |
| 169478 | ··-·NIST-800-53-AC-6(1) | 169478 | ··-·NIST-800-53-AC-6(1) |
| 169479 | ··-·NIST-800-53-CM-6(a) | 169479 | ··-·NIST-800-53-CM-6(a) |
| Offset 169487, 16 lines modified | Offset 169487, 16 lines modified | ||
| 169487 | ··-·no_reboot_needed | 169487 | ··-·no_reboot_needed |
| 169488 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 169488 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 169489 | ··file: | 169489 | ··file: |
| 169490 | ····path:·/boot/grub2/user.cfg | 169490 | ····path:·/boot/grub2/user.cfg |
| 169491 | ····owner:·'0' | 169491 | ····owner:·'0' |
| 169492 | ··when: | 169492 | ··when: |
| 169493 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169494 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169493 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169494 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169495 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169495 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169496 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169496 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169497 | ··tags: | 169497 | ··tags: |
| 169498 | ··-·CCE-86022-1 | 169498 | ··-·CCE-86022-1 |
| 169499 | ··-·CJIS-5.5.2.2 | 169499 | ··-·CJIS-5.5.2.2 |
| 169500 | ··-·NIST-800-171-3.4.5 | 169500 | ··-·NIST-800-171-3.4.5 |
| 169501 | ··-·NIST-800-53-AC-6(1) | 169501 | ··-·NIST-800-53-AC-6(1) |
| Offset 169505, 15 lines modified | Offset 169505, 15 lines modified | ||
| 169505 | ··-·configure_strategy | 169505 | ··-·configure_strategy |
| 169506 | ··-·file_owner_efi_user_cfg | 169506 | ··-·file_owner_efi_user_cfg |
| 169507 | ··-·low_complexity | 169507 | ··-·low_complexity |
| 169508 | ··-·low_disruption | 169508 | ··-·low_disruption |
| 169509 | ··-·medium_severity | 169509 | ··-·medium_severity |
| 169510 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169510 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169511 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169511 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169512 | if· | 169512 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169513 | chown·0·/boot/grub2/user.cfg | 169513 | chown·0·/boot/grub2/user.cfg |
| 169514 | else | 169514 | else |
| 169515 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169515 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169516 | fi</xccdf-1.2:fix> | 169516 | fi</xccdf-1.2:fix> |
| 169517 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169517 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169599, 16 lines modified | Offset 169599, 16 lines modified | ||
| 169599 | ··-·no_reboot_needed | 169599 | ··-·no_reboot_needed |
| 169600 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169600 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169601 | ··stat: | 169601 | ··stat: |
| 169602 | ····path:·/boot/grub2/grub.cfg | 169602 | ····path:·/boot/grub2/grub.cfg |
| 169603 | ··register:·file_exists | 169603 | ··register:·file_exists |
| 169604 | ··when: | 169604 | ··when: |
| 169605 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169606 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169605 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169606 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169607 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169607 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169608 | ··tags: | 169608 | ··tags: |
| 169609 | ··-·CCE-85925-6 | 169609 | ··-·CCE-85925-6 |
| 169610 | ··-·NIST-800-171-3.4.5 | 169610 | ··-·NIST-800-171-3.4.5 |
| 169611 | ··-·NIST-800-53-AC-6(1) | 169611 | ··-·NIST-800-53-AC-6(1) |
| 169612 | ··-·NIST-800-53-CM-6(a) | 169612 | ··-·NIST-800-53-CM-6(a) |
| 169613 | ··-·configure_strategy | 169613 | ··-·configure_strategy |
| Offset 169619, 31 lines modified | Offset 169619, 31 lines modified | ||
| 169619 | ··-·no_reboot_needed | 169619 | ··-·no_reboot_needed |
| 169620 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 169620 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 169621 | ··file: | 169621 | ··file: |
| 169622 | ····path:·/boot/grub2/grub.cfg | 169622 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 5174/10634 bytes (48.66%) of diff not shown. | |||
| Offset 169326, 16 lines modified | Offset 169326, 16 lines modified | ||
| 169326 | ··-·no_reboot_needed | 169326 | ··-·no_reboot_needed |
| 169327 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169327 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169328 | ··stat: | 169328 | ··stat: |
| 169329 | ····path:·/boot/grub2/user.cfg | 169329 | ····path:·/boot/grub2/user.cfg |
| 169330 | ··register:·file_exists | 169330 | ··register:·file_exists |
| 169331 | ··when: | 169331 | ··when: |
| 169332 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169333 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169332 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169333 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169334 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169334 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169335 | ··tags: | 169335 | ··tags: |
| 169336 | ··-·CCE-86013-0 | 169336 | ··-·CCE-86013-0 |
| 169337 | ··-·CJIS-5.5.2.2 | 169337 | ··-·CJIS-5.5.2.2 |
| 169338 | ··-·NIST-800-171-3.4.5 | 169338 | ··-·NIST-800-171-3.4.5 |
| 169339 | ··-·NIST-800-53-AC-6(1) | 169339 | ··-·NIST-800-53-AC-6(1) |
| 169340 | ··-·NIST-800-53-CM-6(a) | 169340 | ··-·NIST-800-53-CM-6(a) |
| Offset 169348, 16 lines modified | Offset 169348, 16 lines modified | ||
| 169348 | ··-·no_reboot_needed | 169348 | ··-·no_reboot_needed |
| 169349 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 169349 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 169350 | ··file: | 169350 | ··file: |
| 169351 | ····path:·/boot/grub2/user.cfg | 169351 | ····path:·/boot/grub2/user.cfg |
| 169352 | ····group:·'0' | 169352 | ····group:·'0' |
| 169353 | ··when: | 169353 | ··when: |
| 169354 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169355 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169354 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169355 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169356 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169356 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169357 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169357 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169358 | ··tags: | 169358 | ··tags: |
| 169359 | ··-·CCE-86013-0 | 169359 | ··-·CCE-86013-0 |
| 169360 | ··-·CJIS-5.5.2.2 | 169360 | ··-·CJIS-5.5.2.2 |
| 169361 | ··-·NIST-800-171-3.4.5 | 169361 | ··-·NIST-800-171-3.4.5 |
| 169362 | ··-·NIST-800-53-AC-6(1) | 169362 | ··-·NIST-800-53-AC-6(1) |
| Offset 169366, 15 lines modified | Offset 169366, 15 lines modified | ||
| 169366 | ··-·configure_strategy | 169366 | ··-·configure_strategy |
| 169367 | ··-·file_groupowner_efi_user_cfg | 169367 | ··-·file_groupowner_efi_user_cfg |
| 169368 | ··-·low_complexity | 169368 | ··-·low_complexity |
| 169369 | ··-·low_disruption | 169369 | ··-·low_disruption |
| 169370 | ··-·medium_severity | 169370 | ··-·medium_severity |
| 169371 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169371 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169372 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169372 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169373 | if· | 169373 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169374 | chgrp·0·/boot/grub2/user.cfg | 169374 | chgrp·0·/boot/grub2/user.cfg |
| 169375 | else | 169375 | else |
| 169376 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169376 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169377 | fi</xccdf-1.2:fix> | 169377 | fi</xccdf-1.2:fix> |
| 169378 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169378 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169467, 16 lines modified | Offset 169467, 16 lines modified | ||
| 169467 | ··-·no_reboot_needed | 169467 | ··-·no_reboot_needed |
| 169468 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169468 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169469 | ··stat: | 169469 | ··stat: |
| 169470 | ····path:·/boot/grub2/user.cfg | 169470 | ····path:·/boot/grub2/user.cfg |
| 169471 | ··register:·file_exists | 169471 | ··register:·file_exists |
| 169472 | ··when: | 169472 | ··when: |
| 169473 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169474 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169473 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169474 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169475 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169475 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169476 | ··tags: | 169476 | ··tags: |
| 169477 | ··-·CCE-86022-1 | 169477 | ··-·CCE-86022-1 |
| 169478 | ··-·CJIS-5.5.2.2 | 169478 | ··-·CJIS-5.5.2.2 |
| 169479 | ··-·NIST-800-171-3.4.5 | 169479 | ··-·NIST-800-171-3.4.5 |
| 169480 | ··-·NIST-800-53-AC-6(1) | 169480 | ··-·NIST-800-53-AC-6(1) |
| 169481 | ··-·NIST-800-53-CM-6(a) | 169481 | ··-·NIST-800-53-CM-6(a) |
| Offset 169489, 16 lines modified | Offset 169489, 16 lines modified | ||
| 169489 | ··-·no_reboot_needed | 169489 | ··-·no_reboot_needed |
| 169490 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 169490 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 169491 | ··file: | 169491 | ··file: |
| 169492 | ····path:·/boot/grub2/user.cfg | 169492 | ····path:·/boot/grub2/user.cfg |
| 169493 | ····owner:·'0' | 169493 | ····owner:·'0' |
| 169494 | ··when: | 169494 | ··when: |
| 169495 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169496 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169495 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169496 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169497 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169497 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169498 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169498 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169499 | ··tags: | 169499 | ··tags: |
| 169500 | ··-·CCE-86022-1 | 169500 | ··-·CCE-86022-1 |
| 169501 | ··-·CJIS-5.5.2.2 | 169501 | ··-·CJIS-5.5.2.2 |
| 169502 | ··-·NIST-800-171-3.4.5 | 169502 | ··-·NIST-800-171-3.4.5 |
| 169503 | ··-·NIST-800-53-AC-6(1) | 169503 | ··-·NIST-800-53-AC-6(1) |
| Offset 169507, 15 lines modified | Offset 169507, 15 lines modified | ||
| 169507 | ··-·configure_strategy | 169507 | ··-·configure_strategy |
| 169508 | ··-·file_owner_efi_user_cfg | 169508 | ··-·file_owner_efi_user_cfg |
| 169509 | ··-·low_complexity | 169509 | ··-·low_complexity |
| 169510 | ··-·low_disruption | 169510 | ··-·low_disruption |
| 169511 | ··-·medium_severity | 169511 | ··-·medium_severity |
| 169512 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169512 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169513 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169513 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169514 | if· | 169514 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169515 | chown·0·/boot/grub2/user.cfg | 169515 | chown·0·/boot/grub2/user.cfg |
| 169516 | else | 169516 | else |
| 169517 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169517 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169518 | fi</xccdf-1.2:fix> | 169518 | fi</xccdf-1.2:fix> |
| 169519 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169519 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169601, 16 lines modified | Offset 169601, 16 lines modified | ||
| 169601 | ··-·no_reboot_needed | 169601 | ··-·no_reboot_needed |
| 169602 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169602 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169603 | ··stat: | 169603 | ··stat: |
| 169604 | ····path:·/boot/grub2/grub.cfg | 169604 | ····path:·/boot/grub2/grub.cfg |
| 169605 | ··register:·file_exists | 169605 | ··register:·file_exists |
| 169606 | ··when: | 169606 | ··when: |
| 169607 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169608 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169607 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169608 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169609 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169609 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169610 | ··tags: | 169610 | ··tags: |
| 169611 | ··-·CCE-85925-6 | 169611 | ··-·CCE-85925-6 |
| 169612 | ··-·NIST-800-171-3.4.5 | 169612 | ··-·NIST-800-171-3.4.5 |
| 169613 | ··-·NIST-800-53-AC-6(1) | 169613 | ··-·NIST-800-53-AC-6(1) |
| 169614 | ··-·NIST-800-53-CM-6(a) | 169614 | ··-·NIST-800-53-CM-6(a) |
| 169615 | ··-·configure_strategy | 169615 | ··-·configure_strategy |
| Offset 169621, 31 lines modified | Offset 169621, 31 lines modified | ||
| 169621 | ··-·no_reboot_needed | 169621 | ··-·no_reboot_needed |
| 169622 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 169622 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 169623 | ··file: | 169623 | ··file: |
| 169624 | ····path:·/boot/grub2/grub.cfg | 169624 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 5174/10634 bytes (48.66%) of diff not shown. | |||
| Offset 169164, 16 lines modified | Offset 169164, 16 lines modified | ||
| 169164 | ··-·no_reboot_needed | 169164 | ··-·no_reboot_needed |
| 169165 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169165 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169166 | ··stat: | 169166 | ··stat: |
| 169167 | ····path:·/boot/grub2/user.cfg | 169167 | ····path:·/boot/grub2/user.cfg |
| 169168 | ··register:·file_exists | 169168 | ··register:·file_exists |
| 169169 | ··when: | 169169 | ··when: |
| 169170 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169171 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169170 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169171 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169172 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169172 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169173 | ··tags: | 169173 | ··tags: |
| 169174 | ··-·CCE-86013-0 | 169174 | ··-·CCE-86013-0 |
| 169175 | ··-·CJIS-5.5.2.2 | 169175 | ··-·CJIS-5.5.2.2 |
| 169176 | ··-·NIST-800-171-3.4.5 | 169176 | ··-·NIST-800-171-3.4.5 |
| 169177 | ··-·NIST-800-53-AC-6(1) | 169177 | ··-·NIST-800-53-AC-6(1) |
| 169178 | ··-·NIST-800-53-CM-6(a) | 169178 | ··-·NIST-800-53-CM-6(a) |
| Offset 169186, 16 lines modified | Offset 169186, 16 lines modified | ||
| 169186 | ··-·no_reboot_needed | 169186 | ··-·no_reboot_needed |
| 169187 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 169187 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 169188 | ··file: | 169188 | ··file: |
| 169189 | ····path:·/boot/grub2/user.cfg | 169189 | ····path:·/boot/grub2/user.cfg |
| 169190 | ····group:·'0' | 169190 | ····group:·'0' |
| 169191 | ··when: | 169191 | ··when: |
| 169192 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169193 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169192 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169193 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169194 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169194 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169195 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169195 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169196 | ··tags: | 169196 | ··tags: |
| 169197 | ··-·CCE-86013-0 | 169197 | ··-·CCE-86013-0 |
| 169198 | ··-·CJIS-5.5.2.2 | 169198 | ··-·CJIS-5.5.2.2 |
| 169199 | ··-·NIST-800-171-3.4.5 | 169199 | ··-·NIST-800-171-3.4.5 |
| 169200 | ··-·NIST-800-53-AC-6(1) | 169200 | ··-·NIST-800-53-AC-6(1) |
| Offset 169204, 15 lines modified | Offset 169204, 15 lines modified | ||
| 169204 | ··-·configure_strategy | 169204 | ··-·configure_strategy |
| 169205 | ··-·file_groupowner_efi_user_cfg | 169205 | ··-·file_groupowner_efi_user_cfg |
| 169206 | ··-·low_complexity | 169206 | ··-·low_complexity |
| 169207 | ··-·low_disruption | 169207 | ··-·low_disruption |
| 169208 | ··-·medium_severity | 169208 | ··-·medium_severity |
| 169209 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169209 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169210 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169210 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169211 | if· | 169211 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169212 | chgrp·0·/boot/grub2/user.cfg | 169212 | chgrp·0·/boot/grub2/user.cfg |
| 169213 | else | 169213 | else |
| 169214 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169214 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169215 | fi</xccdf-1.2:fix> | 169215 | fi</xccdf-1.2:fix> |
| 169216 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169216 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169305, 16 lines modified | Offset 169305, 16 lines modified | ||
| 169305 | ··-·no_reboot_needed | 169305 | ··-·no_reboot_needed |
| 169306 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 169306 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 169307 | ··stat: | 169307 | ··stat: |
| 169308 | ····path:·/boot/grub2/user.cfg | 169308 | ····path:·/boot/grub2/user.cfg |
| 169309 | ··register:·file_exists | 169309 | ··register:·file_exists |
| 169310 | ··when: | 169310 | ··when: |
| 169311 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169312 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169311 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169312 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169313 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169313 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169314 | ··tags: | 169314 | ··tags: |
| 169315 | ··-·CCE-86022-1 | 169315 | ··-·CCE-86022-1 |
| 169316 | ··-·CJIS-5.5.2.2 | 169316 | ··-·CJIS-5.5.2.2 |
| 169317 | ··-·NIST-800-171-3.4.5 | 169317 | ··-·NIST-800-171-3.4.5 |
| 169318 | ··-·NIST-800-53-AC-6(1) | 169318 | ··-·NIST-800-53-AC-6(1) |
| 169319 | ··-·NIST-800-53-CM-6(a) | 169319 | ··-·NIST-800-53-CM-6(a) |
| Offset 169327, 16 lines modified | Offset 169327, 16 lines modified | ||
| 169327 | ··-·no_reboot_needed | 169327 | ··-·no_reboot_needed |
| 169328 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg | 169328 | -·name:·Ensure·owner·0·on·/boot/grub2/user.cfg |
| 169329 | ··file: | 169329 | ··file: |
| 169330 | ····path:·/boot/grub2/user.cfg | 169330 | ····path:·/boot/grub2/user.cfg |
| 169331 | ····owner:·'0' | 169331 | ····owner:·'0' |
| 169332 | ··when: | 169332 | ··when: |
| 169333 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169334 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169333 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169334 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169335 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169336 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 169336 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 169337 | ··tags: | 169337 | ··tags: |
| 169338 | ··-·CCE-86022-1 | 169338 | ··-·CCE-86022-1 |
| 169339 | ··-·CJIS-5.5.2.2 | 169339 | ··-·CJIS-5.5.2.2 |
| 169340 | ··-·NIST-800-171-3.4.5 | 169340 | ··-·NIST-800-171-3.4.5 |
| 169341 | ··-·NIST-800-53-AC-6(1) | 169341 | ··-·NIST-800-53-AC-6(1) |
| Offset 169345, 15 lines modified | Offset 169345, 15 lines modified | ||
| 169345 | ··-·configure_strategy | 169345 | ··-·configure_strategy |
| 169346 | ··-·file_owner_efi_user_cfg | 169346 | ··-·file_owner_efi_user_cfg |
| 169347 | ··-·low_complexity | 169347 | ··-·low_complexity |
| 169348 | ··-·low_disruption | 169348 | ··-·low_disruption |
| 169349 | ··-·medium_severity | 169349 | ··-·medium_severity |
| 169350 | ··-·no_reboot_needed</xccdf-1.2:fix> | 169350 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 169351 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 169351 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 169352 | if· | 169352 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 169353 | chown·0·/boot/grub2/user.cfg | 169353 | chown·0·/boot/grub2/user.cfg |
| 169354 | else | 169354 | else |
| 169355 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169355 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169356 | fi</xccdf-1.2:fix> | 169356 | fi</xccdf-1.2:fix> |
| 169357 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 169357 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 169439, 16 lines modified | Offset 169439, 16 lines modified | ||
| 169439 | ··-·no_reboot_needed | 169439 | ··-·no_reboot_needed |
| 169440 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 169440 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 169441 | ··stat: | 169441 | ··stat: |
| 169442 | ····path:·/boot/grub2/grub.cfg | 169442 | ····path:·/boot/grub2/grub.cfg |
| 169443 | ··register:·file_exists | 169443 | ··register:·file_exists |
| 169444 | ··when: | 169444 | ··when: |
| 169445 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169446 | ··-·'"grub2-common"·in·ansible_facts.packages' | 169445 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 169446 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 169447 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 169447 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 169448 | ··tags: | 169448 | ··tags: |
| 169449 | ··-·CCE-85925-6 | 169449 | ··-·CCE-85925-6 |
| 169450 | ··-·NIST-800-171-3.4.5 | 169450 | ··-·NIST-800-171-3.4.5 |
| 169451 | ··-·NIST-800-53-AC-6(1) | 169451 | ··-·NIST-800-53-AC-6(1) |
| 169452 | ··-·NIST-800-53-CM-6(a) | 169452 | ··-·NIST-800-53-CM-6(a) |
| 169453 | ··-·configure_strategy | 169453 | ··-·configure_strategy |
| Offset 169459, 31 lines modified | Offset 169459, 31 lines modified | ||
| 169459 | ··-·no_reboot_needed | 169459 | ··-·no_reboot_needed |
| 169460 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 169460 | -·name:·Ensure·permission·u-s,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 169461 | ··file: | 169461 | ··file: |
| 169462 | ····path:·/boot/grub2/grub.cfg | 169462 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 5154/10598 bytes (48.63%) of diff not shown. | |||
| Offset 96884, 16 lines modified | Offset 96884, 16 lines modified | ||
| 96884 | ··-·no_reboot_needed | 96884 | ··-·no_reboot_needed |
| 96885 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 96885 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 96886 | ··stat: | 96886 | ··stat: |
| 96887 | ····path:·/boot/grub2/grub.cfg | 96887 | ····path:·/boot/grub2/grub.cfg |
| 96888 | ··register:·file_exists | 96888 | ··register:·file_exists |
| 96889 | ··when: | 96889 | ··when: |
| 96890 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96891 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96890 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96891 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96892 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96892 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96893 | ··tags: | 96893 | ··tags: |
| 96894 | ··-·CJIS-5.5.2.2 | 96894 | ··-·CJIS-5.5.2.2 |
| 96895 | ··-·NIST-800-171-3.4.5 | 96895 | ··-·NIST-800-171-3.4.5 |
| 96896 | ··-·NIST-800-53-AC-6(1) | 96896 | ··-·NIST-800-53-AC-6(1) |
| 96897 | ··-·NIST-800-53-CM-6(a) | 96897 | ··-·NIST-800-53-CM-6(a) |
| 96898 | ··-·PCI-DSS-Req-7.1 | 96898 | ··-·PCI-DSS-Req-7.1 |
| Offset 96905, 16 lines modified | Offset 96905, 16 lines modified | ||
| 96905 | ··-·no_reboot_needed | 96905 | ··-·no_reboot_needed |
| 96906 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 96906 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 96907 | ··file: | 96907 | ··file: |
| 96908 | ····path:·/boot/grub2/grub.cfg | 96908 | ····path:·/boot/grub2/grub.cfg |
| 96909 | ····group:·'0' | 96909 | ····group:·'0' |
| 96910 | ··when: | 96910 | ··when: |
| 96911 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96912 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96911 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96912 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96913 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96913 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96914 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 96914 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 96915 | ··tags: | 96915 | ··tags: |
| 96916 | ··-·CJIS-5.5.2.2 | 96916 | ··-·CJIS-5.5.2.2 |
| 96917 | ··-·NIST-800-171-3.4.5 | 96917 | ··-·NIST-800-171-3.4.5 |
| 96918 | ··-·NIST-800-53-AC-6(1) | 96918 | ··-·NIST-800-53-AC-6(1) |
| 96919 | ··-·NIST-800-53-CM-6(a) | 96919 | ··-·NIST-800-53-CM-6(a) |
| Offset 96922, 15 lines modified | Offset 96922, 15 lines modified | ||
| 96922 | ··-·configure_strategy | 96922 | ··-·configure_strategy |
| 96923 | ··-·file_groupowner_grub2_cfg | 96923 | ··-·file_groupowner_grub2_cfg |
| 96924 | ··-·low_complexity | 96924 | ··-·low_complexity |
| 96925 | ··-·low_disruption | 96925 | ··-·low_disruption |
| 96926 | ··-·medium_severity | 96926 | ··-·medium_severity |
| 96927 | ··-·no_reboot_needed</xccdf-1.2:fix> | 96927 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 96928 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 96928 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 96929 | if· | 96929 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 96930 | chgrp·0·/boot/grub2/grub.cfg | 96930 | chgrp·0·/boot/grub2/grub.cfg |
| 96931 | else | 96931 | else |
| 96932 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 96932 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 96933 | fi</xccdf-1.2:fix> | 96933 | fi</xccdf-1.2:fix> |
| 96934 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 96934 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 97037, 16 lines modified | Offset 97037, 16 lines modified | ||
| 97037 | ··-·no_reboot_needed | 97037 | ··-·no_reboot_needed |
| 97038 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 97038 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 97039 | ··stat: | 97039 | ··stat: |
| 97040 | ····path:·/boot/grub2/user.cfg | 97040 | ····path:·/boot/grub2/user.cfg |
| 97041 | ··register:·file_exists | 97041 | ··register:·file_exists |
| 97042 | ··when: | 97042 | ··when: |
| 97043 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97044 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97043 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97044 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97045 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97045 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97046 | ··tags: | 97046 | ··tags: |
| 97047 | ··-·CJIS-5.5.2.2 | 97047 | ··-·CJIS-5.5.2.2 |
| 97048 | ··-·NIST-800-171-3.4.5 | 97048 | ··-·NIST-800-171-3.4.5 |
| 97049 | ··-·NIST-800-53-AC-6(1) | 97049 | ··-·NIST-800-53-AC-6(1) |
| 97050 | ··-·NIST-800-53-CM-6(a) | 97050 | ··-·NIST-800-53-CM-6(a) |
| 97051 | ··-·PCI-DSS-Req-7.1 | 97051 | ··-·PCI-DSS-Req-7.1 |
| Offset 97058, 16 lines modified | Offset 97058, 16 lines modified | ||
| 97058 | ··-·no_reboot_needed | 97058 | ··-·no_reboot_needed |
| 97059 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 97059 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 97060 | ··file: | 97060 | ··file: |
| 97061 | ····path:·/boot/grub2/user.cfg | 97061 | ····path:·/boot/grub2/user.cfg |
| 97062 | ····group:·'0' | 97062 | ····group:·'0' |
| 97063 | ··when: | 97063 | ··when: |
| 97064 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97065 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97064 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97065 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97066 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97066 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97067 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 97067 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 97068 | ··tags: | 97068 | ··tags: |
| 97069 | ··-·CJIS-5.5.2.2 | 97069 | ··-·CJIS-5.5.2.2 |
| 97070 | ··-·NIST-800-171-3.4.5 | 97070 | ··-·NIST-800-171-3.4.5 |
| 97071 | ··-·NIST-800-53-AC-6(1) | 97071 | ··-·NIST-800-53-AC-6(1) |
| 97072 | ··-·NIST-800-53-CM-6(a) | 97072 | ··-·NIST-800-53-CM-6(a) |
| Offset 97075, 15 lines modified | Offset 97075, 15 lines modified | ||
| 97075 | ··-·configure_strategy | 97075 | ··-·configure_strategy |
| 97076 | ··-·file_groupowner_user_cfg | 97076 | ··-·file_groupowner_user_cfg |
| 97077 | ··-·low_complexity | 97077 | ··-·low_complexity |
| 97078 | ··-·low_disruption | 97078 | ··-·low_disruption |
| 97079 | ··-·medium_severity | 97079 | ··-·medium_severity |
| 97080 | ··-·no_reboot_needed</xccdf-1.2:fix> | 97080 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 97081 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 97081 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 97082 | if· | 97082 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 97083 | chgrp·0·/boot/grub2/user.cfg | 97083 | chgrp·0·/boot/grub2/user.cfg |
| 97084 | else | 97084 | else |
| 97085 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 97085 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 97086 | fi</xccdf-1.2:fix> | 97086 | fi</xccdf-1.2:fix> |
| 97087 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 97087 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 97185, 16 lines modified | Offset 97185, 16 lines modified | ||
| 97185 | ··-·no_reboot_needed | 97185 | ··-·no_reboot_needed |
| 97186 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 97186 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 97187 | ··stat: | 97187 | ··stat: |
| 97188 | ····path:·/boot/grub2/grub.cfg | 97188 | ····path:·/boot/grub2/grub.cfg |
| 97189 | ··register:·file_exists | 97189 | ··register:·file_exists |
| 97190 | ··when: | 97190 | ··when: |
| 97191 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97192 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97191 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97192 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97193 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97193 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97194 | ··tags: | 97194 | ··tags: |
| 97195 | ··-·CJIS-5.5.2.2 | 97195 | ··-·CJIS-5.5.2.2 |
| 97196 | ··-·NIST-800-171-3.4.5 | 97196 | ··-·NIST-800-171-3.4.5 |
| 97197 | ··-·NIST-800-53-AC-6(1) | 97197 | ··-·NIST-800-53-AC-6(1) |
| 97198 | ··-·NIST-800-53-CM-6(a) | 97198 | ··-·NIST-800-53-CM-6(a) |
| 97199 | ··-·PCI-DSS-Req-7.1 | 97199 | ··-·PCI-DSS-Req-7.1 |
| Offset 97206, 16 lines modified | Offset 97206, 16 lines modified | ||
| 97206 | ··-·no_reboot_needed | 97206 | ··-·no_reboot_needed |
| 97207 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 97207 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 97208 | ··file: | 97208 | ··file: |
| 97209 | ····path:·/boot/grub2/grub.cfg | 97209 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 8222/13529 bytes (60.77%) of diff not shown. | |||
| Offset 96884, 16 lines modified | Offset 96884, 16 lines modified | ||
| 96884 | ··-·no_reboot_needed | 96884 | ··-·no_reboot_needed |
| 96885 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 96885 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 96886 | ··stat: | 96886 | ··stat: |
| 96887 | ····path:·/boot/grub2/grub.cfg | 96887 | ····path:·/boot/grub2/grub.cfg |
| 96888 | ··register:·file_exists | 96888 | ··register:·file_exists |
| 96889 | ··when: | 96889 | ··when: |
| 96890 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96891 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96890 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96891 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96892 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96892 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96893 | ··tags: | 96893 | ··tags: |
| 96894 | ··-·CJIS-5.5.2.2 | 96894 | ··-·CJIS-5.5.2.2 |
| 96895 | ··-·NIST-800-171-3.4.5 | 96895 | ··-·NIST-800-171-3.4.5 |
| 96896 | ··-·NIST-800-53-AC-6(1) | 96896 | ··-·NIST-800-53-AC-6(1) |
| 96897 | ··-·NIST-800-53-CM-6(a) | 96897 | ··-·NIST-800-53-CM-6(a) |
| 96898 | ··-·PCI-DSS-Req-7.1 | 96898 | ··-·PCI-DSS-Req-7.1 |
| Offset 96905, 16 lines modified | Offset 96905, 16 lines modified | ||
| 96905 | ··-·no_reboot_needed | 96905 | ··-·no_reboot_needed |
| 96906 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 96906 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 96907 | ··file: | 96907 | ··file: |
| 96908 | ····path:·/boot/grub2/grub.cfg | 96908 | ····path:·/boot/grub2/grub.cfg |
| 96909 | ····group:·'0' | 96909 | ····group:·'0' |
| 96910 | ··when: | 96910 | ··when: |
| 96911 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96912 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96911 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96912 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96913 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96913 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96914 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 96914 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 96915 | ··tags: | 96915 | ··tags: |
| 96916 | ··-·CJIS-5.5.2.2 | 96916 | ··-·CJIS-5.5.2.2 |
| 96917 | ··-·NIST-800-171-3.4.5 | 96917 | ··-·NIST-800-171-3.4.5 |
| 96918 | ··-·NIST-800-53-AC-6(1) | 96918 | ··-·NIST-800-53-AC-6(1) |
| 96919 | ··-·NIST-800-53-CM-6(a) | 96919 | ··-·NIST-800-53-CM-6(a) |
| Offset 96922, 15 lines modified | Offset 96922, 15 lines modified | ||
| 96922 | ··-·configure_strategy | 96922 | ··-·configure_strategy |
| 96923 | ··-·file_groupowner_grub2_cfg | 96923 | ··-·file_groupowner_grub2_cfg |
| 96924 | ··-·low_complexity | 96924 | ··-·low_complexity |
| 96925 | ··-·low_disruption | 96925 | ··-·low_disruption |
| 96926 | ··-·medium_severity | 96926 | ··-·medium_severity |
| 96927 | ··-·no_reboot_needed</xccdf-1.2:fix> | 96927 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 96928 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 96928 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 96929 | if· | 96929 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 96930 | chgrp·0·/boot/grub2/grub.cfg | 96930 | chgrp·0·/boot/grub2/grub.cfg |
| 96931 | else | 96931 | else |
| 96932 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 96932 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 96933 | fi</xccdf-1.2:fix> | 96933 | fi</xccdf-1.2:fix> |
| 96934 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 96934 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 97037, 16 lines modified | Offset 97037, 16 lines modified | ||
| 97037 | ··-·no_reboot_needed | 97037 | ··-·no_reboot_needed |
| 97038 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 97038 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 97039 | ··stat: | 97039 | ··stat: |
| 97040 | ····path:·/boot/grub2/user.cfg | 97040 | ····path:·/boot/grub2/user.cfg |
| 97041 | ··register:·file_exists | 97041 | ··register:·file_exists |
| 97042 | ··when: | 97042 | ··when: |
| 97043 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97044 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97043 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97044 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97045 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97045 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97046 | ··tags: | 97046 | ··tags: |
| 97047 | ··-·CJIS-5.5.2.2 | 97047 | ··-·CJIS-5.5.2.2 |
| 97048 | ··-·NIST-800-171-3.4.5 | 97048 | ··-·NIST-800-171-3.4.5 |
| 97049 | ··-·NIST-800-53-AC-6(1) | 97049 | ··-·NIST-800-53-AC-6(1) |
| 97050 | ··-·NIST-800-53-CM-6(a) | 97050 | ··-·NIST-800-53-CM-6(a) |
| 97051 | ··-·PCI-DSS-Req-7.1 | 97051 | ··-·PCI-DSS-Req-7.1 |
| Offset 97058, 16 lines modified | Offset 97058, 16 lines modified | ||
| 97058 | ··-·no_reboot_needed | 97058 | ··-·no_reboot_needed |
| 97059 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 97059 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 97060 | ··file: | 97060 | ··file: |
| 97061 | ····path:·/boot/grub2/user.cfg | 97061 | ····path:·/boot/grub2/user.cfg |
| 97062 | ····group:·'0' | 97062 | ····group:·'0' |
| 97063 | ··when: | 97063 | ··when: |
| 97064 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97065 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97064 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97065 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97066 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97066 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97067 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 97067 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 97068 | ··tags: | 97068 | ··tags: |
| 97069 | ··-·CJIS-5.5.2.2 | 97069 | ··-·CJIS-5.5.2.2 |
| 97070 | ··-·NIST-800-171-3.4.5 | 97070 | ··-·NIST-800-171-3.4.5 |
| 97071 | ··-·NIST-800-53-AC-6(1) | 97071 | ··-·NIST-800-53-AC-6(1) |
| 97072 | ··-·NIST-800-53-CM-6(a) | 97072 | ··-·NIST-800-53-CM-6(a) |
| Offset 97075, 15 lines modified | Offset 97075, 15 lines modified | ||
| 97075 | ··-·configure_strategy | 97075 | ··-·configure_strategy |
| 97076 | ··-·file_groupowner_user_cfg | 97076 | ··-·file_groupowner_user_cfg |
| 97077 | ··-·low_complexity | 97077 | ··-·low_complexity |
| 97078 | ··-·low_disruption | 97078 | ··-·low_disruption |
| 97079 | ··-·medium_severity | 97079 | ··-·medium_severity |
| 97080 | ··-·no_reboot_needed</xccdf-1.2:fix> | 97080 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 97081 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 97081 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 97082 | if· | 97082 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 97083 | chgrp·0·/boot/grub2/user.cfg | 97083 | chgrp·0·/boot/grub2/user.cfg |
| 97084 | else | 97084 | else |
| 97085 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 97085 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 97086 | fi</xccdf-1.2:fix> | 97086 | fi</xccdf-1.2:fix> |
| 97087 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 97087 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 97185, 16 lines modified | Offset 97185, 16 lines modified | ||
| 97185 | ··-·no_reboot_needed | 97185 | ··-·no_reboot_needed |
| 97186 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 97186 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 97187 | ··stat: | 97187 | ··stat: |
| 97188 | ····path:·/boot/grub2/grub.cfg | 97188 | ····path:·/boot/grub2/grub.cfg |
| 97189 | ··register:·file_exists | 97189 | ··register:·file_exists |
| 97190 | ··when: | 97190 | ··when: |
| 97191 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97192 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97191 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97192 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97193 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97193 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97194 | ··tags: | 97194 | ··tags: |
| 97195 | ··-·CJIS-5.5.2.2 | 97195 | ··-·CJIS-5.5.2.2 |
| 97196 | ··-·NIST-800-171-3.4.5 | 97196 | ··-·NIST-800-171-3.4.5 |
| 97197 | ··-·NIST-800-53-AC-6(1) | 97197 | ··-·NIST-800-53-AC-6(1) |
| 97198 | ··-·NIST-800-53-CM-6(a) | 97198 | ··-·NIST-800-53-CM-6(a) |
| 97199 | ··-·PCI-DSS-Req-7.1 | 97199 | ··-·PCI-DSS-Req-7.1 |
| Offset 97206, 16 lines modified | Offset 97206, 16 lines modified | ||
| 97206 | ··-·no_reboot_needed | 97206 | ··-·no_reboot_needed |
| 97207 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 97207 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 97208 | ··file: | 97208 | ··file: |
| 97209 | ····path:·/boot/grub2/grub.cfg | 97209 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 8222/13529 bytes (60.77%) of diff not shown. | |||
| Offset 96756, 16 lines modified | Offset 96756, 16 lines modified | ||
| 96756 | ··-·no_reboot_needed | 96756 | ··-·no_reboot_needed |
| 96757 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 96757 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 96758 | ··stat: | 96758 | ··stat: |
| 96759 | ····path:·/boot/grub2/grub.cfg | 96759 | ····path:·/boot/grub2/grub.cfg |
| 96760 | ··register:·file_exists | 96760 | ··register:·file_exists |
| 96761 | ··when: | 96761 | ··when: |
| 96762 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96763 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96762 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96763 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96764 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96764 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96765 | ··tags: | 96765 | ··tags: |
| 96766 | ··-·CJIS-5.5.2.2 | 96766 | ··-·CJIS-5.5.2.2 |
| 96767 | ··-·NIST-800-171-3.4.5 | 96767 | ··-·NIST-800-171-3.4.5 |
| 96768 | ··-·NIST-800-53-AC-6(1) | 96768 | ··-·NIST-800-53-AC-6(1) |
| 96769 | ··-·NIST-800-53-CM-6(a) | 96769 | ··-·NIST-800-53-CM-6(a) |
| 96770 | ··-·PCI-DSS-Req-7.1 | 96770 | ··-·PCI-DSS-Req-7.1 |
| Offset 96777, 16 lines modified | Offset 96777, 16 lines modified | ||
| 96777 | ··-·no_reboot_needed | 96777 | ··-·no_reboot_needed |
| 96778 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 96778 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 96779 | ··file: | 96779 | ··file: |
| 96780 | ····path:·/boot/grub2/grub.cfg | 96780 | ····path:·/boot/grub2/grub.cfg |
| 96781 | ····group:·'0' | 96781 | ····group:·'0' |
| 96782 | ··when: | 96782 | ··when: |
| 96783 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96784 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96783 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96784 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96785 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96785 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96786 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 96786 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 96787 | ··tags: | 96787 | ··tags: |
| 96788 | ··-·CJIS-5.5.2.2 | 96788 | ··-·CJIS-5.5.2.2 |
| 96789 | ··-·NIST-800-171-3.4.5 | 96789 | ··-·NIST-800-171-3.4.5 |
| 96790 | ··-·NIST-800-53-AC-6(1) | 96790 | ··-·NIST-800-53-AC-6(1) |
| 96791 | ··-·NIST-800-53-CM-6(a) | 96791 | ··-·NIST-800-53-CM-6(a) |
| Offset 96794, 15 lines modified | Offset 96794, 15 lines modified | ||
| 96794 | ··-·configure_strategy | 96794 | ··-·configure_strategy |
| 96795 | ··-·file_groupowner_grub2_cfg | 96795 | ··-·file_groupowner_grub2_cfg |
| 96796 | ··-·low_complexity | 96796 | ··-·low_complexity |
| 96797 | ··-·low_disruption | 96797 | ··-·low_disruption |
| 96798 | ··-·medium_severity | 96798 | ··-·medium_severity |
| 96799 | ··-·no_reboot_needed</xccdf-1.2:fix> | 96799 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 96800 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 96800 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 96801 | if· | 96801 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 96802 | chgrp·0·/boot/grub2/grub.cfg | 96802 | chgrp·0·/boot/grub2/grub.cfg |
| 96803 | else | 96803 | else |
| 96804 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 96804 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 96805 | fi</xccdf-1.2:fix> | 96805 | fi</xccdf-1.2:fix> |
| 96806 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 96806 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 96909, 16 lines modified | Offset 96909, 16 lines modified | ||
| 96909 | ··-·no_reboot_needed | 96909 | ··-·no_reboot_needed |
| 96910 | -·name:·Test·for·existence·/boot/grub2/user.cfg | 96910 | -·name:·Test·for·existence·/boot/grub2/user.cfg |
| 96911 | ··stat: | 96911 | ··stat: |
| 96912 | ····path:·/boot/grub2/user.cfg | 96912 | ····path:·/boot/grub2/user.cfg |
| 96913 | ··register:·file_exists | 96913 | ··register:·file_exists |
| 96914 | ··when: | 96914 | ··when: |
| 96915 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96916 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96915 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96916 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96917 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96917 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96918 | ··tags: | 96918 | ··tags: |
| 96919 | ··-·CJIS-5.5.2.2 | 96919 | ··-·CJIS-5.5.2.2 |
| 96920 | ··-·NIST-800-171-3.4.5 | 96920 | ··-·NIST-800-171-3.4.5 |
| 96921 | ··-·NIST-800-53-AC-6(1) | 96921 | ··-·NIST-800-53-AC-6(1) |
| 96922 | ··-·NIST-800-53-CM-6(a) | 96922 | ··-·NIST-800-53-CM-6(a) |
| 96923 | ··-·PCI-DSS-Req-7.1 | 96923 | ··-·PCI-DSS-Req-7.1 |
| Offset 96930, 16 lines modified | Offset 96930, 16 lines modified | ||
| 96930 | ··-·no_reboot_needed | 96930 | ··-·no_reboot_needed |
| 96931 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg | 96931 | -·name:·Ensure·group·owner·0·on·/boot/grub2/user.cfg |
| 96932 | ··file: | 96932 | ··file: |
| 96933 | ····path:·/boot/grub2/user.cfg | 96933 | ····path:·/boot/grub2/user.cfg |
| 96934 | ····group:·'0' | 96934 | ····group:·'0' |
| 96935 | ··when: | 96935 | ··when: |
| 96936 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96937 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 96936 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 96937 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 96938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 96938 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 96939 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 96939 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 96940 | ··tags: | 96940 | ··tags: |
| 96941 | ··-·CJIS-5.5.2.2 | 96941 | ··-·CJIS-5.5.2.2 |
| 96942 | ··-·NIST-800-171-3.4.5 | 96942 | ··-·NIST-800-171-3.4.5 |
| 96943 | ··-·NIST-800-53-AC-6(1) | 96943 | ··-·NIST-800-53-AC-6(1) |
| 96944 | ··-·NIST-800-53-CM-6(a) | 96944 | ··-·NIST-800-53-CM-6(a) |
| Offset 96947, 15 lines modified | Offset 96947, 15 lines modified | ||
| 96947 | ··-·configure_strategy | 96947 | ··-·configure_strategy |
| 96948 | ··-·file_groupowner_user_cfg | 96948 | ··-·file_groupowner_user_cfg |
| 96949 | ··-·low_complexity | 96949 | ··-·low_complexity |
| 96950 | ··-·low_disruption | 96950 | ··-·low_disruption |
| 96951 | ··-·medium_severity | 96951 | ··-·medium_severity |
| 96952 | ··-·no_reboot_needed</xccdf-1.2:fix> | 96952 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 96953 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 96953 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 96954 | if· | 96954 | if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 96955 | chgrp·0·/boot/grub2/user.cfg | 96955 | chgrp·0·/boot/grub2/user.cfg |
| 96956 | else | 96956 | else |
| 96957 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 96957 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 96958 | fi</xccdf-1.2:fix> | 96958 | fi</xccdf-1.2:fix> |
| 96959 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 96959 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 97057, 16 lines modified | Offset 97057, 16 lines modified | ||
| 97057 | ··-·no_reboot_needed | 97057 | ··-·no_reboot_needed |
| 97058 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 97058 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 97059 | ··stat: | 97059 | ··stat: |
| 97060 | ····path:·/boot/grub2/grub.cfg | 97060 | ····path:·/boot/grub2/grub.cfg |
| 97061 | ··register:·file_exists | 97061 | ··register:·file_exists |
| 97062 | ··when: | 97062 | ··when: |
| 97063 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97064 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | 97063 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' |
| 97064 | ··-·'"grub2-common"·in·ansible_facts.packages' | ||
| 97065 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 97065 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 97066 | ··tags: | 97066 | ··tags: |
| 97067 | ··-·CJIS-5.5.2.2 | 97067 | ··-·CJIS-5.5.2.2 |
| 97068 | ··-·NIST-800-171-3.4.5 | 97068 | ··-·NIST-800-171-3.4.5 |
| 97069 | ··-·NIST-800-53-AC-6(1) | 97069 | ··-·NIST-800-53-AC-6(1) |
| 97070 | ··-·NIST-800-53-CM-6(a) | 97070 | ··-·NIST-800-53-CM-6(a) |
| 97071 | ··-·PCI-DSS-Req-7.1 | 97071 | ··-·PCI-DSS-Req-7.1 |
| Offset 97078, 16 lines modified | Offset 97078, 16 lines modified | ||
| 97078 | ··-·no_reboot_needed | 97078 | ··-·no_reboot_needed |
| 97079 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 97079 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 97080 | ··file: | 97080 | ··file: |
| 97081 | ····path:·/boot/grub2/grub.cfg | 97081 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 8190/13481 bytes (60.75%) of diff not shown. | |||
| Offset 151314, 16 lines modified | Offset 151314, 16 lines modified | ||
| 151314 | ··-·no_reboot_needed | 151314 | ··-·no_reboot_needed |
| 151315 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151315 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151316 | ··stat: | 151316 | ··stat: |
| 151317 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151317 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151318 | ··register:·file_exists | 151318 | ··register:·file_exists |
| 151319 | ··when: | 151319 | ··when: |
| 151320 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151321 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151320 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151321 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151322 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151322 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151323 | ··tags: | 151323 | ··tags: |
| 151324 | ··-·CJIS-5.5.2.2 | 151324 | ··-·CJIS-5.5.2.2 |
| 151325 | ··-·NIST-800-171-3.4.5 | 151325 | ··-·NIST-800-171-3.4.5 |
| 151326 | ··-·NIST-800-53-AC-6(1) | 151326 | ··-·NIST-800-53-AC-6(1) |
| 151327 | ··-·NIST-800-53-CM-6(a) | 151327 | ··-·NIST-800-53-CM-6(a) |
| 151328 | ··-·PCI-DSS-Req-7.1 | 151328 | ··-·PCI-DSS-Req-7.1 |
| Offset 151335, 16 lines modified | Offset 151335, 16 lines modified | ||
| 151335 | ··-·no_reboot_needed | 151335 | ··-·no_reboot_needed |
| 151336 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151336 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151337 | ··file: | 151337 | ··file: |
| 151338 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151338 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151339 | ····group:·'0' | 151339 | ····group:·'0' |
| 151340 | ··when: | 151340 | ··when: |
| 151341 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151342 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151341 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151342 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151343 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151343 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151344 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151344 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151345 | ··tags: | 151345 | ··tags: |
| 151346 | ··-·CJIS-5.5.2.2 | 151346 | ··-·CJIS-5.5.2.2 |
| 151347 | ··-·NIST-800-171-3.4.5 | 151347 | ··-·NIST-800-171-3.4.5 |
| 151348 | ··-·NIST-800-53-AC-6(1) | 151348 | ··-·NIST-800-53-AC-6(1) |
| 151349 | ··-·NIST-800-53-CM-6(a) | 151349 | ··-·NIST-800-53-CM-6(a) |
| Offset 151352, 15 lines modified | Offset 151352, 15 lines modified | ||
| 151352 | ··-·configure_strategy | 151352 | ··-·configure_strategy |
| 151353 | ··-·file_groupowner_efi_grub2_cfg | 151353 | ··-·file_groupowner_efi_grub2_cfg |
| 151354 | ··-·low_complexity | 151354 | ··-·low_complexity |
| 151355 | ··-·low_disruption | 151355 | ··-·low_disruption |
| 151356 | ··-·medium_severity | 151356 | ··-·medium_severity |
| 151357 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151357 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151358 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151358 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151359 | if· | 151359 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151360 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 151360 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 151361 | else | 151361 | else |
| 151362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151363 | fi</xccdf-1.2:fix> | 151363 | fi</xccdf-1.2:fix> |
| 151364 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151364 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151456, 16 lines modified | Offset 151456, 16 lines modified | ||
| 151456 | ··-·no_reboot_needed | 151456 | ··-·no_reboot_needed |
| 151457 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 151457 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 151458 | ··stat: | 151458 | ··stat: |
| 151459 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151459 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151460 | ··register:·file_exists | 151460 | ··register:·file_exists |
| 151461 | ··when: | 151461 | ··when: |
| 151462 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151463 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151462 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151463 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151464 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151464 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151465 | ··tags: | 151465 | ··tags: |
| 151466 | ··-·CJIS-5.5.2.2 | 151466 | ··-·CJIS-5.5.2.2 |
| 151467 | ··-·NIST-800-171-3.4.5 | 151467 | ··-·NIST-800-171-3.4.5 |
| 151468 | ··-·NIST-800-53-AC-6(1) | 151468 | ··-·NIST-800-53-AC-6(1) |
| 151469 | ··-·NIST-800-53-CM-6(a) | 151469 | ··-·NIST-800-53-CM-6(a) |
| 151470 | ··-·PCI-DSS-Req-7.1 | 151470 | ··-·PCI-DSS-Req-7.1 |
| Offset 151477, 16 lines modified | Offset 151477, 16 lines modified | ||
| 151477 | ··-·no_reboot_needed | 151477 | ··-·no_reboot_needed |
| 151478 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 151478 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 151479 | ··file: | 151479 | ··file: |
| 151480 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151480 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151481 | ····group:·'0' | 151481 | ····group:·'0' |
| 151482 | ··when: | 151482 | ··when: |
| 151483 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151484 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151483 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151484 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151485 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151485 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151486 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151486 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151487 | ··tags: | 151487 | ··tags: |
| 151488 | ··-·CJIS-5.5.2.2 | 151488 | ··-·CJIS-5.5.2.2 |
| 151489 | ··-·NIST-800-171-3.4.5 | 151489 | ··-·NIST-800-171-3.4.5 |
| 151490 | ··-·NIST-800-53-AC-6(1) | 151490 | ··-·NIST-800-53-AC-6(1) |
| 151491 | ··-·NIST-800-53-CM-6(a) | 151491 | ··-·NIST-800-53-CM-6(a) |
| Offset 151494, 15 lines modified | Offset 151494, 15 lines modified | ||
| 151494 | ··-·configure_strategy | 151494 | ··-·configure_strategy |
| 151495 | ··-·file_groupowner_efi_user_cfg | 151495 | ··-·file_groupowner_efi_user_cfg |
| 151496 | ··-·low_complexity | 151496 | ··-·low_complexity |
| 151497 | ··-·low_disruption | 151497 | ··-·low_disruption |
| 151498 | ··-·medium_severity | 151498 | ··-·medium_severity |
| 151499 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151499 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151500 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151500 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151501 | if· | 151501 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151502 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 151502 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 151503 | else | 151503 | else |
| 151504 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151504 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151505 | fi</xccdf-1.2:fix> | 151505 | fi</xccdf-1.2:fix> |
| 151506 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151506 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151594, 16 lines modified | Offset 151594, 16 lines modified | ||
| 151594 | ··-·no_reboot_needed | 151594 | ··-·no_reboot_needed |
| 151595 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151595 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151596 | ··stat: | 151596 | ··stat: |
| 151597 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151597 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151598 | ··register:·file_exists | 151598 | ··register:·file_exists |
| 151599 | ··when: | 151599 | ··when: |
| 151600 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151601 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151600 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151601 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151602 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151602 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151603 | ··tags: | 151603 | ··tags: |
| 151604 | ··-·CJIS-5.5.2.2 | 151604 | ··-·CJIS-5.5.2.2 |
| 151605 | ··-·NIST-800-171-3.4.5 | 151605 | ··-·NIST-800-171-3.4.5 |
| 151606 | ··-·NIST-800-53-AC-6(1) | 151606 | ··-·NIST-800-53-AC-6(1) |
| 151607 | ··-·NIST-800-53-CM-6(a) | 151607 | ··-·NIST-800-53-CM-6(a) |
| 151608 | ··-·PCI-DSS-Req-7.1 | 151608 | ··-·PCI-DSS-Req-7.1 |
| Offset 151615, 16 lines modified | Offset 151615, 16 lines modified | ||
| 151615 | ··-·no_reboot_needed | 151615 | ··-·no_reboot_needed |
| 151616 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151616 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151617 | ··file: | 151617 | ··file: |
| 151618 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151618 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9972/15564 bytes (64.07%) of diff not shown. | |||
| Offset 151316, 16 lines modified | Offset 151316, 16 lines modified | ||
| 151316 | ··-·no_reboot_needed | 151316 | ··-·no_reboot_needed |
| 151317 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151317 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151318 | ··stat: | 151318 | ··stat: |
| 151319 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151319 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151320 | ··register:·file_exists | 151320 | ··register:·file_exists |
| 151321 | ··when: | 151321 | ··when: |
| 151322 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151323 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151322 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151323 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151324 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151324 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151325 | ··tags: | 151325 | ··tags: |
| 151326 | ··-·CJIS-5.5.2.2 | 151326 | ··-·CJIS-5.5.2.2 |
| 151327 | ··-·NIST-800-171-3.4.5 | 151327 | ··-·NIST-800-171-3.4.5 |
| 151328 | ··-·NIST-800-53-AC-6(1) | 151328 | ··-·NIST-800-53-AC-6(1) |
| 151329 | ··-·NIST-800-53-CM-6(a) | 151329 | ··-·NIST-800-53-CM-6(a) |
| 151330 | ··-·PCI-DSS-Req-7.1 | 151330 | ··-·PCI-DSS-Req-7.1 |
| Offset 151337, 16 lines modified | Offset 151337, 16 lines modified | ||
| 151337 | ··-·no_reboot_needed | 151337 | ··-·no_reboot_needed |
| 151338 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151338 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151339 | ··file: | 151339 | ··file: |
| 151340 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151340 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151341 | ····group:·'0' | 151341 | ····group:·'0' |
| 151342 | ··when: | 151342 | ··when: |
| 151343 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151344 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151343 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151344 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151345 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151345 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151346 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151346 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151347 | ··tags: | 151347 | ··tags: |
| 151348 | ··-·CJIS-5.5.2.2 | 151348 | ··-·CJIS-5.5.2.2 |
| 151349 | ··-·NIST-800-171-3.4.5 | 151349 | ··-·NIST-800-171-3.4.5 |
| 151350 | ··-·NIST-800-53-AC-6(1) | 151350 | ··-·NIST-800-53-AC-6(1) |
| 151351 | ··-·NIST-800-53-CM-6(a) | 151351 | ··-·NIST-800-53-CM-6(a) |
| Offset 151354, 15 lines modified | Offset 151354, 15 lines modified | ||
| 151354 | ··-·configure_strategy | 151354 | ··-·configure_strategy |
| 151355 | ··-·file_groupowner_efi_grub2_cfg | 151355 | ··-·file_groupowner_efi_grub2_cfg |
| 151356 | ··-·low_complexity | 151356 | ··-·low_complexity |
| 151357 | ··-·low_disruption | 151357 | ··-·low_disruption |
| 151358 | ··-·medium_severity | 151358 | ··-·medium_severity |
| 151359 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151359 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151360 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151360 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151361 | if· | 151361 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151362 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 151362 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 151363 | else | 151363 | else |
| 151364 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151364 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151365 | fi</xccdf-1.2:fix> | 151365 | fi</xccdf-1.2:fix> |
| 151366 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151366 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151458, 16 lines modified | Offset 151458, 16 lines modified | ||
| 151458 | ··-·no_reboot_needed | 151458 | ··-·no_reboot_needed |
| 151459 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 151459 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 151460 | ··stat: | 151460 | ··stat: |
| 151461 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151461 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151462 | ··register:·file_exists | 151462 | ··register:·file_exists |
| 151463 | ··when: | 151463 | ··when: |
| 151464 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151465 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151464 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151465 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151466 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151466 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151467 | ··tags: | 151467 | ··tags: |
| 151468 | ··-·CJIS-5.5.2.2 | 151468 | ··-·CJIS-5.5.2.2 |
| 151469 | ··-·NIST-800-171-3.4.5 | 151469 | ··-·NIST-800-171-3.4.5 |
| 151470 | ··-·NIST-800-53-AC-6(1) | 151470 | ··-·NIST-800-53-AC-6(1) |
| 151471 | ··-·NIST-800-53-CM-6(a) | 151471 | ··-·NIST-800-53-CM-6(a) |
| 151472 | ··-·PCI-DSS-Req-7.1 | 151472 | ··-·PCI-DSS-Req-7.1 |
| Offset 151479, 16 lines modified | Offset 151479, 16 lines modified | ||
| 151479 | ··-·no_reboot_needed | 151479 | ··-·no_reboot_needed |
| 151480 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 151480 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 151481 | ··file: | 151481 | ··file: |
| 151482 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151482 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151483 | ····group:·'0' | 151483 | ····group:·'0' |
| 151484 | ··when: | 151484 | ··when: |
| 151485 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151486 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151485 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151486 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151487 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151487 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151488 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151488 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151489 | ··tags: | 151489 | ··tags: |
| 151490 | ··-·CJIS-5.5.2.2 | 151490 | ··-·CJIS-5.5.2.2 |
| 151491 | ··-·NIST-800-171-3.4.5 | 151491 | ··-·NIST-800-171-3.4.5 |
| 151492 | ··-·NIST-800-53-AC-6(1) | 151492 | ··-·NIST-800-53-AC-6(1) |
| 151493 | ··-·NIST-800-53-CM-6(a) | 151493 | ··-·NIST-800-53-CM-6(a) |
| Offset 151496, 15 lines modified | Offset 151496, 15 lines modified | ||
| 151496 | ··-·configure_strategy | 151496 | ··-·configure_strategy |
| 151497 | ··-·file_groupowner_efi_user_cfg | 151497 | ··-·file_groupowner_efi_user_cfg |
| 151498 | ··-·low_complexity | 151498 | ··-·low_complexity |
| 151499 | ··-·low_disruption | 151499 | ··-·low_disruption |
| 151500 | ··-·medium_severity | 151500 | ··-·medium_severity |
| 151501 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151501 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151502 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151502 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151503 | if· | 151503 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151504 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 151504 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 151505 | else | 151505 | else |
| 151506 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151506 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151507 | fi</xccdf-1.2:fix> | 151507 | fi</xccdf-1.2:fix> |
| 151508 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151508 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151596, 16 lines modified | Offset 151596, 16 lines modified | ||
| 151596 | ··-·no_reboot_needed | 151596 | ··-·no_reboot_needed |
| 151597 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151597 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151598 | ··stat: | 151598 | ··stat: |
| 151599 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151599 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151600 | ··register:·file_exists | 151600 | ··register:·file_exists |
| 151601 | ··when: | 151601 | ··when: |
| 151602 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151603 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151602 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151603 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151604 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151604 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151605 | ··tags: | 151605 | ··tags: |
| 151606 | ··-·CJIS-5.5.2.2 | 151606 | ··-·CJIS-5.5.2.2 |
| 151607 | ··-·NIST-800-171-3.4.5 | 151607 | ··-·NIST-800-171-3.4.5 |
| 151608 | ··-·NIST-800-53-AC-6(1) | 151608 | ··-·NIST-800-53-AC-6(1) |
| 151609 | ··-·NIST-800-53-CM-6(a) | 151609 | ··-·NIST-800-53-CM-6(a) |
| 151610 | ··-·PCI-DSS-Req-7.1 | 151610 | ··-·PCI-DSS-Req-7.1 |
| Offset 151617, 16 lines modified | Offset 151617, 16 lines modified | ||
| 151617 | ··-·no_reboot_needed | 151617 | ··-·no_reboot_needed |
| 151618 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151618 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151619 | ··file: | 151619 | ··file: |
| 151620 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151620 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9972/15564 bytes (64.07%) of diff not shown. | |||
| Offset 151142, 16 lines modified | Offset 151142, 16 lines modified | ||
| 151142 | ··-·no_reboot_needed | 151142 | ··-·no_reboot_needed |
| 151143 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151143 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151144 | ··stat: | 151144 | ··stat: |
| 151145 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151145 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151146 | ··register:·file_exists | 151146 | ··register:·file_exists |
| 151147 | ··when: | 151147 | ··when: |
| 151148 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151149 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151148 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151149 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151150 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151150 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151151 | ··tags: | 151151 | ··tags: |
| 151152 | ··-·CJIS-5.5.2.2 | 151152 | ··-·CJIS-5.5.2.2 |
| 151153 | ··-·NIST-800-171-3.4.5 | 151153 | ··-·NIST-800-171-3.4.5 |
| 151154 | ··-·NIST-800-53-AC-6(1) | 151154 | ··-·NIST-800-53-AC-6(1) |
| 151155 | ··-·NIST-800-53-CM-6(a) | 151155 | ··-·NIST-800-53-CM-6(a) |
| 151156 | ··-·PCI-DSS-Req-7.1 | 151156 | ··-·PCI-DSS-Req-7.1 |
| Offset 151163, 16 lines modified | Offset 151163, 16 lines modified | ||
| 151163 | ··-·no_reboot_needed | 151163 | ··-·no_reboot_needed |
| 151164 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151164 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151165 | ··file: | 151165 | ··file: |
| 151166 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151166 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151167 | ····group:·'0' | 151167 | ····group:·'0' |
| 151168 | ··when: | 151168 | ··when: |
| 151169 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151170 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151169 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151170 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151171 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151171 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151172 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151172 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151173 | ··tags: | 151173 | ··tags: |
| 151174 | ··-·CJIS-5.5.2.2 | 151174 | ··-·CJIS-5.5.2.2 |
| 151175 | ··-·NIST-800-171-3.4.5 | 151175 | ··-·NIST-800-171-3.4.5 |
| 151176 | ··-·NIST-800-53-AC-6(1) | 151176 | ··-·NIST-800-53-AC-6(1) |
| 151177 | ··-·NIST-800-53-CM-6(a) | 151177 | ··-·NIST-800-53-CM-6(a) |
| Offset 151180, 15 lines modified | Offset 151180, 15 lines modified | ||
| 151180 | ··-·configure_strategy | 151180 | ··-·configure_strategy |
| 151181 | ··-·file_groupowner_efi_grub2_cfg | 151181 | ··-·file_groupowner_efi_grub2_cfg |
| 151182 | ··-·low_complexity | 151182 | ··-·low_complexity |
| 151183 | ··-·low_disruption | 151183 | ··-·low_disruption |
| 151184 | ··-·medium_severity | 151184 | ··-·medium_severity |
| 151185 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151185 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151186 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151186 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151187 | if· | 151187 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151188 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg | 151188 | chgrp·0·/boot/efi/EFI/redhat/grub.cfg |
| 151189 | else | 151189 | else |
| 151190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151191 | fi</xccdf-1.2:fix> | 151191 | fi</xccdf-1.2:fix> |
| 151192 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151192 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151284, 16 lines modified | Offset 151284, 16 lines modified | ||
| 151284 | ··-·no_reboot_needed | 151284 | ··-·no_reboot_needed |
| 151285 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg | 151285 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/user.cfg |
| 151286 | ··stat: | 151286 | ··stat: |
| 151287 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151287 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151288 | ··register:·file_exists | 151288 | ··register:·file_exists |
| 151289 | ··when: | 151289 | ··when: |
| 151290 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151291 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151290 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151291 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151292 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151292 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151293 | ··tags: | 151293 | ··tags: |
| 151294 | ··-·CJIS-5.5.2.2 | 151294 | ··-·CJIS-5.5.2.2 |
| 151295 | ··-·NIST-800-171-3.4.5 | 151295 | ··-·NIST-800-171-3.4.5 |
| 151296 | ··-·NIST-800-53-AC-6(1) | 151296 | ··-·NIST-800-53-AC-6(1) |
| 151297 | ··-·NIST-800-53-CM-6(a) | 151297 | ··-·NIST-800-53-CM-6(a) |
| 151298 | ··-·PCI-DSS-Req-7.1 | 151298 | ··-·PCI-DSS-Req-7.1 |
| Offset 151305, 16 lines modified | Offset 151305, 16 lines modified | ||
| 151305 | ··-·no_reboot_needed | 151305 | ··-·no_reboot_needed |
| 151306 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg | 151306 | -·name:·Ensure·group·owner·0·on·/boot/efi/EFI/redhat/user.cfg |
| 151307 | ··file: | 151307 | ··file: |
| 151308 | ····path:·/boot/efi/EFI/redhat/user.cfg | 151308 | ····path:·/boot/efi/EFI/redhat/user.cfg |
| 151309 | ····group:·'0' | 151309 | ····group:·'0' |
| 151310 | ··when: | 151310 | ··when: |
| 151311 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151312 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151311 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151312 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151313 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151313 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151314 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 151314 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 151315 | ··tags: | 151315 | ··tags: |
| 151316 | ··-·CJIS-5.5.2.2 | 151316 | ··-·CJIS-5.5.2.2 |
| 151317 | ··-·NIST-800-171-3.4.5 | 151317 | ··-·NIST-800-171-3.4.5 |
| 151318 | ··-·NIST-800-53-AC-6(1) | 151318 | ··-·NIST-800-53-AC-6(1) |
| 151319 | ··-·NIST-800-53-CM-6(a) | 151319 | ··-·NIST-800-53-CM-6(a) |
| Offset 151322, 15 lines modified | Offset 151322, 15 lines modified | ||
| 151322 | ··-·configure_strategy | 151322 | ··-·configure_strategy |
| 151323 | ··-·file_groupowner_efi_user_cfg | 151323 | ··-·file_groupowner_efi_user_cfg |
| 151324 | ··-·low_complexity | 151324 | ··-·low_complexity |
| 151325 | ··-·low_disruption | 151325 | ··-·low_disruption |
| 151326 | ··-·medium_severity | 151326 | ··-·medium_severity |
| 151327 | ··-·no_reboot_needed</xccdf-1.2:fix> | 151327 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 151328 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 151328 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_efi_user_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 151329 | if· | 151329 | if·rpm·--quiet·-q·grub2-common·&&·[·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 151330 | chgrp·0·/boot/efi/EFI/redhat/user.cfg | 151330 | chgrp·0·/boot/efi/EFI/redhat/user.cfg |
| 151331 | else | 151331 | else |
| 151332 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151332 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 151333 | fi</xccdf-1.2:fix> | 151333 | fi</xccdf-1.2:fix> |
| 151334 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 151334 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 151422, 16 lines modified | Offset 151422, 16 lines modified | ||
| 151422 | ··-·no_reboot_needed | 151422 | ··-·no_reboot_needed |
| 151423 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg | 151423 | -·name:·Test·for·existence·/boot/efi/EFI/redhat/grub.cfg |
| 151424 | ··stat: | 151424 | ··stat: |
| 151425 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151425 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| 151426 | ··register:·file_exists | 151426 | ··register:·file_exists |
| 151427 | ··when: | 151427 | ··when: |
| 151428 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151429 | ··-·'"grub2-common"·in·ansible_facts.packages' | 151428 | ··-·'"grub2-common"·in·ansible_facts.packages' |
| 151429 | ··-·'"/boot/efi"·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 151430 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 151430 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 151431 | ··tags: | 151431 | ··tags: |
| 151432 | ··-·CJIS-5.5.2.2 | 151432 | ··-·CJIS-5.5.2.2 |
| 151433 | ··-·NIST-800-171-3.4.5 | 151433 | ··-·NIST-800-171-3.4.5 |
| 151434 | ··-·NIST-800-53-AC-6(1) | 151434 | ··-·NIST-800-53-AC-6(1) |
| 151435 | ··-·NIST-800-53-CM-6(a) | 151435 | ··-·NIST-800-53-CM-6(a) |
| 151436 | ··-·PCI-DSS-Req-7.1 | 151436 | ··-·PCI-DSS-Req-7.1 |
| Offset 151443, 16 lines modified | Offset 151443, 16 lines modified | ||
| 151443 | ··-·no_reboot_needed | 151443 | ··-·no_reboot_needed |
| 151444 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg | 151444 | -·name:·Ensure·owner·0·on·/boot/efi/EFI/redhat/grub.cfg |
| 151445 | ··file: | 151445 | ··file: |
| 151446 | ····path:·/boot/efi/EFI/redhat/grub.cfg | 151446 | ····path:·/boot/efi/EFI/redhat/grub.cfg |
| Max diff block lines reached; 9936/15512 bytes (64.05%) of diff not shown. | |||
| Offset 122486, 16 lines modified | Offset 122486, 16 lines modified | ||
| 122486 | ··-·no_reboot_needed | 122486 | ··-·no_reboot_needed |
| 122487 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122487 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122488 | ··stat: | 122488 | ··stat: |
| 122489 | ····path:·/boot/grub2/grub.cfg | 122489 | ····path:·/boot/grub2/grub.cfg |
| 122490 | ··register:·file_exists | 122490 | ··register:·file_exists |
| 122491 | ··when: | 122491 | ··when: |
| 122492 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122493 | ··-·'"grub2"·in·ansible_facts.packages' | 122492 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122493 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122494 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122494 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122495 | ··tags: | 122495 | ··tags: |
| 122496 | ··-·CCE-85849-8 | 122496 | ··-·CCE-85849-8 |
| 122497 | ··-·CJIS-5.5.2.2 | 122497 | ··-·CJIS-5.5.2.2 |
| 122498 | ··-·NIST-800-171-3.4.5 | 122498 | ··-·NIST-800-171-3.4.5 |
| 122499 | ··-·NIST-800-53-AC-6(1) | 122499 | ··-·NIST-800-53-AC-6(1) |
| 122500 | ··-·NIST-800-53-CM-6(a) | 122500 | ··-·NIST-800-53-CM-6(a) |
| Offset 122508, 16 lines modified | Offset 122508, 16 lines modified | ||
| 122508 | ··-·no_reboot_needed | 122508 | ··-·no_reboot_needed |
| 122509 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 122509 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 122510 | ··file: | 122510 | ··file: |
| 122511 | ····path:·/boot/grub2/grub.cfg | 122511 | ····path:·/boot/grub2/grub.cfg |
| 122512 | ····group:·'0' | 122512 | ····group:·'0' |
| 122513 | ··when: | 122513 | ··when: |
| 122514 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122515 | ··-·'"grub2"·in·ansible_facts.packages' | 122514 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122515 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122516 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122516 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122517 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 122517 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 122518 | ··tags: | 122518 | ··tags: |
| 122519 | ··-·CCE-85849-8 | 122519 | ··-·CCE-85849-8 |
| 122520 | ··-·CJIS-5.5.2.2 | 122520 | ··-·CJIS-5.5.2.2 |
| 122521 | ··-·NIST-800-171-3.4.5 | 122521 | ··-·NIST-800-171-3.4.5 |
| 122522 | ··-·NIST-800-53-AC-6(1) | 122522 | ··-·NIST-800-53-AC-6(1) |
| Offset 122526, 15 lines modified | Offset 122526, 15 lines modified | ||
| 122526 | ··-·configure_strategy | 122526 | ··-·configure_strategy |
| 122527 | ··-·file_groupowner_grub2_cfg | 122527 | ··-·file_groupowner_grub2_cfg |
| 122528 | ··-·low_complexity | 122528 | ··-·low_complexity |
| 122529 | ··-·low_disruption | 122529 | ··-·low_disruption |
| 122530 | ··-·medium_severity | 122530 | ··-·medium_severity |
| 122531 | ··-·no_reboot_needed</xccdf-1.2:fix> | 122531 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 122532 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 122532 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 122533 | if· | 122533 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 122534 | chgrp·0·/boot/grub2/grub.cfg | 122534 | chgrp·0·/boot/grub2/grub.cfg |
| 122535 | else | 122535 | else |
| 122536 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 122536 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 122537 | fi</xccdf-1.2:fix> | 122537 | fi</xccdf-1.2:fix> |
| 122538 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 122538 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 122639, 16 lines modified | Offset 122639, 16 lines modified | ||
| 122639 | ··-·no_reboot_needed | 122639 | ··-·no_reboot_needed |
| 122640 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122640 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122641 | ··stat: | 122641 | ··stat: |
| 122642 | ····path:·/boot/grub2/grub.cfg | 122642 | ····path:·/boot/grub2/grub.cfg |
| 122643 | ··register:·file_exists | 122643 | ··register:·file_exists |
| 122644 | ··when: | 122644 | ··when: |
| 122645 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122646 | ··-·'"grub2"·in·ansible_facts.packages' | 122645 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122646 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122647 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122647 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122648 | ··tags: | 122648 | ··tags: |
| 122649 | ··-·CCE-85848-0 | 122649 | ··-·CCE-85848-0 |
| 122650 | ··-·CJIS-5.5.2.2 | 122650 | ··-·CJIS-5.5.2.2 |
| 122651 | ··-·NIST-800-171-3.4.5 | 122651 | ··-·NIST-800-171-3.4.5 |
| 122652 | ··-·NIST-800-53-AC-6(1) | 122652 | ··-·NIST-800-53-AC-6(1) |
| 122653 | ··-·NIST-800-53-CM-6(a) | 122653 | ··-·NIST-800-53-CM-6(a) |
| Offset 122661, 16 lines modified | Offset 122661, 16 lines modified | ||
| 122661 | ··-·no_reboot_needed | 122661 | ··-·no_reboot_needed |
| 122662 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 122662 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 122663 | ··file: | 122663 | ··file: |
| 122664 | ····path:·/boot/grub2/grub.cfg | 122664 | ····path:·/boot/grub2/grub.cfg |
| 122665 | ····owner:·'0' | 122665 | ····owner:·'0' |
| 122666 | ··when: | 122666 | ··when: |
| 122667 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122668 | ··-·'"grub2"·in·ansible_facts.packages' | 122667 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122668 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122669 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122669 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122670 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 122670 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 122671 | ··tags: | 122671 | ··tags: |
| 122672 | ··-·CCE-85848-0 | 122672 | ··-·CCE-85848-0 |
| 122673 | ··-·CJIS-5.5.2.2 | 122673 | ··-·CJIS-5.5.2.2 |
| 122674 | ··-·NIST-800-171-3.4.5 | 122674 | ··-·NIST-800-171-3.4.5 |
| 122675 | ··-·NIST-800-53-AC-6(1) | 122675 | ··-·NIST-800-53-AC-6(1) |
| Offset 122679, 15 lines modified | Offset 122679, 15 lines modified | ||
| 122679 | ··-·configure_strategy | 122679 | ··-·configure_strategy |
| 122680 | ··-·file_owner_grub2_cfg | 122680 | ··-·file_owner_grub2_cfg |
| 122681 | ··-·low_complexity | 122681 | ··-·low_complexity |
| 122682 | ··-·low_disruption | 122682 | ··-·low_disruption |
| 122683 | ··-·medium_severity | 122683 | ··-·medium_severity |
| 122684 | ··-·no_reboot_needed</xccdf-1.2:fix> | 122684 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 122685 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 122685 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 122686 | if· | 122686 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 122687 | chown·0·/boot/grub2/grub.cfg | 122687 | chown·0·/boot/grub2/grub.cfg |
| 122688 | else | 122688 | else |
| 122689 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 122689 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 122690 | fi</xccdf-1.2:fix> | 122690 | fi</xccdf-1.2:fix> |
| 122691 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 122691 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 122785, 16 lines modified | Offset 122785, 16 lines modified | ||
| 122785 | ··-·no_reboot_needed | 122785 | ··-·no_reboot_needed |
| 122786 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122786 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122787 | ··stat: | 122787 | ··stat: |
| 122788 | ····path:·/boot/grub2/grub.cfg | 122788 | ····path:·/boot/grub2/grub.cfg |
| 122789 | ··register:·file_exists | 122789 | ··register:·file_exists |
| 122790 | ··when: | 122790 | ··when: |
| 122791 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122792 | ··-·'"grub2"·in·ansible_facts.packages' | 122791 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122792 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122793 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122793 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122794 | ··tags: | 122794 | ··tags: |
| 122795 | ··-·CCE-91426-7 | 122795 | ··-·CCE-91426-7 |
| 122796 | ··-·NIST-800-171-3.4.5 | 122796 | ··-·NIST-800-171-3.4.5 |
| 122797 | ··-·NIST-800-53-AC-6(1) | 122797 | ··-·NIST-800-53-AC-6(1) |
| 122798 | ··-·NIST-800-53-CM-6(a) | 122798 | ··-·NIST-800-53-CM-6(a) |
| 122799 | ··-·configure_strategy | 122799 | ··-·configure_strategy |
| Offset 122805, 31 lines modified | Offset 122805, 31 lines modified | ||
| 122805 | ··-·no_reboot_needed | 122805 | ··-·no_reboot_needed |
| 122806 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 122806 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 122807 | ··file: | 122807 | ··file: |
| 122808 | ····path:·/boot/grub2/grub.cfg | 122808 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1453/6888 bytes (21.09%) of diff not shown. | |||
| Offset 122488, 16 lines modified | Offset 122488, 16 lines modified | ||
| 122488 | ··-·no_reboot_needed | 122488 | ··-·no_reboot_needed |
| 122489 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122489 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122490 | ··stat: | 122490 | ··stat: |
| 122491 | ····path:·/boot/grub2/grub.cfg | 122491 | ····path:·/boot/grub2/grub.cfg |
| 122492 | ··register:·file_exists | 122492 | ··register:·file_exists |
| 122493 | ··when: | 122493 | ··when: |
| 122494 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122495 | ··-·'"grub2"·in·ansible_facts.packages' | 122494 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122495 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122496 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122496 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122497 | ··tags: | 122497 | ··tags: |
| 122498 | ··-·CCE-85849-8 | 122498 | ··-·CCE-85849-8 |
| 122499 | ··-·CJIS-5.5.2.2 | 122499 | ··-·CJIS-5.5.2.2 |
| 122500 | ··-·NIST-800-171-3.4.5 | 122500 | ··-·NIST-800-171-3.4.5 |
| 122501 | ··-·NIST-800-53-AC-6(1) | 122501 | ··-·NIST-800-53-AC-6(1) |
| 122502 | ··-·NIST-800-53-CM-6(a) | 122502 | ··-·NIST-800-53-CM-6(a) |
| Offset 122510, 16 lines modified | Offset 122510, 16 lines modified | ||
| 122510 | ··-·no_reboot_needed | 122510 | ··-·no_reboot_needed |
| 122511 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 122511 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 122512 | ··file: | 122512 | ··file: |
| 122513 | ····path:·/boot/grub2/grub.cfg | 122513 | ····path:·/boot/grub2/grub.cfg |
| 122514 | ····group:·'0' | 122514 | ····group:·'0' |
| 122515 | ··when: | 122515 | ··when: |
| 122516 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122517 | ··-·'"grub2"·in·ansible_facts.packages' | 122516 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122517 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122518 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122518 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122519 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 122519 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 122520 | ··tags: | 122520 | ··tags: |
| 122521 | ··-·CCE-85849-8 | 122521 | ··-·CCE-85849-8 |
| 122522 | ··-·CJIS-5.5.2.2 | 122522 | ··-·CJIS-5.5.2.2 |
| 122523 | ··-·NIST-800-171-3.4.5 | 122523 | ··-·NIST-800-171-3.4.5 |
| 122524 | ··-·NIST-800-53-AC-6(1) | 122524 | ··-·NIST-800-53-AC-6(1) |
| Offset 122528, 15 lines modified | Offset 122528, 15 lines modified | ||
| 122528 | ··-·configure_strategy | 122528 | ··-·configure_strategy |
| 122529 | ··-·file_groupowner_grub2_cfg | 122529 | ··-·file_groupowner_grub2_cfg |
| 122530 | ··-·low_complexity | 122530 | ··-·low_complexity |
| 122531 | ··-·low_disruption | 122531 | ··-·low_disruption |
| 122532 | ··-·medium_severity | 122532 | ··-·medium_severity |
| 122533 | ··-·no_reboot_needed</xccdf-1.2:fix> | 122533 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 122534 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 122534 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 122535 | if· | 122535 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 122536 | chgrp·0·/boot/grub2/grub.cfg | 122536 | chgrp·0·/boot/grub2/grub.cfg |
| 122537 | else | 122537 | else |
| 122538 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 122538 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 122539 | fi</xccdf-1.2:fix> | 122539 | fi</xccdf-1.2:fix> |
| 122540 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 122540 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 122641, 16 lines modified | Offset 122641, 16 lines modified | ||
| 122641 | ··-·no_reboot_needed | 122641 | ··-·no_reboot_needed |
| 122642 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122642 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122643 | ··stat: | 122643 | ··stat: |
| 122644 | ····path:·/boot/grub2/grub.cfg | 122644 | ····path:·/boot/grub2/grub.cfg |
| 122645 | ··register:·file_exists | 122645 | ··register:·file_exists |
| 122646 | ··when: | 122646 | ··when: |
| 122647 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122648 | ··-·'"grub2"·in·ansible_facts.packages' | 122647 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122648 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122649 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122649 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122650 | ··tags: | 122650 | ··tags: |
| 122651 | ··-·CCE-85848-0 | 122651 | ··-·CCE-85848-0 |
| 122652 | ··-·CJIS-5.5.2.2 | 122652 | ··-·CJIS-5.5.2.2 |
| 122653 | ··-·NIST-800-171-3.4.5 | 122653 | ··-·NIST-800-171-3.4.5 |
| 122654 | ··-·NIST-800-53-AC-6(1) | 122654 | ··-·NIST-800-53-AC-6(1) |
| 122655 | ··-·NIST-800-53-CM-6(a) | 122655 | ··-·NIST-800-53-CM-6(a) |
| Offset 122663, 16 lines modified | Offset 122663, 16 lines modified | ||
| 122663 | ··-·no_reboot_needed | 122663 | ··-·no_reboot_needed |
| 122664 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 122664 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 122665 | ··file: | 122665 | ··file: |
| 122666 | ····path:·/boot/grub2/grub.cfg | 122666 | ····path:·/boot/grub2/grub.cfg |
| 122667 | ····owner:·'0' | 122667 | ····owner:·'0' |
| 122668 | ··when: | 122668 | ··when: |
| 122669 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122670 | ··-·'"grub2"·in·ansible_facts.packages' | 122669 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122670 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122671 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122671 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122672 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 122672 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 122673 | ··tags: | 122673 | ··tags: |
| 122674 | ··-·CCE-85848-0 | 122674 | ··-·CCE-85848-0 |
| 122675 | ··-·CJIS-5.5.2.2 | 122675 | ··-·CJIS-5.5.2.2 |
| 122676 | ··-·NIST-800-171-3.4.5 | 122676 | ··-·NIST-800-171-3.4.5 |
| 122677 | ··-·NIST-800-53-AC-6(1) | 122677 | ··-·NIST-800-53-AC-6(1) |
| Offset 122681, 15 lines modified | Offset 122681, 15 lines modified | ||
| 122681 | ··-·configure_strategy | 122681 | ··-·configure_strategy |
| 122682 | ··-·file_owner_grub2_cfg | 122682 | ··-·file_owner_grub2_cfg |
| 122683 | ··-·low_complexity | 122683 | ··-·low_complexity |
| 122684 | ··-·low_disruption | 122684 | ··-·low_disruption |
| 122685 | ··-·medium_severity | 122685 | ··-·medium_severity |
| 122686 | ··-·no_reboot_needed</xccdf-1.2:fix> | 122686 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 122687 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 122687 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 122688 | if· | 122688 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 122689 | chown·0·/boot/grub2/grub.cfg | 122689 | chown·0·/boot/grub2/grub.cfg |
| 122690 | else | 122690 | else |
| 122691 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 122691 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 122692 | fi</xccdf-1.2:fix> | 122692 | fi</xccdf-1.2:fix> |
| 122693 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 122693 | ··············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 122787, 16 lines modified | Offset 122787, 16 lines modified | ||
| 122787 | ··-·no_reboot_needed | 122787 | ··-·no_reboot_needed |
| 122788 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122788 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122789 | ··stat: | 122789 | ··stat: |
| 122790 | ····path:·/boot/grub2/grub.cfg | 122790 | ····path:·/boot/grub2/grub.cfg |
| 122791 | ··register:·file_exists | 122791 | ··register:·file_exists |
| 122792 | ··when: | 122792 | ··when: |
| 122793 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122794 | ··-·'"grub2"·in·ansible_facts.packages' | 122793 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122794 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122795 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122795 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122796 | ··tags: | 122796 | ··tags: |
| 122797 | ··-·CCE-91426-7 | 122797 | ··-·CCE-91426-7 |
| 122798 | ··-·NIST-800-171-3.4.5 | 122798 | ··-·NIST-800-171-3.4.5 |
| 122799 | ··-·NIST-800-53-AC-6(1) | 122799 | ··-·NIST-800-53-AC-6(1) |
| 122800 | ··-·NIST-800-53-CM-6(a) | 122800 | ··-·NIST-800-53-CM-6(a) |
| 122801 | ··-·configure_strategy | 122801 | ··-·configure_strategy |
| Offset 122807, 31 lines modified | Offset 122807, 31 lines modified | ||
| 122807 | ··-·no_reboot_needed | 122807 | ··-·no_reboot_needed |
| 122808 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 122808 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 122809 | ··file: | 122809 | ··file: |
| 122810 | ····path:·/boot/grub2/grub.cfg | 122810 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1453/6888 bytes (21.09%) of diff not shown. | |||
| Offset 122358, 16 lines modified | Offset 122358, 16 lines modified | ||
| 122358 | ··-·no_reboot_needed | 122358 | ··-·no_reboot_needed |
| 122359 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122359 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122360 | ··stat: | 122360 | ··stat: |
| 122361 | ····path:·/boot/grub2/grub.cfg | 122361 | ····path:·/boot/grub2/grub.cfg |
| 122362 | ··register:·file_exists | 122362 | ··register:·file_exists |
| 122363 | ··when: | 122363 | ··when: |
| 122364 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122365 | ··-·'"grub2"·in·ansible_facts.packages' | 122364 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122365 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122366 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122366 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122367 | ··tags: | 122367 | ··tags: |
| 122368 | ··-·CCE-85849-8 | 122368 | ··-·CCE-85849-8 |
| 122369 | ··-·CJIS-5.5.2.2 | 122369 | ··-·CJIS-5.5.2.2 |
| 122370 | ··-·NIST-800-171-3.4.5 | 122370 | ··-·NIST-800-171-3.4.5 |
| 122371 | ··-·NIST-800-53-AC-6(1) | 122371 | ··-·NIST-800-53-AC-6(1) |
| 122372 | ··-·NIST-800-53-CM-6(a) | 122372 | ··-·NIST-800-53-CM-6(a) |
| Offset 122380, 16 lines modified | Offset 122380, 16 lines modified | ||
| 122380 | ··-·no_reboot_needed | 122380 | ··-·no_reboot_needed |
| 122381 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg | 122381 | -·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg |
| 122382 | ··file: | 122382 | ··file: |
| 122383 | ····path:·/boot/grub2/grub.cfg | 122383 | ····path:·/boot/grub2/grub.cfg |
| 122384 | ····group:·'0' | 122384 | ····group:·'0' |
| 122385 | ··when: | 122385 | ··when: |
| 122386 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122387 | ··-·'"grub2"·in·ansible_facts.packages' | 122386 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122387 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122388 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122388 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122389 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 122389 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 122390 | ··tags: | 122390 | ··tags: |
| 122391 | ··-·CCE-85849-8 | 122391 | ··-·CCE-85849-8 |
| 122392 | ··-·CJIS-5.5.2.2 | 122392 | ··-·CJIS-5.5.2.2 |
| 122393 | ··-·NIST-800-171-3.4.5 | 122393 | ··-·NIST-800-171-3.4.5 |
| 122394 | ··-·NIST-800-53-AC-6(1) | 122394 | ··-·NIST-800-53-AC-6(1) |
| Offset 122398, 15 lines modified | Offset 122398, 15 lines modified | ||
| 122398 | ··-·configure_strategy | 122398 | ··-·configure_strategy |
| 122399 | ··-·file_groupowner_grub2_cfg | 122399 | ··-·file_groupowner_grub2_cfg |
| 122400 | ··-·low_complexity | 122400 | ··-·low_complexity |
| 122401 | ··-·low_disruption | 122401 | ··-·low_disruption |
| 122402 | ··-·medium_severity | 122402 | ··-·medium_severity |
| 122403 | ··-·no_reboot_needed</xccdf-1.2:fix> | 122403 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 122404 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 122404 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_groupowner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 122405 | if· | 122405 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 122406 | chgrp·0·/boot/grub2/grub.cfg | 122406 | chgrp·0·/boot/grub2/grub.cfg |
| 122407 | else | 122407 | else |
| 122408 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 122408 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 122409 | fi</xccdf-1.2:fix> | 122409 | fi</xccdf-1.2:fix> |
| 122410 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 122410 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 122511, 16 lines modified | Offset 122511, 16 lines modified | ||
| 122511 | ··-·no_reboot_needed | 122511 | ··-·no_reboot_needed |
| 122512 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122512 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122513 | ··stat: | 122513 | ··stat: |
| 122514 | ····path:·/boot/grub2/grub.cfg | 122514 | ····path:·/boot/grub2/grub.cfg |
| 122515 | ··register:·file_exists | 122515 | ··register:·file_exists |
| 122516 | ··when: | 122516 | ··when: |
| 122517 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122518 | ··-·'"grub2"·in·ansible_facts.packages' | 122517 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122518 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122519 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122519 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122520 | ··tags: | 122520 | ··tags: |
| 122521 | ··-·CCE-85848-0 | 122521 | ··-·CCE-85848-0 |
| 122522 | ··-·CJIS-5.5.2.2 | 122522 | ··-·CJIS-5.5.2.2 |
| 122523 | ··-·NIST-800-171-3.4.5 | 122523 | ··-·NIST-800-171-3.4.5 |
| 122524 | ··-·NIST-800-53-AC-6(1) | 122524 | ··-·NIST-800-53-AC-6(1) |
| 122525 | ··-·NIST-800-53-CM-6(a) | 122525 | ··-·NIST-800-53-CM-6(a) |
| Offset 122533, 16 lines modified | Offset 122533, 16 lines modified | ||
| 122533 | ··-·no_reboot_needed | 122533 | ··-·no_reboot_needed |
| 122534 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg | 122534 | -·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg |
| 122535 | ··file: | 122535 | ··file: |
| 122536 | ····path:·/boot/grub2/grub.cfg | 122536 | ····path:·/boot/grub2/grub.cfg |
| 122537 | ····owner:·'0' | 122537 | ····owner:·'0' |
| 122538 | ··when: | 122538 | ··when: |
| 122539 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122540 | ··-·'"grub2"·in·ansible_facts.packages' | 122539 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122540 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122541 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122541 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122542 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists | 122542 | ··-·file_exists.stat·is·defined·and·file_exists.stat.exists |
| 122543 | ··tags: | 122543 | ··tags: |
| 122544 | ··-·CCE-85848-0 | 122544 | ··-·CCE-85848-0 |
| 122545 | ··-·CJIS-5.5.2.2 | 122545 | ··-·CJIS-5.5.2.2 |
| 122546 | ··-·NIST-800-171-3.4.5 | 122546 | ··-·NIST-800-171-3.4.5 |
| 122547 | ··-·NIST-800-53-AC-6(1) | 122547 | ··-·NIST-800-53-AC-6(1) |
| Offset 122551, 15 lines modified | Offset 122551, 15 lines modified | ||
| 122551 | ··-·configure_strategy | 122551 | ··-·configure_strategy |
| 122552 | ··-·file_owner_grub2_cfg | 122552 | ··-·file_owner_grub2_cfg |
| 122553 | ··-·low_complexity | 122553 | ··-·low_complexity |
| 122554 | ··-·low_disruption | 122554 | ··-·low_disruption |
| 122555 | ··-·medium_severity | 122555 | ··-·medium_severity |
| 122556 | ··-·no_reboot_needed</xccdf-1.2:fix> | 122556 | ··-·no_reboot_needed</xccdf-1.2:fix> |
| 122557 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms | 122557 | ··········<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="file_owner_grub2_cfg"·complexity="low"·disruption="low"·reboot="false"·strategy="configure">#·Remediation·is·applicable·only·in·certain·platforms |
| 122558 | if· | 122558 | if·rpm·--quiet·-q·grub2·&&·[·!·-f·/sys/firmware/efi·]·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 122559 | chown·0·/boot/grub2/grub.cfg | 122559 | chown·0·/boot/grub2/grub.cfg |
| 122560 | else | 122560 | else |
| 122561 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 122561 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 122562 | fi</xccdf-1.2:fix> | 122562 | fi</xccdf-1.2:fix> |
| 122563 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 122563 | ··········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| Offset 122657, 16 lines modified | Offset 122657, 16 lines modified | ||
| 122657 | ··-·no_reboot_needed | 122657 | ··-·no_reboot_needed |
| 122658 | -·name:·Test·for·existence·/boot/grub2/grub.cfg | 122658 | -·name:·Test·for·existence·/boot/grub2/grub.cfg |
| 122659 | ··stat: | 122659 | ··stat: |
| 122660 | ····path:·/boot/grub2/grub.cfg | 122660 | ····path:·/boot/grub2/grub.cfg |
| 122661 | ··register:·file_exists | 122661 | ··register:·file_exists |
| 122662 | ··when: | 122662 | ··when: |
| 122663 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122664 | ··-·'"grub2"·in·ansible_facts.packages' | 122663 | ··-·'"grub2"·in·ansible_facts.packages' |
| 122664 | ··-·'"/boot/efi"·not·in·ansible_mounts·|·map(attribute="mount")·|·list' | ||
| 122665 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 122665 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 122666 | ··tags: | 122666 | ··tags: |
| 122667 | ··-·CCE-91426-7 | 122667 | ··-·CCE-91426-7 |
| 122668 | ··-·NIST-800-171-3.4.5 | 122668 | ··-·NIST-800-171-3.4.5 |
| 122669 | ··-·NIST-800-53-AC-6(1) | 122669 | ··-·NIST-800-53-AC-6(1) |
| 122670 | ··-·NIST-800-53-CM-6(a) | 122670 | ··-·NIST-800-53-CM-6(a) |
| 122671 | ··-·configure_strategy | 122671 | ··-·configure_strategy |
| Offset 122677, 31 lines modified | Offset 122677, 31 lines modified | ||
| 122677 | ··-·no_reboot_needed | 122677 | ··-·no_reboot_needed |
| 122678 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg | 122678 | -·name:·Ensure·permission·u-xs,g-xwrs,o-xwrt·on·/boot/grub2/grub.cfg |
| 122679 | ··file: | 122679 | ··file: |
| 122680 | ····path:·/boot/grub2/grub.cfg | 122680 | ····path:·/boot/grub2/grub.cfg |
| Max diff block lines reached; 1445/6864 bytes (21.05%) of diff not shown. | |||